{"updated": "2026-10-24T07:47:24.503013+00:00", "window_hours": 168, "sources": {"nvd-source": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "kev": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "nvd": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "cvelist": {"ok": 1, "miss": 0, "fail": 0, "last": "HTTP 200", "disabled": false}, "cveorg": {"ok": 5, "miss": 0, "fail": 0, "last": "HTTP 200", "disabled": false}, "epss": {"ok": 136, "miss": 0, "fail": 0, "disabled": false}, "exploitdb": {"ok": 1, "miss": 0, "fail": 0, "last": "HTTP 200", "disabled": false}, "metasploit": {"ok": 1, "miss": 0, "fail": 0, "last": "HTTP 200", "disabled": false}, "nuclei": {"ok": 1, "miss": 0, "fail": 0, "last": "HTTP 200", "disabled": false}, "f-cisaalertsandadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-cisaicsadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-cisaknownexploitedblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-ncscuk": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certeu": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certfralerts": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certfradvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-bsicertbund": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-jpcertcc": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-jvn": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certccvulnerabilitynotes": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-canadiancybercentre": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-australianacsc": {"ok": 0, "miss": 0, "fail": 1, "last": "ReadTimeout", "disabled": false}, "f-hkcert": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certinindia": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certsesweden": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-ncscnetherlands": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-csirtitalia": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certpolska": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-certua": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-uscertnvdrecentnist": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-dhsicscertalerts": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-microsoftmsrcupdateguide": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-ciscosecurityadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-oraclesecurityalerts": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-adobesecuritybulletins": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 403", "disabled": false}, "f-fortinetpsirt": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-paloaltonetworks": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-citrixsecuritybulletins": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-vmwarebroadcom": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-junipersecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sonicwallpsirt": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-f5securityadvisories": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-applesecurityupdates": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-googlechromereleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-androidsecuritybulletins": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-googlecloudsecuritybulle": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-awssecuritybulletins": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-mozillasecurityadvisorie": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-atlassiansecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-gitlabsecurityreleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sapsecuritynotes": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-ibmpsirt": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-intelsecurityadvisories": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 403", "disabled": false}, "f-siemensproductcert": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-ivantisecurityadvisories": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-redhatproductsecurityblo": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-ubuntusecuritynotices": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-debiansecurityadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-amazonlinux2023alas": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-amazonlinux2alas": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-archlinuxadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-gentooglsa": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-freebsdsecurityadvisorie": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-susesecurityannounce": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-rockylinuxerrata": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-almalinuxerrata": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-alpinesecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-linuxkernelcveannounce": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-nodejsvulnerabilities": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-kubernetesofficialcvefee": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-jenkinssecurityadvisorie": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-drupalsecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-wordpresscorereleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-wordfenceintelligence": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-springsecurityadvisories": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-apachetomcatsecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-nginxsecurityadvisories": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-opensslvulnerabilities": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-curlsecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-postgresqlsecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-zerodayinitiativepublish": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-googleprojectzero": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 200", "disabled": false}, "f-ciscotalos": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-talosvulnerabilityreport": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-unit42paloalto": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-rapid7blog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-tenableresearchadvisorie": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-qualysblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-mandiantgooglecloudthrea": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-microsoftsecurityblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-watchtowrlabs": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-horizon3ai": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-greynoiselabs": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 403", "disabled": false}, "f-vulncheckblog": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-wizresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-checkpointresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-packetstormfiles": {"ok": 0, "miss": 0, "fail": 1, "last": "SSLError", "disabled": false}, "f-exploitdblatest": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-osssecuritylist": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sansinternetstormcenter": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-bleepingcomputer": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-thehackernews": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-krebsonsecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-securityweek": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-therecord": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-helpnetsecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-theregistersecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-arstechnicasecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-securityaffairs": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-trailofbits": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-portswiggerresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-nccgroupresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sentinelonelabs": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-elasticsecuritylabs": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 200", "disabled": false}, "f-datadogsecuritylabs": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-volexity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-huntress": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-kasperskysecurelist": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-esetwelivesecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sophosthreatresearch": {"ok": 0, "miss": 0, "fail": 1, "last": "ReadTimeout", "disabled": false}, "f-malwarebyteslabs": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-crowdstrikeblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-aquasecurityblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-sysdigthreatresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-snyksecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-jfrogsecurityresearch": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-proofpointthreatinsight": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-zerodayinitiativeupcoming": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-fulldisclosureseclists": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-bugtraqseclists": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-darkreading": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-schneieronsecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-lwnnetsecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-githubsecurityblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-cloudflaresecurityblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-govulnerabilitydatabase": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 400", "disabled": false}, "f-rustblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-djangoweblog": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-rubynews": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-phpreleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-redisreleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-elasticsecurityannouncements": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-grafanareleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-dockerenginereleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-kubernetesreleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-gitreleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-linuxkernelstablereleases": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-zerodayinitiativepublishedtrend": {"ok": 0, "miss": 0, "fail": 1, "last": "SSLError", "disabled": false}, "f-ubuntublogsecurity": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 404", "disabled": false}, "f-fedoramagazine": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-opensusesecurity": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-nixossecuritytracker": {"ok": 1, "miss": 0, "fail": 0, "disabled": false}, "f-oraclelinuxblog": {"ok": 0, "miss": 0, "fail": 1, "last": "HTTP 403", "disabled": false}, "debian": {"ok": 3, "miss": 0, "fail": 0, "disabled": false}, "alpine": {"ok": 30, "miss": 0, "fail": 0, "disabled": false}, "msrc": {"ok": 6, "miss": 0, "fail": 0, "disabled": false}, "ghsa": {"ok": 120, "miss": 0, "fail": 0, "disabled": false}, "osv": {"ok": 47, "miss": 73, "fail": 0, "disabled": false}, "suse": {"ok": 0, "miss": 120, "fail": 0, "disabled": false}, "arch": {"ok": 0, "miss": 120, "fail": 0, "disabled": false}, "fedora": {"ok": 120, "miss": 0, "fail": 0, "disabled": false}, "ubuntu": {"ok": 3, "miss": 8, "fail": 25, "disabled": true}, "redhat": {"ok": 15, "miss": 105, "fail": 0, "disabled": false}, "amazon": {"ok": 10, "miss": 110, "fail": 0, "disabled": false}, "poc": {"ok": 6, "miss": 114, "fail": 0, "disabled": false}, "trickest": {"ok": 25, "miss": 95, "fail": 0, "disabled": false}, "vulnrichment": {"ok": 113, "miss": 7, "fail": 0, "disabled": false}}, "items": [{"id": "CVE-2026-115975", "publisher": "Grayback", "title": "Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit", "summary": "Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T07:39:34.357Z", "modified": "2026-10-24T07:39:34.357Z", "products": [{"name": "cervantes", "vendor": "cervantessec", "type": "app", "affected": [">= alpha 0.3 and <= 1.3-beta"], "fixed": "newer than 1.3-beta", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cervantes || rpm -q cervantes || cervantes --version"}, {"label": "2. UPGRADE to newer than 1.3-beta (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cervantes"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cervantes"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115975"}, {"t": "Patch", "u": "https://www.grayback.es/advisories"}, {"t": "Patch", "u": "https://www.grayback.es/en/advisories"}], "cwe": ["CWE-862"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "from_cna": true, "pinned": false}, {"id": "CVE-2026-115803", "publisher": "VulDB", "title": "A flaw has been found in Scada-LTS 2.8.0", "summary": "A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: \"At this moment we are working on new release with security enhancements ", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T07:16:46.637", "modified": "2026-10-24T07:16:46.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115803"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115802", "publisher": "VulDB", "title": "A weakness has been identified in InternScience InternAgent 1.5.0", "summary": "A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T07:16:46.273", "modified": "2026-10-24T07:16:46.273", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115802"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-108013", "publisher": "HCL Software", "title": "BigFix Platform uses Mozilla CA certificate bundle (PEM)", "summary": "BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES", "cvss": 6.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T07:16:44.990", "modified": "2026-10-24T07:16:44.990", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108013"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-97353", "publisher": "WPScan", "title": "The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership chec", "summary": "The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX actions, allowing users with subscriber-level access and above to write arbitrary post meta, under attacker-chosen keys, to any post including those owned by other users. This can be used to overwrite protected core metadata and tamper with content created by higher-privile", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:37.610", "modified": "2026-10-24T06:16:37.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97353"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-97352", "publisher": "WPScan", "title": "The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of ", "summary": "The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the WordPress.org repository.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:37.443", "modified": "2026-10-24T06:16:37.443", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97352"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-87835", "publisher": "WPScan", "title": "The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may s", "summary": "The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and paid, bypassing the Front End Users WordPress plugin through 3.2.35's content restrictions and its registration gating.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:37.320", "modified": "2026-10-24T06:16:37.320", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87835"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-114429", "publisher": "WPScan", "title": "The WPVR  WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content", "summary": "The WPVR  WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before storing it and outputting it on the front end, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected tour.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:37.173", "modified": "2026-10-24T06:16:37.173", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114429"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113674", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited, allowing unauthenticated attackers to modify, unpublish, attach images to, or reassign any guest-submitted listing when guest posting is enabled.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:37.027", "modified": "2026-10-24T06:16:37.027", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113674"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113673", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not properly escape administrator-defined text before w", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remote Code Execution that any unauthenticated visitor can trigger.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.907", "modified": "2026-10-24T06:16:36.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113673"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113493", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attri", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them within a style attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of any user viewing the affected content.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.773", "modified": "2026-10-24T06:16:36.773", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113493"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113492", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not perform status, ownership or password checks when l", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing unauthenticated users to disclose the content of non-public (draft, pending and private) listings by supplying their IDs.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.617", "modified": "2026-10-24T06:16:36.617", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113492"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113491", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it ", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server, limited to file names that carry an allowed media extension. A disclosed file is re-published at a public URL and its original is deleted as a side effect.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.503", "modified": "2026-10-24T06:16:36.503", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113491"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113490", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not perform any status or ownership check when renderin", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's map-popup through one of its single-item REST routes, allowing unauthenticated users to read the title, permalink and card fields of non-public (draft, pending, private and trashed) listings by supplying the listing ID.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.383", "modified": "2026-10-24T06:16:36.383", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113490"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-113489", "publisher": "WPScan", "title": "The GeoDirectory  WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the ", "summary": "The GeoDirectory  WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, moderation status and featured flag of images belonging to other users' listings, and to claim another user's image as their own featured image.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.260", "modified": "2026-10-24T06:16:36.260", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113489"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-112207", "publisher": "WPScan", "title": "The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to t", "summary": "The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the response in the page, which allows unauthenticated attackers to execute arbitrary JavaScript in the browser of any user who is tricked into clicking a crafted link.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.143", "modified": "2026-10-24T06:16:36.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112207"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-110956", "publisher": "WPScan", "title": "The asVereinbase  WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor b", "summary": "The asVereinbase  WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match, so an unauthenticated attacker can log in as any user, including an administrator.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:36.010", "modified": "2026-10-24T06:16:36.010", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110956"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-107907", "publisher": "WPScan", "title": "The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling", "summary": "The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a minimal role to permanently delete arbitrary posts, pages, attachments and other content belonging to other users.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:35.877", "modified": "2026-10-24T06:16:35.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107907"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-107887", "publisher": "WPScan", "title": "The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on", "summary": "The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active  site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:35.727", "modified": "2026-10-24T06:16:35.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107887"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-105199", "publisher": "WPScan", "title": "The Pixel Tag Manager for WooCommerce  WordPress plugin before 2.2.3 does not perform a capability check in on", "summary": "The Pixel Tag Manager for WooCommerce  WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and exposes the nonce protecting it to any user able to access the admin dashboard, allowing users with a role as low as Contributor to overwrite the Pixel Tag Manager for WooCommerce  WordPress plugin before 2.2.3's tracking configuration and have arbitrary JavaScript executed in the browsers of all visitors, inclu", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T06:16:34.453", "modified": "2026-10-24T06:16:34.453", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105199"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115807", "publisher": "Wordfence", "title": "The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for Word", "summary": "The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the Gutenberg Register block passing the attacker-controlled Assigned Role attribute directly into the `[wppb-register]` shortcode without server-side authorization. The role guard in the form builder only downgrades roles that ", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T05:17:06.500", "modified": "2026-10-24T05:17:06.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115807"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115806", "publisher": "Wordfence", "title": "The Prime Mover \u2013 Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versi", "summary": "The Prime Mover \u2013 Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An unauthenticated attacker can store a crafted, base64-encoded serialized object in wp_comments.comment_content through the standard comment-submission endpoint (wp-comments-post.php). When a", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T05:17:04.900", "modified": "2026-10-24T05:17:04.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115806"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-96185", "publisher": "Microsoft Corporation", "title": "Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a ", "summary": "Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:19:53.850", "modified": "2026-10-24T04:18:28.910", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96185"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.44638, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96185", "date": "2026-10-22"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-95714", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacke", "summary": "A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.453", "modified": "2026-10-24T04:18:28.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95714"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07589, "pinned": false}, {"id": "CVE-2026-95711", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthen", "summary": "An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.880", "modified": "2026-10-24T04:18:28.600", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95711"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04247, "pinned": false}, {"id": "CVE-2026-95709", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated ", "summary": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00367, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.660", "modified": "2026-10-24T04:18:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95709"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29405, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-95708", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated ", "summary": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00367, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.553", "modified": "2026-10-24T04:18:28.340", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95708"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29405, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-95707", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker wit", "summary": "A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00367, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.447", "modified": "2026-10-24T04:18:28.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95707"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29406, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-95706", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attac", "summary": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.337", "modified": "2026-10-24T04:18:28.057", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95706"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2654, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-95705", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attac", "summary": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.230", "modified": "2026-10-24T04:18:27.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95705"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2654, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-95704", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the web-based management interface of wireless network management systems could allow an au", "summary": "A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.120", "modified": "2026-10-24T04:18:27.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95704"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2654, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-94422", "publisher": "Red Hat, Inc.", "title": "An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to", "summary": "An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00693, "kev": false, "added": "2026-10-02", "pub": "2026-10-02T14:17:12.003", "modified": "2026-10-24T04:18:27.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94422"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.52385, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3185 (important): xdg-dbus-proxy", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3185.html", "date": "2026-10-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-93640", "publisher": "Rapid7, Inc.", "title": "A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS", "summary": "A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without restricting the configuration path. An attacker can supply a configuration that retains root privileges and disables the chroot. Include directives exp", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.757", "modified": "2026-10-24T04:18:27.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93640"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-93489", "publisher": "ASUS", "title": "Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request a", "summary": "Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations.\nRefer to the ' Security Update for ASUS Router Firmware\u00a0' section on the ASUS Security Advisory for more information.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00189, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.720", "modified": "2026-10-24T04:18:27.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93489"}], "cwe": ["CWE-287"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08052, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91504", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal S", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 7.5 (Confident", "cvss": 7.5, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.893", "modified": "2026-10-24T04:18:27.140", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91504"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.18144, "pinned": false}, {"id": "CVE-2026-91503", "publisher": "Oracle", "title": "Vulnerability in the VPD component of Oracle Database Server", "summary": "Vulnerability in the VPD component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32, 21.3-21.23 and  23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise VPD.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all VPD accessible dat", "cvss": 8.1, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.780", "modified": "2026-10-24T04:18:27.000", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91503"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19181, "pinned": false}, {"id": "CVE-2026-91502", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle WebLog", "cvss": 7.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.670", "modified": "2026-10-24T04:18:26.860", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91502"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22047, "pinned": false}, {"id": "CVE-2026-91501", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager executes to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.560", "modified": "2026-10-24T04:18:26.713", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91501"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03443, "pinned": false}, {"id": "CVE-2026-91499", "publisher": "Oracle", "title": "Vulnerability in the RDBMS component of Oracle Database Server", "summary": "Vulnerability in the RDBMS component of Oracle Database Server.  Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS.  Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/A", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.450", "modified": "2026-10-24T04:18:26.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91499"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37853, "pinned": false}, {"id": "CVE-2026-91496", "publisher": "Oracle", "title": "Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)", "summary": "Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Workflow.  Successful attacks of this vulnerability can result in takeover of Workflow. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Ve", "cvss": 7.5, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:54.220", "modified": "2026-10-24T04:18:26.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91496"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.26894, "pinned": false}, {"id": "CVE-2026-91494", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Ga", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to cri", "cvss": 7.4, "sev": "HIGH", "epss": 0.00318, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.987", "modified": "2026-10-24T04:18:26.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91494"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23539, "pinned": false}, {"id": "CVE-2026-91493", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Ga", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all", "cvss": 7.5, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.870", "modified": "2026-10-24T04:18:25.963", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91493"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21834, "pinned": false}, {"id": "CVE-2026-91492", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector.  While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (s", "cvss": 8.7, "sev": "HIGH", "epss": 0.00257, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.733", "modified": "2026-10-24T04:18:25.733", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91492"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16398, "pinned": false}, {"id": "CVE-2026-91489", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Ga", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 7.1, "sev": "HIGH", "epss": 0.00116, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.390", "modified": "2026-10-24T04:18:25.503", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91489"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01555, "pinned": false}, {"id": "CVE-2026-91488", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 7.1, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.277", "modified": "2026-10-24T04:18:25.257", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91488"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03766, "pinned": false}, {"id": "CVE-2026-91487", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Compiler)", "summary": "Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerabilit", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00177, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.160", "modified": "2026-10-24T04:18:25.067", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91487"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06926, "pinned": false}, {"id": "CVE-2026-91486", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: ", "summary": "Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN General Ledger Brazil executes to compromise PeopleSoft Enterprise FIN General Ledger Brazil.  Successful attacks of this vulnerability can resul", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00103, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:53.037", "modified": "2026-10-24T04:18:24.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91486"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00947, "pinned": false}, {"id": "CVE-2026-91485", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash M", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Cash Management executes to compromise PeopleSoft Enterprise FIN Cash Management.  Successful attacks require human interaction from a person other", "cvss": 3.8, "sev": "LOW", "epss": 0.00111, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:52.913", "modified": "2026-10-24T04:18:24.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91485"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01263, "pinned": false}, {"id": "CVE-2026-91484", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Java plugin)", "summary": "Vulnerability in Oracle Java SE (component: Java plugin).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  While the vulnerability is in Oracle Java SE, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerab", "cvss": 7.5, "sev": "HIGH", "epss": 0.0012, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:52.800", "modified": "2026-10-24T04:18:24.580", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91484"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01759, "pinned": false}, {"id": "CVE-2026-91483", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful a", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.927", "modified": "2026-10-24T04:18:24.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91483"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0465, "pinned": false}, {"id": "CVE-2026-91482", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bid", "summary": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.800", "modified": "2026-10-24T04:18:24.300", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91482"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28065, "pinned": false}, {"id": "CVE-2026-91481", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Re", "summary": "Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Ente", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.687", "modified": "2026-10-24T04:18:24.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91481"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11, "pinned": false}, {"id": "CVE-2026-91480", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Str", "summary": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.573", "modified": "2026-10-24T04:18:24.017", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91480"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28064, "pinned": false}, {"id": "CVE-2026-91479", "publisher": "Oracle", "title": "Vulnerability in the RDBMS component of Oracle Database Server", "summary": "Vulnerability in the RDBMS component of Oracle Database Server.  Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the RDBMS executes to compromise RDBMS.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.460", "modified": "2026-10-24T04:18:23.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91479"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13503, "pinned": false}, {"id": "CVE-2026-91477", "publisher": "Oracle", "title": "Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX)", "summary": "Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle JavaFX: 25.0.4 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized re", "cvss": 3.1, "sev": "LOW", "epss": 0.00228, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.237", "modified": "2026-10-24T04:18:23.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91477"}], "cwe": ["CWE-922"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12848, "pinned": false}, {"id": "CVE-2026-91476", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of PeopleSoft Enterprise ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.120", "modified": "2026-10-24T04:18:23.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91476"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.2329, "pinned": false}, {"id": "CVE-2026-91475", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, delet", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:51.000", "modified": "2026-10-24T04:18:23.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91475"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0332, "pinned": false}, {"id": "CVE-2026-91474", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise FIN Common Objects Brazil executes to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Succe", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00228, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.887", "modified": "2026-10-24T04:18:23.260", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91474"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.128, "pinned": false}, {"id": "CVE-2026-91473", "publisher": "Oracle", "title": "Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)", "summary": "Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server.  Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiali", "cvss": 7.8, "sev": "HIGH", "epss": 0.00151, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.773", "modified": "2026-10-24T04:18:23.117", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91473"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03938, "pinned": false}, {"id": "CVE-2026-91471", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (compone", "summary": "Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to som", "cvss": 3.7, "sev": "LOW", "epss": 0.00198, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.670", "modified": "2026-10-24T04:18:22.963", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91471"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08989, "pinned": false}, {"id": "CVE-2026-91467", "publisher": "Oracle", "title": "Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framewor", "summary": "Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Fus", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.440", "modified": "2026-10-24T04:18:22.807", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91467"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09816, "pinned": false}, {"id": "CVE-2026-91466", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (componen", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Argentina.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of th", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.330", "modified": "2026-10-24T04:18:22.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91466"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15904, "pinned": false}, {"id": "CVE-2026-91465", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (componen", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise PeopleSoft Enterprise FIN Common Objects Argentina.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete ac", "cvss": 7.5, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.220", "modified": "2026-10-24T04:18:22.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91465"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21838, "pinned": false}, {"id": "CVE-2026-91464", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access v", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:50.100", "modified": "2026-10-24T04:18:22.347", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91464"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19597, "pinned": false}, {"id": "CVE-2026-91463", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access v", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.977", "modified": "2026-10-24T04:18:22.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91463"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12734, "pinned": false}, {"id": "CVE-2026-91462", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network acc", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.857", "modified": "2026-10-24T04:18:22.037", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91462"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.195, "pinned": false}, {"id": "CVE-2026-91461", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access v", "cvss": 3.7, "sev": "LOW", "epss": 0.00198, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.740", "modified": "2026-10-24T04:18:21.870", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91461"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08988, "pinned": false}, {"id": "CVE-2026-91460", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In I", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.637", "modified": "2026-10-24T04:18:21.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91460"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04649, "pinned": false}, {"id": "CVE-2026-91459", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In I", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.527", "modified": "2026-10-24T04:18:21.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91459"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04649, "pinned": false}, {"id": "CVE-2026-91458", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful a", "cvss": 7.8, "sev": "HIGH", "epss": 0.00124, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.417", "modified": "2026-10-24T04:18:21.217", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91458"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01961, "pinned": false}, {"id": "CVE-2026-91093", "publisher": "HP Inc.", "title": "A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might", "summary": "A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation\n               of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.", "cvss": 8.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T19:17:45.287", "modified": "2026-10-24T04:18:21.037", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91093"}], "cwe": ["CWE-427"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-83363", "publisher": "Oracle", "title": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite", "summary": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector.  Successful attacks of this vulnerability can result in takeover of Oracle Contract Lifecycle M", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:52.780", "modified": "2026-10-24T04:18:20.853", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83363"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37856, "pinned": false}, {"id": "CVE-2026-79956", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote att", "summary": "A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:02.303", "modified": "2026-10-24T04:18:20.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79956"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2654, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79892", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute ", "summary": "A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00118, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.767", "modified": "2026-10-24T04:18:20.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79892"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01649, "pinned": false}, {"id": "CVE-2026-79891", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthentica", "summary": "A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.663", "modified": "2026-10-24T04:18:20.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79891"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.16224, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79890", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution ", "summary": "There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.557", "modified": "2026-10-24T04:18:20.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79890"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1405, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79889", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote att", "summary": "Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.457", "modified": "2026-10-24T04:18:19.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79889"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1405, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79888", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote att", "summary": "A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.350", "modified": "2026-10-24T04:18:19.757", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79888"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14049, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79887", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote", "summary": "A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.247", "modified": "2026-10-24T04:18:19.587", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79887"}], "cwe": ["CWE-94", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.16225, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79858", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8", "summary": "An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.083", "modified": "2026-10-24T04:18:19.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79858"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28341, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79857", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of ", "summary": "There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00393, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.963", "modified": "2026-10-24T04:18:19.337", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79857"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32319, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79856", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remot", "summary": "A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.857", "modified": "2026-10-24T04:18:19.187", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79856"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28342, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79855", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to", "summary": "An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00422, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.743", "modified": "2026-10-24T04:18:19.057", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79855"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35444, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79854", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct ", "summary": "A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.627", "modified": "2026-10-24T04:18:18.923", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79854"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28341, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79852", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to", "summary": "A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.410", "modified": "2026-10-24T04:18:18.780", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79852"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28343, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-75779", "publisher": "ASUS", "title": "Improper Neutralization of Special\nElements used in an OS Command (\u201cOS Command Injection\u201d) and Cross-Site Requ", "summary": "Improper Neutralization of Special\nElements used in an OS Command (\u201cOS Command Injection\u201d) and Cross-Site Request\nForgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in\nadministrator into visiting a phishing website, causing the router to execute\narbitrary commands with root privileges.\nRefer to the '\nSecurity Update for ASUS Router Firmware\u00a0' section on the ASUS Security Advisory for more information.", "cvss": 8.6, "sev": "HIGH", "epss": 0.01044, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.587", "modified": "2026-10-24T04:18:18.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75779"}], "cwe": ["CWE-78", "CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.63852, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-75775", "publisher": "ASUS", "title": "Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user t", "summary": "Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router Firmware\u00a0' section on the ASUS Security Advisory for more information.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.443", "modified": "2026-10-24T04:18:18.413", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75775"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40223, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-50057", "publisher": "Rapid7, Inc.", "title": "A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix", "summary": "A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installed sudo policy permits passwordless root execution of Postfix administration commands without restricting their arguments. An attacker can select a zimbra-controlled daemon_directory in the Postfix configuration and invoke postfix set-permissions, causing Postfix to execute", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.303", "modified": "2026-10-24T04:18:18.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50057"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-50056", "publisher": "Rapid7, Inc.", "title": "A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) a", "summary": "A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to execute arbitrary commands as root. The passwordless sudo interface accepts JVM arguments that are not adequately restricted. An attacker can postpone Jetty's privilege drop, register an OnOutOfMemoryError command and force heap exhaustion during startup, causing the command to execute while the JVM still ", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.187", "modified": "2026-10-24T04:18:17.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50056"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115785", "publisher": "Rapid7, Inc.", "title": "An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite", "summary": "An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows an ordinary authenticated user with account options enabled to inject CR/LF into the emailAddress inserted into an SMTP envelope command by a JSON SOAP request. After a successful preliminary POP3 or IMAP login, Zimbra sends the injected commands to the selected SMTP service. If that service accepts the pipelined transaction", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.750", "modified": "2026-10-24T04:18:17.737", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115785"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-114625", "publisher": "Arista Networks, Inc.", "title": "Arista VeloCloud Orchestrator SQL Injection Vulnerability", "summary": "VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.\n\nOn an affected system, any authenticated user can gain operator privileges and masquerade as a local \"superuser operator\" user. Thi", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00555, "kev": true, "added": "2026-10-22", "pub": "2026-10-22T21:17:16.870", "modified": "2026-10-24T04:18:17.510", "products": [{"name": "velocloud orchestrator", "vendor": "arista", "type": "app", "affected": [">= 5.2.0 and < 5.2.3.18", ">= 6.1.0 and < 6.1.3.10", ">= 6.4.0 and < 6.4.2.12"], "fixed": "5.2.3.18, 6.1.3.10, 6.4.2.12", "safe": "before 5.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy velocloud-orchestrator || rpm -q velocloud-orchestrator || velocloud-orchestrator --version"}, {"label": "2. UPGRADE to 5.2.3.18 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade velocloud-orchestrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade velocloud-orchestrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison velocloud-orchestrator\nsudo apt install velocloud-orchestrator=<VERSION_BEFORE_5.2.0>\nsudo apt-mark hold velocloud-orchestrator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list velocloud-orchestrator\nsudo dnf downgrade velocloud-orchestrator-<VERSION_BEFORE_5.2.0>\nsudo dnf versionlock add velocloud-orchestrator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625"}, {"t": "Mitigation, Vendor Advisory", "u": "https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-26", "kev_added": "2026-10-23", "ransom": false, "priority": 71, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.45586, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds One Known Exploited Vulnerability to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog", "date": "2026-10-23"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "Arista Networks security advisory (AV26-1080) \u2013 Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-1080", "date": "2026-10-23"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-111497", "publisher": "Google Inc.", "title": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through", "summary": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to ", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.0048, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:37.190", "modified": "2026-10-24T04:18:17.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497"}], "cwe": ["CWE-252", "CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40511, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Debian 12", "pkg": "brotli", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "brotli", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "brotli", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "goose", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "trustee", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "brotli", "status": "fixed", "fixed": "brotli-1.1.1-r0", "cmd": "apk add --upgrade brotli\napk info -v brotli", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "nodejs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "nodejs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "brotli", "status": "fixed", "fixed": "brotli-1.2.1-r0", "cmd": "apk add --upgrade brotli\napk info -v brotli", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "dimasma0305/CVE-2026-111497-POC (29 stars)", "url": "https://github.com/dimasma0305/CVE-2026-111497-POC", "stars": 29}, {"kind": "poc", "name": "CaterMaoZi/CVE-2026-111497-POC (12 stars)", "url": "https://github.com/CaterMaoZi/CVE-2026-111497-POC", "stars": 12}, {"kind": "poc", "name": "hypnguyen1209/CVE-2026-111497 (5 stars)", "url": "https://github.com/hypnguyen1209/CVE-2026-111497", "stars": 5}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "mentions": [{"src": "Qualys Blog", "group": "research", "title": "Node.js Patches Brotli Remote Code Execution Flaw: Find Vulnerable Runtimes Before Attackers Do", "url": "https://blog.qualys.com/product-tech/2026/10/23/node-js-patches-brotli-remote-code-execution-flaw-find-vulnerable-runtimes-before-attackers-do", "date": "2026-10-23"}, {"src": "The Hacker News", "group": "news", "title": "Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data", "url": "https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html", "date": "2026-10-23"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-110447", "publisher": "MITRE", "title": "Collabora Online \u2013 Built-in CODE Server OS Command Injection Vulnerability", "summary": "Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CO", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.01225, "kev": true, "added": "2026-10-14", "pub": "2026-10-14T03:17:20.683", "modified": "2026-10-24T04:18:17.157", "products": [{"name": "Collabora Online \u2013 Built-in CODE Server", "vendor": "Collabora", "type": "app", "affected": ["See advisory"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "CISA required action", "cmd": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-26", "kev_added": "2026-10-23", "ransom": false, "priority": 82, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.68615, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "adriyansyah-mf/cve-2026-110447 (0 stars)", "url": "https://github.com/adriyansyah-mf/cve-2026-110447", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "mentions": [{"src": "The Hacker News", "group": "news", "title": "CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud", "url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "date": "2026-10-24"}, {"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds One Known Exploited Vulnerability to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog-0", "date": "2026-10-23"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-108456", "publisher": "Microsoft Corporation", "title": "Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges ove", "summary": "Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00701, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:17:58.473", "modified": "2026-10-24T04:18:16.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108456"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52698, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456", "date": "2026-10-22"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-105014", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows ", "summary": "Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00667, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:17:52.183", "modified": "2026-10-24T04:18:16.820", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105014"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51316, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014", "date": "2026-10-22"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-101854", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub.  Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:41.420", "modified": "2026-10-24T04:18:16.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101854"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37855, "pinned": false}, {"id": "CVE-2026-101853", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub.  Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:41.297", "modified": "2026-10-24T04:18:16.513", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101853"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37858, "pinned": false}, {"id": "CVE-2026-101852", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub.  Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:41.177", "modified": "2026-10-24T04:18:16.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101852"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37857, "pinned": false}, {"id": "CVE-2026-101813", "publisher": "Oracle", "title": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management)", "summary": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering.  Successful attacks of this vulnerability can result in takeover of Oracle Engineering. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability i", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:37.230", "modified": "2026-10-24T04:18:15.690", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101813"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31822, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-101809", "publisher": "Oracle", "title": "Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)", "summary": "Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Workflow.  While the vulnerability is in Workflow, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in ", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:36.890", "modified": "2026-10-24T04:18:15.517", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101809"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40671, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-101736", "publisher": "Oracle", "title": "Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core)", "summary": "Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core).  Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Primavera Unifier ac", "cvss": 7.4, "sev": "HIGH", "epss": 0.00302, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:28.527", "modified": "2026-10-24T04:18:14.837", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101736"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2176, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-101692", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI)", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:23.720", "modified": "2026-10-24T04:18:14.433", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101692"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34966, "pinned": false}, {"id": "CVE-2026-101686", "publisher": "Oracle", "title": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (compon", "summary": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway.  Successful attacks of this vulnerability can result in takeover of Oracle E-Business Suite Integrated SOA ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:23.163", "modified": "2026-10-24T04:18:13.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101686"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34965, "pinned": false}, {"id": "CVE-2026-101685", "publisher": "Oracle", "title": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (compon", "summary": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway.  Successful attacks of this vulnerability can result in takeover of Oracle E-Business Suite Integrated SOA ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:23.043", "modified": "2026-10-24T04:18:13.177", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101685"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34965, "pinned": false}, {"id": "CVE-2026-101664", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality,", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:20.573", "modified": "2026-10-24T04:18:13.027", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101664"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.3182, "pinned": false}, {"id": "CVE-2026-101656", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:19.963", "modified": "2026-10-24T04:18:12.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101656"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31822, "pinned": false}, {"id": "CVE-2026-101655", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality,", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:19.843", "modified": "2026-10-24T04:18:12.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101655"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31821, "pinned": false}, {"id": "CVE-2026-101654", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:19.730", "modified": "2026-10-24T04:18:12.577", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101654"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31821, "pinned": false}, {"id": "CVE-2026-101653", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:19.613", "modified": "2026-10-24T04:18:12.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101653"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31821, "pinned": false}, {"id": "CVE-2026-101635", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality,", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:17.650", "modified": "2026-10-24T04:18:12.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101635"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31822, "pinned": false}, {"id": "CVE-2026-101567", "publisher": "Oracle", "title": "Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning)", "summary": "Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availa", "cvss": 8.8, "sev": "HIGH", "epss": 0.00479, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:08.693", "modified": "2026-10-24T04:18:12.093", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101567"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40429, "pinned": false}, {"id": "CVE-2026-101557", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability im", "cvss": 8.8, "sev": "HIGH", "epss": 0.00479, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:05.640", "modified": "2026-10-24T04:18:08.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101557"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40432, "pinned": false}, {"id": "CVE-2026-91457", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In I", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.303", "modified": "2026-10-24T03:16:29.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91457"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0465, "pinned": false}, {"id": "CVE-2026-91455", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform T", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).  Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability c", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:49.197", "modified": "2026-10-24T03:16:29.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91455"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14044, "pinned": false}, {"id": "CVE-2026-91450", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deploymen", "cvss": 7.4, "sev": "HIGH", "epss": 0.00318, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.740", "modified": "2026-10-24T03:16:28.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91450"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23595, "pinned": false}, {"id": "CVE-2026-91449", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deploymen", "cvss": 7.4, "sev": "HIGH", "epss": 0.00257, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.590", "modified": "2026-10-24T03:16:28.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91449"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16429, "pinned": false}, {"id": "CVE-2026-91448", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.483", "modified": "2026-10-24T03:16:27.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91448"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32892, "pinned": false}, {"id": "CVE-2026-91447", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.363", "modified": "2026-10-24T03:16:26.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91447"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32892, "pinned": false}, {"id": "CVE-2026-106110", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T4 end-of-line codes, and T4BitCompressor.CompressStrip reaches unchecked writes when TiffCompression.CcittGroup3Fax is selected directly or inherited from decoded TIFF metadata. An attacker-controlled en", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:52.490", "modified": "2026-10-24T01:42:13.327", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 2.0.0 and < 3.2.0", ">= 4.0.0 and < 4.1.2"], "fixed": "3.2.0, 4.1.2", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106110"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/a9498c6db3642ef92c712ebc81e706914ac16a95"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-j9gm-c75j-xc9q"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-j9gm-c75j-xc9q"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27482, "pinned": false}, {"id": "CVE-2026-106111", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the full expected block from a buffer obtained through Configuration.Default, allowing bytes retained from a completed prior ImageSharp operation to appear in ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0035, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:52.650", "modified": "2026-10-24T01:40:37.313", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 4.0.0 and < 4.1.2"], "fixed": "4.1.2", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 4.1.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106111"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/3c43cf583fdd98eff0f451397affaa31c6a2e6b1"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/6ed2a275217d39301e76df42acec2a9533b39d2b"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-4q3p-rj5x-xv7p"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-4q3p-rj5x-xv7p"}], "cwe": ["CWE-226"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27388, "pinned": false}, {"id": "CVE-2026-106112", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to Convert, a malformed embedded profile can direct interpolation and output-LUT operations to write one float per declared channel beyond the four-float desti", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:52.810", "modified": "2026-10-24T01:36:19.840", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 4.0.0 and < 4.1.2"], "fixed": "4.1.2", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 4.1.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106112"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/b03f0ed7e5be760eecc740fa53dd166b18ae9b23"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-ffp7-56pq-64mr"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-ffp7-56pq-64mr"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27482, "pinned": false}, {"id": "CVE-2026-106113", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying HistogramEqualization can produce a non-finite or out-of-range luminance in ColorNumerics.GetBT709Luminance. GrayscaleLevelsRowOperation.Invoke uses the resulting value as an unchecked histogram offset, causing an unsafe out-of-range access and process termination. Adaptive Histogram Equalization", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:52.953", "modified": "2026-10-24T01:34:56.670", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 2.0.0 and < 3.2.0", ">= 4.0.0 and < 4.1.2"], "fixed": "3.2.0, 4.1.2", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106113"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/c4c4bf292298c026df470db1a17ff826515fd95d"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-j3p4-wp97-rph4"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27484, "pinned": false}, {"id": "CVE-2026-106114", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and earlier public IccProfile.Entries parsing paths can allocate a large jagged representation, from a short truncated profile. In version 4, automatic image co", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:53.100", "modified": "2026-10-24T01:29:21.463", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 1.0.0 and < 3.2.0", ">= 4.0.0 and < 4.1.2"], "fixed": "3.2.0, 4.1.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106114"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/8de892a7623aa8a09ba2333b624c8d2eb98325df"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-gwg2-r3hj-4w44"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-gwg2-r3hj-4w44"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29272, "pinned": false}, {"id": "CVE-2026-106115", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode performs unchecked writes, and a decode-and-re-encode flow can inherit TiffCompression.CcittGroup4Fax and one-bit metadata from attacker-supplied input. ", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:53.250", "modified": "2026-10-24T01:27:41.513", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 2.1.0 and < 3.2.0", ">= 4.0.0 and < 4.1.2"], "fixed": "3.2.0, 4.1.2", "safe": "before 2.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_2.1.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_2.1.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106115"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/a9498c6db3642ef92c712ebc81e706914ac16a95"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-jjfr-hcj7-qf5w"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-jjfr-hcj7-qf5w"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27483, "pinned": false}, {"id": "CVE-2026-106116", "publisher": "GitHub, Inc.", "title": "ImageSharp is a 2D graphics library", "summary": "ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain, ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a small malformed BigTIFF can keep one decoder thread executing for an attacker-controlled duration. This report does not claim worker-pool exhaustion. This i", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T18:16:53.400", "modified": "2026-10-24T01:24:27.543", "products": [{"name": "imagesharp", "vendor": "sixlabors", "type": "app", "affected": [">= 2.0.0 and < 3.2.0", ">= 4.0.0 and < 4.1.2"], "fixed": "3.2.0, 4.1.2", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagesharp || rpm -q imagesharp || imagesharp --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagesharp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagesharp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagesharp\nsudo apt install imagesharp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold imagesharp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagesharp\nsudo dnf downgrade imagesharp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add imagesharp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106116"}, {"t": "Patch", "u": "https://github.com/SixLabors/ImageSharp/commit/92b12d72550ebb6be5b1e22e559c361fd863a6ec"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/SixLabors/ImageSharp/pull/3187"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-wmxv-xphr-5c9g"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-wmxv-xphr-5c9g"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29272, "pinned": false}, {"id": "CVE-2026-115929", "publisher": "MongoDB, Inc.", "title": "MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store", "summary": "MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the\u00a0recoverable\u00a0eMudhra intermediate CA certificates.\u00a0Issue is\u00a0resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.", "cvss": 6.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-24", "pub": "2026-10-24T01:17:08.250", "modified": "2026-10-24T01:17:08.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115929"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-114406", "publisher": "Red Hat, Inc.", "title": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages,", "summary": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered tru", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00273, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:17:58.547", "modified": "2026-10-24T01:17:08.050", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18719, "pinned": false}, {"id": "CVE-2026-110734", "publisher": "MITRE", "title": "Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hd", "summary": "Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's repeat/copy count fits the remaining capacity of the row buffer. A crafted .hdr file therefore writes attacker-supplied bytes past the end of the heap all", "cvss": 2.5, "sev": "LOW", "epss": 0.0015, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T16:17:44.320", "modified": "2026-10-24T01:17:07.433", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110734"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03834, "mentions": [{"src": "oss-security list", "group": "research", "title": "Re: Godot 4.x: heap out-of-bounds write in Radiance HDR image loader", "url": "https://seclists.org/oss-sec/2026/q4/364", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-9869", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version", "summary": "A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:23.143", "modified": "2026-10-23T23:19:51.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9869"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.5584, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9827", "publisher": "Talos", "title": "A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOT", "summary": "A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00976, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:23.020", "modified": "2026-10-23T23:19:51.073", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9827"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.61797, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9817", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(", "summary": "A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:22.900", "modified": "2026-10-23T23:19:50.960", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9817"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55842, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9814", "publisher": "Talos", "title": "An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)", "summary": "An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.013, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:22.773", "modified": "2026-10-23T23:19:50.850", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9814"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.70227, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9660", "publisher": "Talos", "title": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of ", "summary": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnPassword parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:22.613", "modified": "2026-10-23T23:19:50.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9660"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55841, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42026", "publisher": "Talos", "title": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns funct", "summary": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns2 parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.730", "modified": "2026-10-23T23:17:44.147", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42026"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55841, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42025", "publisher": "Talos", "title": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns funct", "summary": "Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns1 parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.610", "modified": "2026-10-23T23:17:44.033", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42025"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55841, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42024", "publisher": "Talos", "title": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati", "summary": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_gw parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.490", "modified": "2026-10-23T23:17:43.937", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42024"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.5584, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42023", "publisher": "Talos", "title": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati", "summary": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_ipv6 parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00791, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.373", "modified": "2026-10-23T23:17:43.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42023"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.5584, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42022", "publisher": "Talos", "title": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati", "summary": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns2 parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00737, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.257", "modified": "2026-10-23T23:17:43.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42022"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.54008, "pinned": false}, {"id": "CVE-2026-42021", "publisher": "Talos", "title": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati", "summary": "Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns1 parameter.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00737, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:19.140", "modified": "2026-10-23T23:17:43.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42021"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.54009, "pinned": false}, {"id": "CVE-2026-35499", "publisher": "Talos", "title": "An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TO", "summary": "An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01043, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:18.277", "modified": "2026-10-23T23:17:43.507", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35499"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.63807, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115931", "publisher": "postiz", "title": "Postiz lets a signed-in user ask the backend to run a function on one of their connected channels", "summary": "Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface.\n\nOne of those helpers reads a file from the server's disk. A user who connects a channel whose stored token is a file path can have the backend return the contents of any file it ", "cvss": 9.9, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T23:17:43.263", "modified": "2026-10-23T23:17:43.263", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115931"}], "cwe": ["CWE-73", "CWE-470"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-114263", "publisher": "VulDB", "title": "A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0", "summary": "A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_search.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00265, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:26.937", "modified": "2026-10-23T23:17:43.133", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114263"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.17483, "pinned": false}, {"id": "CVE-2026-114260", "publisher": "VulDB", "title": "A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591", "summary": "A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function delete_folder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by thi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00459, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T17:18:26.223", "modified": "2026-10-23T23:17:42.990", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114260"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.388, "pinned": false}, {"id": "CVE-2026-114257", "publisher": "VulDB", "title": "A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb", "summary": "A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T16:17:33.000", "modified": "2026-10-23T23:17:42.850", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114257"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24723, "pinned": false}, {"id": "CVE-2026-114254", "publisher": "VulDB", "title": "A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591", "summary": "A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_class.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for", "cvss": 7.3, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T16:17:32.493", "modified": "2026-10-23T23:17:42.717", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114254"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26621, "pinned": false}, {"id": "CVE-2026-113877", "publisher": "CPANSec", "title": "HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matche", "summary": "HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions.\n\n_language_match interpolates each Accept-Language range into the pattern `/^$range\\-/i` without escaping it, so regular expression syntax in the header reaches the regex engine. A 12-byte range such as `(a?|b?){26}z` backtracks for seconds, and each increment of the quantifier doubles the time. An invalid range ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:21.597", "modified": "2026-10-23T23:17:42.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113877"}], "cwe": ["CWE-624"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2026-113877: HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular ", "url": "https://seclists.org/oss-sec/2026/q4/363", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-10141", "publisher": "Talos", "title": "A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOL", "summary": "A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00406, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.843", "modified": "2026-10-23T23:17:42.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10141"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.33792, "pinned": false}, {"id": "CVE-2026-10139", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X", "summary": "A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.720", "modified": "2026-10-23T23:17:42.177", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10139"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60761, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10138", "publisher": "Talos", "title": "A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOL", "summary": "A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01153, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.597", "modified": "2026-10-23T23:17:42.077", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10138"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.6674, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10137", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)", "summary": "A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.480", "modified": "2026-10-23T23:17:41.970", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10137"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60761, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10136", "publisher": "Talos", "title": "A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):", "summary": "A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.360", "modified": "2026-10-23T23:17:41.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10136"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60762, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10135", "publisher": "Talos", "title": "A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X200", "summary": "A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01153, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.240", "modified": "2026-10-23T23:17:41.767", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10135"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.66739, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10133", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLI", "summary": "A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:16.117", "modified": "2026-10-23T23:17:41.663", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10133"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60762, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10132", "publisher": "Talos", "title": "A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s", "summary": "A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:15.993", "modified": "2026-10-23T23:17:41.560", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10132"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60761, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10131", "publisher": "Talos", "title": "An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):", "summary": "An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01153, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:15.853", "modified": "2026-10-23T23:17:41.450", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10131"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.6674, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105933", "publisher": "Apache Software Foundation", "title": "Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace b", "summary": "Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required namespace policy. When this policy is set, the broker rejects messages that are published without encryption.\n\nWhen the broker loads a persistent topic, it reads the namespace policies and the topic-level policies as part of topic initialization. If a step of this initialization fails, for example because", "cvss": 2.3, "sev": "LOW", "epss": 0.00293, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:55.890", "modified": "2026-10-23T23:17:36.670", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105933"}], "cwe": ["CWE-636"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.20779, "pinned": false}, {"id": "CVE-2026-105932", "publisher": "Apache Software Foundation", "title": "The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filte", "summary": "The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics these endpoints check that the caller is authorized for the entry filters topic policy operation. The corresponding endpoints for non-persistent topics (/admin/v2/non-persistent/{tenant}/{namespace}/{topic}/entryFilters) do not perform this authorization check. The only authorization check these ", "cvss": 2.3, "sev": "LOW", "epss": 0.00504, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:55.670", "modified": "2026-10-23T23:17:36.447", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105932"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42205, "pinned": false}, {"id": "CVE-2026-18685", "publisher": "VulDB", "title": "A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:16:40.350", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18685"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89461, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/modem_set_upgrade_glc_rce", "url": "https://github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/modem_set_upgrade_glc_rce"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18686", "publisher": "VulDB", "title": "A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.04731, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:16:40.520", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18686"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "EPSS top 8%: very likely to be exploited", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.91819, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61515", "publisher": "VulnCheck", "title": "Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability", "summary": "Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit the lack of authentication and input sanitization in the binary protocol service to pass arbitrary commands directly to the underlying operating system,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02438, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:36.967", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61515"}], "cwe": ["CWE-912"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 66, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8418, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-34977", "publisher": "GitHub, Inc.", "title": "Aperi'Solve is an open-source steganalysis web platform", "summary": "Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command, without any form of sanitization or validation. An unauthenticated attacker can achieve root-level RCE inside the worker container with a single HTTP requ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01166, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:11.543", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aperisolve", "vendor": "aperisolve", "type": "app", "affected": ["<= 3.2.0"], "fixed": "newer than 3.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aperisolve || rpm -q aperisolve || aperisolve --version"}, {"label": "2. UPGRADE to newer than 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aperisolve"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aperisolve"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34977"}, {"t": "Patch", "u": "https://github.com/Zeecka/AperiSolve/commit/0193ca4a7d8ae9d6ba6cde82d37a6f94953463b4"}, {"t": "Patch", "u": "https://github.com/Zeecka/AperiSolve/pull/195"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.67087, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Zeecka/AperiSolve/pull/195", "url": "https://github.com/Zeecka/AperiSolve/pull/195"}, {"kind": "writeup", "name": "github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp", "url": "https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-38711", "publisher": "MITRE", "title": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,", "summary": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgrade_check interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02753, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:50.190", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38711"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.86127, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-38708", "publisher": "MITRE", "title": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,", "summary": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02753, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T21:17:30.713", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38708"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.86127, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-38713", "publisher": "MITRE", "title": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,", "summary": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsec_conn interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02753, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T21:17:30.937", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38713"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.86126, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60113", "publisher": "VulnCheck", "title": "AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authenticati", "summary": "AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE) interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no credentials. Attackers can reach the exposed SLE endpoints to start or stop Deep Space Network communication sessions, retrieve telemetry frame da", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00833, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:55.560", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ait dsn", "vendor": "nasa", "type": "app", "affected": ["< 2.2.2"], "fixed": "2.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ait-dsn || rpm -q ait-dsn || ait-dsn --version"}, {"label": "2. UPGRADE to 2.2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ait-dsn"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ait-dsn"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60113"}, {"t": "Patch", "u": "https://github.com/NASA-AMMOS/AIT-DSN/commit/06d07d1a525602c62c6eaeaeff2544196f430340"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/NASA-AMMOS/AIT-DSN/security/advisories/GHSA-gj83-67wr-82mv"}, {"t": "Patch, Release Notes", "u": "https://www.vulncheck.com/advisories/ait-dsn-missing-authentication-via-sle-api-routes"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/NASA-AMMOS/AIT-DSN/security/advisories/GHSA-gj83-67wr-82mv"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57235, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-51785", "publisher": "MITRE", "title": "An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a c", "summary": "An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01149, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T21:17:31.730", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51785"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.66629, "pinned": false, "pocs": [{"kind": "writeup", "name": "fenrisk.com/hiawatha-http-smuggling", "url": "https://fenrisk.com/hiawatha-http-smuggling"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-30191", "publisher": "MITRE", "title": "PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::init", "summary": "PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00761, "kev": false, "added": "2023-05-17", "pub": "2023-05-17T20:15:10.680", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "cdesigner", "vendor": "cdesigner project", "type": "app", "affected": ["<= 3.2.2"], "fixed": "newer than 3.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cdesigner || rpm -q cdesigner || cdesigner --version"}, {"label": "2. UPGRADE to newer than 3.2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cdesigner"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cdesigner"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30191"}, {"t": "Exploit, Patch", "u": "https://friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html"}, {"t": "Exploit, Patch", "u": "https://friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54844, "pinned": false, "pocs": [{"kind": "writeup", "name": "friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html", "url": "https://friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-4050", "publisher": "Mozilla Corporation", "title": "In some cases, an untrusted input stream was copied to a stack buffer without checking its size", "summary": "In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.12584, "kev": false, "added": "2023-08-01", "pub": "2023-08-01T15:15:10.090", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 116.0", ">= 102.0 and < 102.14", ">= 115.0 and < 115.1"], "fixed": "102.14, 115.1, 116.0", "safe": "before 102.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 102.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 102.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_102.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_102.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["11.0", "12.0"], "fixed": null, "safe": "before 11.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-4050"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-30/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-30/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["High severity", "EPSS top 4%: very likely to be exploited", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.96235, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "firefox", "status": "fixed", "fixed": "116.0+build2-0ubuntu0.20.04.2", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox)\" ge \"116.0+build2-0ubuntu0.20.04.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "thunderbird", "status": "fixed", "fixed": "1:102.15.0+build1-0ubuntu0.20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:102.15.0+build1-0ubuntu0.20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "thunderbird", "status": "fixed", "fixed": "1:102.15.0+build1-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:102.15.0+build1-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "102.14.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"102.14.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "115.1.0esr-1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"115.1.0esr-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:102.14.0-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:102.14.0-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:115.1.0-1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:115.1.0-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "fixed", "fixed": "firefox-102.14.0-1.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4461\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 7", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-102.14.0-1.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4495\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "fixed", "fixed": "firefox-102.14.0-1.el8_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4468\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-102.14.0-1.el8_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4497\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 8.1 Update Services for SAP Solutions", "pkg": "firefox", "status": "fixed", "fixed": "firefox-102.14.0-1.el8_1", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4464\nrpm -q firefox", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-115.1.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-115.1.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-115.1.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-115.1.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-33267", "publisher": "Apache Software Foundation", "title": "Improper Input Validation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: f", "summary": "Improper Input Validation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00603, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.983", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 9.2.0 and < 9.2.15", ">= 10.0.0 and < 10.1.4"], "fixed": "9.2.15, 10.1.4", "safe": "before 9.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 9.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_9.2.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_9.2.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33267"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48186, "pinned": false, "pocs": [{"kind": "poc", "name": "Boreas37/CVE-2026-33267-PoC (4 stars)", "url": "https://github.com/Boreas37/CVE-2026-33267-PoC", "stars": 4}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-59243", "publisher": "Apache Software Foundation", "title": "The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so ", "summary": "The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or unsigned (`alg:none`) ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role (CWE-347). Deployments running the FAB auth manager with the Azure AD OAuth login path under its default configuration are affected; the Authentik pa", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00643, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T10:16:44.390", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "apache-airflow-providers-fab", "vendor": "apache", "type": "app", "affected": ["< 3.7.3"], "fixed": "3.7.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apache-airflow-providers-fab || rpm -q apache-airflow-providers-fab || apache-airflow-providers-fab --version"}, {"label": "2. UPGRADE to 3.7.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apache-airflow-providers-fab"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apache-airflow-providers-fab"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59243"}, {"t": "Patch", "u": "https://github.com/apache/airflow/pull/69374"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50188, "pinned": false, "pocs": [{"kind": "poc", "name": "0xdak/CVE-2026-59243_exploit (1 stars)", "url": "https://github.com/0xdak/CVE-2026-59243_exploit", "stars": 1}, {"kind": "poc", "name": "MalHyuk/CVE-2026-59243 (0 stars)", "url": "https://github.com/MalHyuk/CVE-2026-59243", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67324", "publisher": "VulnCheck", "title": "GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pa", "summary": "GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes attacker-influenced clone options into Repo.clone_from(..., multi_options=..., allow_unsafe_options=False), an attacker can supply -u<helper> to bypass the gate that blocks --upload-pack/-u, causing Git to execute the specified helper command during clon", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00644, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:02.770", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.50"], "fixed": "3.1.50", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.50", "cmd": "pip install --upgrade \"gitpython>=3.1.50\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67324"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50283, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74886", "publisher": "VulnCheck", "title": "openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuar", "summary": "openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modules like sys, shutil, multiprocessing, importlib, and pickle for arbitrary code execution.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00684, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T11:16:43.390", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openssl encrypt", "vendor": "jahlives", "type": "app", "affected": ["< 1.4.0"], "fixed": "1.4.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show openssl-encrypt"}, {"label": "2. UPGRADE to 1.4.0", "cmd": "pip install --upgrade \"openssl-encrypt>=1.4.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74886"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-9pgj-v69p-q586"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52039, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68770", "publisher": "VulnCheck", "title": "sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitr", "summary": "sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition includes an 'or os.path.exists(model_name_or_path)' clause that satisfies the trust gate whenever the supplied path exists on the local filesystem, regardless of the trust_remote_code=False a", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00909, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T21:17:32.440", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68770"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.59605, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/huggingface/sentence-transformers/issues/3801", "url": "https://github.com/huggingface/sentence-transformers/issues/3801"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "sentence-transformers", "status": "fixed", "fixed": "5.6.0", "cmd": "pip install --upgrade \"sentence-transformers>=5.6.0\"\npip show sentence-transformers", "url": "https://github.com/advisories/GHSA-jhr6-gm9c-rqjv", "note": "vulnerable: < 5.6.0"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61514", "publisher": "VulnCheck", "title": "Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows", "summary": "Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field in the proprietary control protocol header to access live video streams, control pan and tilt motors, activate audio functions, and remotely restart the d", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00826, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:36.810", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61514"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57024, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69098", "publisher": "VulnCheck", "title": "kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint th", "summary": "kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a __type__ field. Attackers can exploit this to override the __type__ field with subprocess.check_output and arbitrary arguments, achieving remote code execution with application process privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00914, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:28.190", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69098"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5976, "pinned": false, "pocs": [{"kind": "poc", "name": "0xdak/CVE-2026-69098_exploit (0 stars)", "url": "https://github.com/0xdak/CVE-2026-69098_exploit", "stars": 0}, {"kind": "writeup", "name": "github.com/Cinnamon/kotaemon/issues/844", "url": "https://github.com/Cinnamon/kotaemon/issues/844"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68771", "publisher": "VulnCheck", "title": "ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows u", "summary": "ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard_*.pkl file via the unauthenticated POST /upload/image endpoint and then queue a workflow graph via POST /prompt referencing the uploaded file, causing torch.load to ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01148, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T22:17:03.630", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68771"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.66569, "pinned": false, "pocs": [{"kind": "poc", "name": "0xdak/CVE-2026-68771_exploit (1 stars)", "url": "https://github.com/0xdak/CVE-2026-68771_exploit", "stars": 1}, {"kind": "poc", "name": "Oscar-Collado/comfyui-CVE-2026-68771-PoC (0 stars)", "url": "https://github.com/Oscar-Collado/comfyui-CVE-2026-68771-PoC", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74880", "publisher": "VulnCheck", "title": "openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry", "summary": "openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00559, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T11:16:42.593", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openssl encrypt", "vendor": "jahlives", "type": "app", "affected": ["< 1.4.0"], "fixed": "1.4.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show openssl-encrypt"}, {"label": "2. UPGRADE to 1.4.0", "cmd": "pip install --upgrade \"openssl-encrypt>=1.4.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74880"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-4rh7-jwg9-m28m"}], "cwe": ["CWE-598"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45848, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-35047", "publisher": "GitHub, Inc.", "title": "Brave CMS is an open-source CMS", "summary": "Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable scripts. This may lead to Remote Code Execution (RCE) on the server, potentially resulting in full system compromise, data exfiltration, or service disruption. All users running affected versions of BraveCMS are impacted. This vulnerability is fixed in 2.0.6.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01003, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:42.433", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bravecms", "vendor": "ajax30", "type": "app", "affected": [">= 2.0.0 and < 2.0.6"], "fixed": "2.0.6", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bravecms || rpm -q bravecms || bravecms --version"}, {"label": "2. UPGRADE to 2.0.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bravecms"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bravecms"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bravecms\nsudo apt install bravecms=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold bravecms"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bravecms\nsudo dnf downgrade bravecms-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add bravecms"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35047"}, {"t": "Patch", "u": "https://github.com/Ajax30/BraveCMS-2.0/commit/058ee4ed7c2b39d540af8274024afcbc9532aa83"}, {"t": "Vendor Advisory", "u": "https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-9rcc-w59j-965v"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.62584, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14512", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deseriali", "summary": "IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0097, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:25.783", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.31", ">= 9.0.0.0 and < 9.0.5.29"], "fixed": "8.5.5.31, 9.0.5.29", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.31 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14512"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281649"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61566, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-27534", "publisher": "HackerOne", "title": "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be ", "summary": "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0244, "kev": false, "added": "2023-03-30", "pub": "2023-03-30T20:15:07.427", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": [">= 7.18.0 and <= 7.88.1"], "fixed": "newer than 7.88.1", "safe": "before 7.18.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to newer than 7.88.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.18.0 (Debian / Ubuntu)", "cmd": "apt-cache madison curl\nsudo apt install curl=<VERSION_BEFORE_7.18.0>\nsudo apt-mark hold curl"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list curl\nsudo dnf downgrade curl-<VERSION_BEFORE_7.18.0>\nsudo dnf versionlock add curl"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["36"], "fixed": null, "safe": "before 36", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "active iq unified manager", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy active-iq-unified-manager || rpm -q active-iq-unified-manager || active-iq-unified-manager --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "brocade fabric operating system firmware", "vendor": "broadcom", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27534"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.84189, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "fixed", "fixed": "7.68.0-1ubuntu2.18", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.68.0-1ubuntu2.18\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "fixed", "fixed": "7.81.0-1ubuntu1.10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.81.0-1ubuntu1.10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "fixed", "fixed": "curl-7.76.1-26.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:6679\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-193", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27534.html", "note": "ALAS2023-2023-193"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-2070", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27534.html", "note": "ALAS2-2023-2070"}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2023-1729", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27534.html", "note": "ALAS-2023-1729"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-28319", "publisher": "HackerOne", "title": "A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH ser", "summary": "A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.", "cvss": 7.5, "sev": "HIGH", "epss": 0.02489, "kev": false, "added": "2023-05-26", "pub": "2023-05-26T21:15:10.020", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": ["< 8.1.0"], "fixed": "8.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 8.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "macos", "vendor": "apple", "type": "os", "affected": [">= 11.0 and < 11.7.9", ">= 12.0 and < 12.6.8", ">= 13.0 and < 13.5"], "fixed": "11.7.9, 12.6.8, 13.5", "safe": "before 11.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "clustered data ontap", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "ontap antivirus connector", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ontap-antivirus-connector || rpm -q ontap-antivirus-connector || ontap-antivirus-connector --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28319"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1913733"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1913733"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84523, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-270", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-28319.html", "note": "ALAS2023-2023-270"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-2230", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-28319.html", "note": "ALAS2-2023-2230"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-24482", "publisher": "Siemens AG", "title": "A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.4", "summary": "A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Struc", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00813, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:14.783", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "comos", "vendor": "siemens", "type": "app", "affected": [">= 10.2 and < 10.3.3.1.45", ">= 10.3.3.2 and < 10.3.3.2.33", ">= 10.3.3.3 and < 10.3.3.3.9", ">= 10.3.3.4 and < 10.3.3.4.6", ">= 10.4.0.0 and < 10.4.0.0.31", ">= 10.4.1.0 and < 10.4.1.0.32", ">= 10.4.2.0 and < 10.4.2.0.25"], "fixed": "10.3.3.1.45, 10.3.3.2.33, 10.3.3.3.9, 10.3.3.4.6, 10.4.0.0.31, 10.4.1.0.32, 10.4.2.0.25", "safe": "before 10.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy comos || rpm -q comos || comos --version"}, {"label": "2. UPGRADE to 10.3.3.1.45 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade comos"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade comos"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.2 (Debian / Ubuntu)", "cmd": "apt-cache madison comos\nsudo apt install comos=<VERSION_BEFORE_10.2>\nsudo apt-mark hold comos"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list comos\nsudo dnf downgrade comos-<VERSION_BEFORE_10.2>\nsudo dnf versionlock add comos"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24482"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56581, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-29542", "publisher": "Mozilla Corporation", "title": "A newline in a filename could have been used to bypass the file extension security mechanisms that replace mal", "summary": "A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk  with .download. This could have led to accidental execution of malicious code.\n\n*This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox\u00a0and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.\n\n", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0094, "kev": false, "added": "2023-06-19", "pub": "2023-06-19T11:15:09.847", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29542"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60596, "pinned": false, "pocs": [{"kind": "writeup", "name": "bugzilla.mozilla.org/show_bug.cgi?id=1810793", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1810793"}, {"kind": "writeup", "name": "bugzilla.mozilla.org/show_bug.cgi?id=1815062", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1815062"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.10.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.10.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.10.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.10.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48333", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in priv", "summary": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48333"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60782, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69110", "publisher": "VulnCheck", "title": "OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remot", "summary": "OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users' jobs, and additionally delete any video by ID through the unauthenticat", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0084, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:28.483", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69110"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57463, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Microck/opencode-studio/issues/54", "url": "https://github.com/Microck/opencode-studio/issues/54"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-22794", "publisher": "HackerOne", "title": "A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments", "summary": "A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.", "cvss": 8.8, "sev": "HIGH", "epss": 0.02153, "kev": false, "added": "2023-02-09", "pub": "2023-02-09T20:15:11.353", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "activerecord", "vendor": "activerecord project", "type": "app", "affected": [">= 6.0.0 and < 6.0.6.1", ">= 6.1.0 and < 6.1.7.1", ">= 7.0.0 and < 7.0.4.1"], "fixed": "6.0.6.1, 6.1.7.1, 7.0.4.1", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy activerecord || rpm -q activerecord || activerecord --version"}, {"label": "2. UPGRADE to 6.0.6.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade activerecord"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade activerecord"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison activerecord\nsudo apt install activerecord=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold activerecord"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list activerecord\nsudo dnf downgrade activerecord-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add activerecord"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22794"}, {"t": "Exploit, Patch", "u": "https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117"}, {"t": "Exploit, Patch", "u": "https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.82023, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "RubyGems", "pkg": "activerecord", "status": "fixed", "fixed": "6.0.6.1", "cmd": "bundle update activerecord\nbundle list | grep activerecord", "url": "https://github.com/advisories/GHSA-hq7p-j377-6v63", "note": "vulnerable: >= 6.0.0, < 6.0.6.1"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "rails", "status": "fixed", "fixed": "2:6.1.7.3+dfsg-1", "cmd": "sudo apt update && sudo apt install --only-upgrade rails\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rails)\" ge \"2:6.1.7.3+dfsg-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "rails", "status": "fixed", "fixed": "2:6.1.7.3+dfsg-1", "cmd": "sudo apt update && sudo apt install --only-upgrade rails\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rails)\" ge \"2:6.1.7.3+dfsg-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67325", "publisher": "VulnCheck", "title": "GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's lon", "summary": "GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like upload_p instead of upload_pack, which git resolves to dangerous options and executes arbitrary commands.", "cvss": 8.8, "sev": "HIGH", "epss": 0.02209, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:02.923", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.51"], "fixed": "3.1.51", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.51", "cmd": "pip install --upgrade \"gitpython>=3.1.51\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67325"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.82466, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "GitPython", "status": "fixed", "fixed": "3.1.51", "cmd": "pip install --upgrade \"GitPython>=3.1.51\"\npip show GitPython", "url": "https://github.com/advisories/GHSA-2f96-g7mh-g2hx", "note": "vulnerable: <= 3.1.50"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65883", "publisher": "Joomla! Project", "title": "Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 2", "summary": "Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00812, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:50.297", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aimy captcha-less form guard", "vendor": "aimy-extensions", "type": "app", "affected": [">= 18.0 and <= 20.0"], "fixed": "newer than 20.0", "safe": "before 18.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aimy-captcha-less-form-guard || rpm -q aimy-captcha-less-form-guard || aimy-captcha-less-form-guard --version"}, {"label": "2. UPGRADE to newer than 20.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aimy-captcha-less-form-guard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aimy-captcha-less-form-guard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 18.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aimy-captcha-less-form-guard\nsudo apt install aimy-captcha-less-form-guard=<VERSION_BEFORE_18.0>\nsudo apt-mark hold aimy-captcha-less-form-guard"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aimy-captcha-less-form-guard\nsudo dnf downgrade aimy-captcha-less-form-guard-<VERSION_BEFORE_18.0>\nsudo dnf versionlock add aimy-captcha-less-form-guard"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65883"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56574, "pinned": false, "pocs": [{"kind": "poc", "name": "shinthink/CVE-2026-65883 (0 stars)", "url": "https://github.com/shinthink/CVE-2026-65883", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60112", "publisher": "VulnCheck", "title": "AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows an", "summary": "AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create() without any credential check. Attackers can exploit the unauthenticated session issuance in Sessions.create() and subsequently invoke handle_cmd() to forward arbitrary commands directly to the AIT command bus w", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00788, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:55.413", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ait gui", "vendor": "nasa", "type": "app", "affected": ["< 2.5.1"], "fixed": "2.5.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ait-gui || rpm -q ait-gui || ait-gui --version"}, {"label": "2. UPGRADE to 2.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ait-gui"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ait-gui"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60112"}, {"t": "Patch", "u": "https://github.com/NASA-AMMOS/AIT-GUI/commit/beb8fc0813eded89f985d3eb9a73535dd327726d"}, {"t": "Patch, Release Notes", "u": "https://www.vulncheck.com/advisories/ait-gui-missing-authentication-via-sessions-create"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55753, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-27536", "publisher": "HackerOne", "title": "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p", "summary": "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.01758, "kev": false, "added": "2023-03-30", "pub": "2023-03-30T20:15:07.547", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "libcurl", "vendor": "haxx", "type": "app", "affected": [">= 7.22.0 and <= 7.88.1"], "fixed": "newer than 7.88.1", "safe": "before 7.22.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libcurl || rpm -q libcurl || libcurl --version"}, {"label": "2. UPGRADE to newer than 7.88.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libcurl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libcurl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.22.0 (Debian / Ubuntu)", "cmd": "apt-cache madison libcurl\nsudo apt install libcurl=<VERSION_BEFORE_7.22.0>\nsudo apt-mark hold libcurl"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libcurl\nsudo dnf downgrade libcurl-<VERSION_BEFORE_7.22.0>\nsudo dnf versionlock add libcurl"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["36"], "fixed": null, "safe": "before 36", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["10.0"], "fixed": null, "safe": "before 10.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "active iq unified manager", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy active-iq-unified-manager || rpm -q active-iq-unified-manager || active-iq-unified-manager --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27536"}], "cwe": ["CWE-305", "CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.77798, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "fixed", "fixed": "7.68.0-1ubuntu2.18", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.68.0-1ubuntu2.18\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "fixed", "fixed": "7.81.0-1ubuntu1.10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.81.0-1ubuntu1.10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-30.el8_8.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4523\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.6 Extended Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-22.el8_6.12", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:0428\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "fixed", "fixed": "curl-7.76.1-26.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:6679\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-193", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27536.html", "note": "ALAS2023-2023-193"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-2070", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27536.html", "note": "ALAS2-2023-2070"}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2023-1727", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27536.html", "note": "ALAS-2023-1727"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2023-28321", "publisher": "HackerOne", "title": "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wil", "summary": "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that oth", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.01806, "kev": false, "added": "2023-05-26", "pub": "2023-05-26T21:15:16.020", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": ["< 8.1.0"], "fixed": "8.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 8.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["10.0"], "fixed": null, "safe": "before 10.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["37", "38"], "fixed": null, "safe": "before 37", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "clustered data ontap", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "ontap antivirus connector", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ontap-antivirus-connector || rpm -q ontap-antivirus-connector || ontap-antivirus-connector --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28321"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1950627"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1950627"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.78419, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "fixed", "fixed": "7.68.0-1ubuntu2.19", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.68.0-1ubuntu2.19\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "fixed", "fixed": "7.81.0-1ubuntu1.11", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.81.0-1ubuntu1.11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10ubuntu1", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10ubuntu1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10ubuntu1", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10ubuntu1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10ubuntu1", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10ubuntu1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-30.el8_8.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4523\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.6 Extended Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-22.el8_6.9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:6292\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "fixed", "fixed": "curl-7.76.1-23.el9_2.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:4354\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 9.0 Extended Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.76.1-14.el9_0.7", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:5598\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-270", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-28321.html", "note": "ALAS2023-2023-270"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-2230", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-28321.html", "note": "ALAS2-2023-2230"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67191", "publisher": "VulnCheck", "title": "Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows re", "summary": "Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the recv loop's termination condition uses an incorrect OR operator where an AND operator is required, enabling exploitation on any SSH or SFTP connection before authentication occurs.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00963, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:57.540", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67191"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61325, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18191", "publisher": "TWCERT/CC", "title": "VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote at", "summary": "VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00689, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.223", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18191"}], "cwe": ["CWE-912"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52228, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54735", "publisher": "GitHub, Inc.", "title": "Prebid Server is an open-source solution for running real-time advertising auctions in the cloud", "summary": "Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafted bid request parameters to cause server-side requests to unintended destinations and potentially expose internal network services or sensitive server en", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00611, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:54.317", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "prebid server", "vendor": "prebid", "type": "app", "affected": ["< 4.4.0"], "fixed": "4.4.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prebid-server || rpm -q prebid-server || prebid-server --version"}, {"label": "2. UPGRADE to 4.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prebid-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prebid-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54735"}, {"t": "Patch", "u": "https://github.com/prebid/prebid-server/commit/494ac271cd4b5024df9123ef25ca3cff96390be3"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/prebid/prebid-server/pull/4802"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/prebid/prebid-server/security/advisories/GHSA-4p3g-4hcj-wpvx"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/prebid/prebid-server/v4", "status": "fixed", "fixed": "4.4.0", "cmd": "go get github.com/prebid/prebid-server/v4@v4.4.0\ngo list -m github.com/prebid/prebid-server/v4", "url": "https://github.com/advisories/GHSA-4p3g-4hcj-wpvx", "note": "vulnerable: < 4.4.0"}, {"os": "Go", "pkg": "github.com/prebid/prebid-server/v3", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-4p3g-4hcj-wpvx", "note": "vulnerable: <= 3.30.0"}, {"os": "Go", "pkg": "github.com/prebid/prebid-server/v2", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-4p3g-4hcj-wpvx", "note": "vulnerable: <= 2.32.0"}, {"os": "Go", "pkg": "github.com/prebid/prebid-server", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-4p3g-4hcj-wpvx", "note": "vulnerable: <= 0.275.0"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18452", "publisher": "TWCERT/CC", "title": "DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability", "summary": "DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.0063, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T07:16:27.400", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18452"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62325", "publisher": "GitHub, Inc.", "title": "goshs is a feature-rich single-binary file server for red teamers and developers", "summary": "goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != \"\" && Password != \"\", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00589, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:10.077", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62325"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4749, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm", "url": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/patrickhener/goshs/v2", "status": "fixed", "fixed": "2.1.4", "cmd": "go get github.com/patrickhener/goshs/v2@v2.1.4\ngo list -m github.com/patrickhener/goshs/v2", "url": "https://github.com/advisories/GHSA-rjrw-mjq6-hpmm", "note": "vulnerable: = 2.1.3"}, {"os": "Go", "pkg": "goshs.de/goshs/v2", "status": "fixed", "fixed": "2.1.4", "cmd": "go get goshs.de/goshs/v2@v2.1.4\ngo list -m goshs.de/goshs/v2", "url": "https://github.com/advisories/GHSA-rjrw-mjq6-hpmm", "note": "vulnerable: = 2.1.3"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-35052", "publisher": "GitHub, Inc.", "title": "D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures", "summary": "D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server. This vulnerability is fixed in 3.22.0.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0086, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:42.747", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "d-tale", "vendor": "man", "type": "app", "affected": ["< 3.22.0"], "fixed": "3.22.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy d-tale || rpm -q d-tale || d-tale --version"}, {"label": "2. UPGRADE to 3.22.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade d-tale"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade d-tale"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35052"}, {"t": "Vendor Advisory", "u": "https://github.com/man-group/dtale/security/advisories/GHSA-436g-fhfc-9g5w"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5811, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "dtale", "status": "fixed", "fixed": "3.22.0", "cmd": "pip install --upgrade \"dtale>=3.22.0\"\npip show dtale", "url": "https://github.com/advisories/GHSA-436g-fhfc-9g5w", "note": "vulnerable: < 3.22.0"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-56292", "publisher": "Joomla! Project", "title": "Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in ", "summary": "Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01381, "kev": false, "added": "2026-07-09", "pub": "2026-07-09T15:16:37.937", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "acymailing", "vendor": "acymailing", "type": "app", "affected": [">= 6.0.0 and < 10.11.1"], "fixed": "10.11.1", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy acymailing || rpm -q acymailing || acymailing --version"}, {"label": "2. UPGRADE to 10.11.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade acymailing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade acymailing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison acymailing\nsudo apt install acymailing=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold acymailing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list acymailing\nsudo dnf downgrade acymailing-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add acymailing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56292"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.71937, "pocs": [{"kind": "poc", "name": "nullwhisper/CVE-2026-56292-AcyMailing-SQLi (3 stars)", "url": "https://github.com/nullwhisper/CVE-2026-56292-AcyMailing-SQLi", "stars": 3}, {"kind": "writeup", "name": "mysites.guru/blog/acymailing-sql-injection-disclosure/", "url": "https://mysites.guru/blog/acymailing-sql-injection-disclosure/"}, {"kind": "nuclei", "name": "AcyMailing < 10.11.1 - Unauthenticated SQL Injection", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56292.yaml"}], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-41920", "publisher": "Apache Software Foundation", "title": "Improper Access Control vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: fro", "summary": "Improper Access Control vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 9.0.0 through 9.1.14, from 10.0.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 9.1.15 or 10.1.4, which fixes the issue.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00532, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:31.420", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 9.0.0 and < 9.2.15", ">= 10.0.0 and < 10.1.4"], "fixed": "9.2.15, 10.1.4", "safe": "before 9.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 9.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41920"}, {"t": "Vendor Advisory, Mailing List", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.44178, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-29198", "publisher": "HackerOne", "title": "In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulne", "summary": "In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00561, "kev": false, "added": "2026-04-23", "pub": "2026-04-23T00:16:45.060", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "rocket.chat", "vendor": "rocket.chat", "type": "app", "affected": ["< 7.10.9", ">= 7.11.0 and < 7.11.6", ">= 7.12.0 and < 7.12.6", ">= 7.13.0 and < 7.13.5", ">= 8.0.0 and < 8.0.3", ">= 8.1.0 and < 8.1.2", ">= 8.2.0 and < 8.2.1", "8.3.0 rc0"], "fixed": "7.10.9, 7.11.6, 7.12.6, 7.13.5, 8.0.3, 8.1.2, 8.2.1", "safe": "before 7.11.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rocket.chat || rpm -q rocket.chat || rocket.chat --version"}, {"label": "2. UPGRADE to 7.10.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rocket.chat"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rocket.chat"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.11.0 (Debian / Ubuntu)", "cmd": "apt-cache madison rocket.chat\nsudo apt install rocket.chat=<VERSION_BEFORE_7.11.0>\nsudo apt-mark hold rocket.chat"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rocket.chat\nsudo dnf downgrade rocket.chat-<VERSION_BEFORE_7.11.0>\nsudo dnf versionlock add rocket.chat"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-29198"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/RocketChat/Rocket.Chat/pull/39492"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45916, "pinned": false, "pocs": [{"kind": "poc", "name": "hieuminhnv/CVE-2026-29198-POC (1 stars)", "url": "https://github.com/hieuminhnv/CVE-2026-29198-POC", "stars": 1}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49108", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Moderno < 1.43 versions.", "summary": "Unauthenticated PHP Object Injection in Moderno < 1.43 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T14:17:56.763", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49108"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46139, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60024", "publisher": "Joomla! Project", "title": "Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla exten", "summary": "Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00545, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T16:17:16.113", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60024"}], "cwe": ["CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4499, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17561", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunication", "summary": "Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection.\n\nThis issue affects Logsign SIEM: before 6.4.115.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T13:17:19.730", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17561"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46164, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-35029", "publisher": "GitHub, Inc.", "title": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format", "summary": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrar", "cvss": 8.8, "sev": "HIGH", "epss": 0.03982, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:12.353", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "litellm", "vendor": "litellm", "type": "app", "affected": ["< 1.83.0"], "fixed": "1.83.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy litellm || rpm -q litellm || litellm --version"}, {"label": "2. UPGRADE to 1.83.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade litellm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade litellm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35029"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/BerriAI/litellm/security/advisories/GHSA-53mr-6c8q-9789"}], "cwe": ["CWE-863", "CWE-425"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "EPSS top 10%: very likely to be exploited"], "fix": true, "watched": false, "epss_pct": 0.90453, "pocs": [{"kind": "poc", "name": "learner202649/CVE-2026-35029-PoC (0 stars)", "url": "https://github.com/learner202649/CVE-2026-35029-PoC", "stars": 0}, {"kind": "nuclei", "name": "LiteLLM - Arbitrary File Read", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35029.yaml"}], "mentions": [{"src": "Check Point Research", "group": "research", "title": "When LLM Gateways Go Wrong: Findings from LiteLLM", "url": "https://research.checkpoint.com/2026/when-llm-gateways-go-wrong-findings-from-litellm/", "date": "2026-10-13"}], "buzz": 1, "pinned": false, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "litellm", "status": "fixed", "fixed": "1.83.0", "cmd": "pip install --upgrade \"litellm>=1.83.0\"\npip show litellm", "url": "https://github.com/advisories/GHSA-53mr-6c8q-9789", "note": "vulnerable: < 1.83.0"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66897", "publisher": "Canonical Ltd.", "title": "A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit pe", "summary": "A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates the path against a confined os.Root directory handle but subsequently opens and creates the file using os.Create with an unconfined string path. This dis", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00717, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T10:16:39.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": ["< 4.0.13", ">= 5.0.0 and < 5.0.9", ">= 5.1 and < 5.21.7", ">= 6.0 and <= 6.9"], "fixed": "4.0.13, 5.0.9, 5.21.7", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66897"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-q39m-8fx9-42fv"}], "cwe": ["CWE-22", "CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.53305, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-q39m-8fx9-42fv", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-q39m-8fx9-42fv"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2025-11708", "publisher": "Mozilla Corporation", "title": "Use-after-free in MediaTrackGraphImpl::GetInstance()", "summary": "Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00509, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:36.970", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", "< 144.0"], "fixed": "140.4.0, 144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11708"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4262, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18154\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18320\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-4.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19278\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18285\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18983\nrpm -q thunderbird", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1246", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11708.html", "note": "ALAS2023-2025-1246"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2025-3052", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11708.html", "note": "ALAS2-2025-3052"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42758", "publisher": "Patchstack", "title": "Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allo", "summary": "Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a through < 4.08.253.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00525, "kev": false, "added": "2026-05-27", "pub": "2026-05-27T11:16:22.330", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42758"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43706, "pinned": false, "pocs": [{"kind": "poc", "name": "izxci/CVE-2026-42758 (0 stars)", "url": "https://github.com/izxci/CVE-2026-42758", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-56451", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Opcenter X (All versions < V2604)", "summary": "A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header.\r\nThis could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00498, "kev": false, "added": "2026-07-14", "pub": "2026-07-14T10:16:33.287", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56451"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41797, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65879", "publisher": "Joomla! Project", "title": "Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page", "summary": "Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00512, "kev": false, "added": "2026-07-27", "pub": "2026-07-27T14:17:01.103", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65879"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42791, "pinned": false, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/", "url": "https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-16498", "publisher": "HashiCorp Inc.", "title": "The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the st", "summary": "The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00456, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:32.117", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16498"}], "cwe": ["CWE-488"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38634, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14446", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in t", "summary": "IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00525, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:25.660", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.30", ">= 9.0.0.0 and < 9.0.5.28"], "fixed": "8.5.5.30, 9.0.5.28", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.30 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14446"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281631"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43707, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65884", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows use", "summary": "Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00517, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:10.677", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65884"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43186, "pinned": false, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/gridbox-23-critical-vulnerabilities/", "url": "https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65887", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassw", "summary": "Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding super admins.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00517, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:28.613", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65887"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43186, "pinned": false, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/gridbox-23-critical-vulnerabilities/", "url": "https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65888", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method a", "summary": "Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00517, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:28.813", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65888"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43187, "pinned": false, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/gridbox-23-critical-vulnerabilities/", "url": "https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76606", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.", "summary": "Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00496, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.680", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76606"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4167, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2022-43552", "publisher": "HackerOne", "title": "A use after free vulnerability exists in curl <7.87.0", "summary": "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.02714, "kev": false, "added": "2023-02-09", "pub": "2023-02-09T20:15:10.950", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": ["< 7.87.0"], "fixed": "7.87.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 7.87.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "macos", "vendor": "apple", "type": "os", "affected": [">= 13.0 and < 13.3"], "fixed": "13.3", "safe": "before 13.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "universal forwarder", "vendor": "splunk", "type": "app", "affected": [">= 8.2.0 and < 8.2.12", ">= 9.0.0 and < 9.0.6", "9.1.0"], "fixed": "8.2.12, 9.0.6", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy universal-forwarder || rpm -q universal-forwarder || universal-forwarder --version"}, {"label": "2. UPGRADE to 8.2.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade universal-forwarder"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade universal-forwarder"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison universal-forwarder\nsudo apt install universal-forwarder=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold universal-forwarder"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list universal-forwarder\nsudo dnf downgrade universal-forwarder-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add universal-forwarder"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-43552"}, {"t": "Vendor Advisory", "u": "https://security.netapp.com/advisory/ntap-20230214-0002/"}, {"t": "Vendor Advisory", "u": "https://security.netapp.com/advisory/ntap-20230214-0002/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.85907, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "fixed", "fixed": "7.68.0-1ubuntu2.15", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.68.0-1ubuntu2.15\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "fixed", "fixed": "7.81.0-1ubuntu1.7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.81.0-1ubuntu1.7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.86.0-3", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.86.0-3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.86.0-3", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.86.0-3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "fixed", "fixed": "curl-7.29.0-59.el7_9.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:7743\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-30.el8", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:2963\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.6 Extended Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-22.el8_6.12", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:0428\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "fixed", "fixed": "curl-7.76.1-23.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:2478\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-7.87.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-7.87.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-7.87.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-7.87.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-083", "url": "https://alas.aws.amazon.com/cve/html/CVE-2022-43552.html", "note": "ALAS2023-2023-083"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-1924", "url": "https://alas.aws.amazon.com/cve/html/CVE-2022-43552.html", "note": "ALAS2-2023-1924"}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2023-1729", "url": "https://alas.aws.amazon.com/cve/html/CVE-2022-43552.html", "note": "ALAS-2023-1729"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-23916", "publisher": "HackerOne", "title": "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"ch", "summary": "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compr", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.01742, "kev": false, "added": "2023-02-23", "pub": "2023-02-23T20:15:13.777", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": [">= 7.57.0 and < 7.88.0"], "fixed": "7.88.0", "safe": "before 7.57.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 7.88.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.57.0 (Debian / Ubuntu)", "cmd": "apt-cache madison curl\nsudo apt install curl=<VERSION_BEFORE_7.57.0>\nsudo apt-mark hold curl"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list curl\nsudo dnf downgrade curl-<VERSION_BEFORE_7.57.0>\nsudo dnf versionlock add curl"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["36"], "fixed": null, "safe": "before 36", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["10.0", "11.0"], "fixed": null, "safe": "before 10.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h700s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-23916"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.77597, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "fixed", "fixed": "7.68.0-1ubuntu2.16", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.68.0-1ubuntu2.16\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "fixed", "fixed": "7.81.0-1ubuntu1.8", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.81.0-1ubuntu1.8\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-1", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-1", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-25.el8_7.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:1140\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.4 Advanced Mission Critical Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-18.el8_4.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:3460\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.4 Telecommunications Update Service", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-18.el8_4.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:3460\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.4 Update Services for SAP Solutions", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-18.el8_4.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:3460\nrpm -q curl", "url": null, "note": null}, {"os": "RHEL 8.6 Extended Update Support", "pkg": "curl", "status": "fixed", "fixed": "curl-7.61.1-22.el8_6.6", "cmd": "sudo dnf upgrade --advisory=RHSA-2023:1842\nrpm -q curl", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-7.88.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-7.88.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-7.88.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-7.88.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-114", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-23916.html", "note": "ALAS2023-2023-114"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-1986", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-23916.html", "note": "ALAS2-2023-1986"}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2023-1729", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-23916.html", "note": "ALAS-2023-1729"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-28320", "publisher": "HackerOne", "title": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backend", "summary": "A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.02658, "kev": false, "added": "2023-05-26", "pub": "2023-05-26T21:15:15.937", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": ["< 8.1.0"], "fixed": "8.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 8.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "macos", "vendor": "apple", "type": "os", "affected": [">= 11.0 and < 11.7.9", ">= 12.0 and < 12.6.8", ">= 13.0 and < 13.5"], "fixed": "11.7.9, 12.6.8, 13.5", "safe": "before 11.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "clustered data ontap", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "ontap antivirus connector", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ontap-antivirus-connector || rpm -q ontap-antivirus-connector || ontap-antivirus-connector --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28320"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1929597"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1929597"}], "cwe": ["CWE-400", "CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-10", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.1.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58153", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when co", "summary": "Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1.\n\nThis issue affects Apache Traffic Server: from 10.0.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00639, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T09:16:29.613", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 10.0.0 and < 10.1.4"], "fixed": "10.1.4", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 10.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58153"}, {"t": "Vendor Advisory, Mailing List", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50004, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67323", "publisher": "VulnCheck", "title": "GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archi", "summary": "GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbitrary command execution). Additionally, Repo.iter_commits() and Repo.blame() do not check for leading-dash revision arguments, so a revision like --output=<path> can cause Git to open and truncate an arbitrary file. Exploitation r", "cvss": 8.4, "sev": "HIGH", "epss": 0.01251, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:02.637", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.51"], "fixed": "3.1.51", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.51", "cmd": "pip install --upgrade \"gitpython>=3.1.51\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67323"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.69215, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "GitPython", "status": "fixed", "fixed": "3.1.51", "cmd": "pip install --upgrade \"GitPython>=3.1.51\"\npip show GitPython", "url": "https://github.com/advisories/GHSA-956x-8gvw-wg5v", "note": "vulnerable: <= 3.1.50"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-27395", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.", "summary": "Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:12.620", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27395"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40679, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-64863", "publisher": "GitHub, Inc.", "title": "goshs is a feature-rich single-binary file server for red teamers and developers", "summary": "goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00629, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:10.213", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64863"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49533, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/goshs-labs/goshs/security/advisories/GHSA-hq33-8jgp-8qq3", "url": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-hq33-8jgp-8qq3"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "goshs.de/goshs/v2", "status": "fixed", "fixed": "2.1.4", "cmd": "go get goshs.de/goshs/v2@v2.1.4\ngo list -m goshs.de/goshs/v2", "url": "https://github.com/advisories/GHSA-hq33-8jgp-8qq3", "note": "vulnerable: <= 2.1.3"}, {"os": "Go", "pkg": "github.com/patrickhener/goshs/v2", "status": "fixed", "fixed": "2.1.4", "cmd": "go get github.com/patrickhener/goshs/v2@v2.1.4\ngo list -m github.com/patrickhener/goshs/v2", "url": "https://github.com/advisories/GHSA-hq33-8jgp-8qq3", "note": "vulnerable: <= 2.1.3"}, {"os": "Go", "pkg": "goshs.de/goshs", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-hq33-8jgp-8qq3", "note": "vulnerable: <= 1.1.4"}, {"os": "Go", "pkg": "github.com/patrickhener/goshs", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-hq33-8jgp-8qq3", "note": "vulnerable: <= 1.1.4"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-16504", "publisher": "CERT/CC", "title": "Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default data", "summary": "Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password (\"zulip\"), and DISABLE_HTTPS=True.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:58.873", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16504"}], "cwe": ["CWE-321", "CWE-1188", "CWE-1393"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40688, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2022-47762", "publisher": "MITRE", "title": "In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.", "summary": "In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00928, "kev": false, "added": "2023-02-03", "pub": "2023-02-03T21:15:10.797", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gin-vue-admin", "vendor": "gin-vue-admin project", "type": "app", "affected": ["< 2.5.5"], "fixed": "2.5.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gin-vue-admin || rpm -q gin-vue-admin || gin-vue-admin --version"}, {"label": "2. UPGRADE to 2.5.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gin-vue-admin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gin-vue-admin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-47762"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60214, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/flipped-aurora/gin-vue-admin", "status": "fixed", "fixed": "2.5.5", "cmd": "go get github.com/flipped-aurora/gin-vue-admin@v2.5.5\ngo list -m github.com/flipped-aurora/gin-vue-admin", "url": "https://github.com/advisories/GHSA-x623-hr8h-7g5v", "note": "vulnerable: < 2.5.5"}, {"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-28663", "publisher": "Tenable Network Security, Inc.", "title": "The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnera", "summary": "The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the \u2018fieldmap\u2019 parameter in the fpropdf_export_file action.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00926, "kev": false, "added": "2023-03-22", "pub": "2023-03-22T21:15:18.967", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "formidable pro2pdf", "vendor": "formidablepro2pdf", "type": "app", "affected": ["< 3.11"], "fixed": "3.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy formidable-pro2pdf || rpm -q formidable-pro2pdf || formidable-pro2pdf --version"}, {"label": "2. UPGRADE to 3.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade formidable-pro2pdf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade formidable-pro2pdf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28663"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.6011, "pinned": false, "pocs": [{"kind": "writeup", "name": "www.tenable.com/security/research/tra-2023-2", "url": "https://www.tenable.com/security/research/tra-2023-2"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-27537", "publisher": "HackerOne", "title": "A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate \"handles\"", "summary": "A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate \"handles\". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.01898, "kev": false, "added": "2023-03-30", "pub": "2023-03-30T20:15:07.617", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "libcurl", "vendor": "haxx", "type": "app", "affected": ["7.88.0", "7.88.1"], "fixed": null, "safe": "before 7.88.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libcurl || rpm -q libcurl || libcurl --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.88.0 (Debian / Ubuntu)", "cmd": "apt-cache madison libcurl\nsudo apt install libcurl=<VERSION_BEFORE_7.88.0>\nsudo apt-mark hold libcurl"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libcurl\nsudo dnf downgrade libcurl-<VERSION_BEFORE_7.88.0>\nsudo dnf versionlock add libcurl"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "active iq unified manager", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy active-iq-unified-manager || rpm -q active-iq-unified-manager || active-iq-unified-manager --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "clustered data ontap", "vendor": "netapp", "type": "app", "affected": ["9.0"], "fixed": null, "safe": "before 9.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0 (Debian / Ubuntu)", "cmd": "apt-cache madison clustered-data-ontap\nsudo apt install clustered-data-ontap=<VERSION_BEFORE_9.0>\nsudo apt-mark hold clustered-data-ontap"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list clustered-data-ontap\nsudo dnf downgrade clustered-data-ontap-<VERSION_BEFORE_9.0>\nsudo dnf versionlock add clustered-data-ontap"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "brocade fabric operating system firmware", "vendor": "broadcom", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h500s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27537"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.79504, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "curl", "status": "fixed", "fixed": "7.88.1-7", "cmd": "sudo apt update && sudo apt install --only-upgrade curl\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' curl)\" ge \"7.88.1-7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "curl", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "curl", "status": "fixed", "fixed": "curl-8.0.0-r0", "cmd": "apk add --upgrade curl\napk info -v curl", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2023-193", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27537.html", "note": "ALAS2023-2023-193"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2023-2070", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-27537.html", "note": "ALAS2-2023-2070"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-30899", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillan", "summary": "A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.01114, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:18.183", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "siveillance video", "vendor": "siemens", "type": "app", "affected": ["2020 r2", "2020 r3", "2021 r1", "2021 r2", "2022 r1", "2022 r2", "2022 r3", "2023 r1"], "fixed": null, "safe": "before 2020", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siveillance-video || rpm -q siveillance-video || siveillance-video --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2020 (Debian / Ubuntu)", "cmd": "apt-cache madison siveillance-video\nsudo apt install siveillance-video=<VERSION_BEFORE_2020>\nsudo apt-mark hold siveillance-video"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siveillance-video\nsudo dnf downgrade siveillance-video-<VERSION_BEFORE_2020>\nsudo dnf versionlock add siveillance-video"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30899"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-789345.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-789345.pdf"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.65759, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36750", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01535, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.170", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36750"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.74653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36751", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01535, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.233", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36751"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.74654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36752", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01535, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.297", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36752"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.74654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36754", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01535, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.427", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36754"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.74653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5734", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 14", "summary": "Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00591, "kev": false, "added": "2026-04-07", "pub": "2026-04-07T13:16:47.667", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.9.1", "< 149.0.2"], "fixed": "140.9.1, 149.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.9.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.9.1", "< 149.0.2"], "fixed": "140.9.1, 149.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.9.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5734"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-25/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-27/"}], "cwe": ["CWE-787", "CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47573, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.9.1esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.9.1esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.9.1esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.9.1esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.9.1esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.9.1esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.9.1esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.9.1esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.9.1-1.el10_1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:7672\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.9.1-1.el10_1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:9638\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.9.1-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:11813\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.9.1-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:13665\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.9.1-2.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:13977\nrpm -q firefox", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1621", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-5734.html", "note": "ALAS2023-2026-1621"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3271", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-5734.html", "note": "ALAS2-2026-3271"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49107", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.", "summary": "Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:46.443", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49107"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46137, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14959", "publisher": "IBM Corporation", "title": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary co", "summary": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01551, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.443", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aspera faspex", "vendor": "ibm", "type": "app", "affected": [">= 5.0.0 and < 5.0.16"], "fixed": "5.0.16", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aspera-faspex || rpm -q aspera-faspex || aspera-faspex --version"}, {"label": "2. UPGRADE to 5.0.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aspera-faspex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aspera-faspex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aspera-faspex\nsudo apt install aspera-faspex=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold aspera-faspex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aspera-faspex\nsudo dnf downgrade aspera-faspex-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add aspera-faspex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14959"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280530"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.74909, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-22068", "publisher": "Apache Software Foundation", "title": "Regular Expression without Anchors vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic ", "summary": "Regular Expression without Anchors vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00607, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.660", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 9.0.0 and < 9.2.15", ">= 10.0.0 and < 10.1.4"], "fixed": "9.2.15, 10.1.4", "safe": "before 9.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 9.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-22068"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-777"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.484, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63229", "publisher": "CSA", "title": "A pre-authentication blind SQL injection\nvulnerability in Koollab LMS allowed an unauthenticated attacker to u", "summary": "A pre-authentication blind SQL injection\nvulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via\nthe SSO OAuth endpoint to read sensitive database contents, including\npersonally identifiable information, credentials, and valid JWT tokens that may\nenable account takeover.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.267", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63229"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43493, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63230", "publisher": "CSA", "title": "A pre-authentication error-based SQL injection\nvulnerability in Koollab LMS allowed an unauthenticated attacke", "summary": "A pre-authentication error-based SQL injection\nvulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database\ncontents, including personally identifiable information, credentials, and valid\nJWT tokens that may enable account takeover, via the SCORM report endpoint.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.373", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63230"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43493, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54725", "publisher": "GitHub, Inc.", "title": "vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible", "summary": "vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and MutateSecret call newVaultClient in pkg/webhook/webhook.go, and vault.security.banzaicloud.io/vault-serviceaccount can cause a ServiceAccount JWT to be sent to an attacker-controlled Vault addre", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00449, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:17.013", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54725"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.3803, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/bank-vaults/vault-secrets-webhook", "status": "fixed", "fixed": "1.23.1", "cmd": "go get github.com/bank-vaults/vault-secrets-webhook@v1.23.1\ngo list -m github.com/bank-vaults/vault-secrets-webhook", "url": "https://github.com/advisories/GHSA-r2v3-8gwf-7ghm", "note": "vulnerable: <= 1.22.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67195", "publisher": "VulnCheck", "title": "Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to exec", "summary": "Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval() with only __builtins__={} cleared. Attackers can exploit Python object attribute traversal through the interpreter's loaded class list to reach subprocess.Popen", "cvss": 8.8, "sev": "HIGH", "epss": 0.01193, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:40.130", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67195"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.67791, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-23904", "publisher": "Apache Software Foundation", "title": "Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destina", "summary": "Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination.\u00a0A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior.\n\n\nThis issue affects Apache Kyuubi: from 1.8.0 before 1.12.0.\n\nUsers are recommended to upgrade to version 1.12.0, which disables the proxy by default.\u00a0To resto", "cvss": 7.3, "sev": "HIGH", "epss": 0.0085, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T10:16:40.913", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "kyuubi", "vendor": "apache", "type": "app", "affected": [">= 1.8.0 and < 1.12.0"], "fixed": "1.12.0", "safe": "before 1.8.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kyuubi || rpm -q kyuubi || kyuubi --version"}, {"label": "2. UPGRADE to 1.12.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kyuubi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kyuubi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.8.0 (Debian / Ubuntu)", "cmd": "apt-cache madison kyuubi\nsudo apt install kyuubi=<VERSION_BEFORE_1.8.0>\nsudo apt-mark hold kyuubi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list kyuubi\nsudo dnf downgrade kyuubi-<VERSION_BEFORE_1.8.0>\nsudo dnf versionlock add kyuubi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-23904"}, {"t": "Patch", "u": "https://github.com/apache/kyuubi/pull/7483"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ps79fcfx49ox9kwgztc5t5bw0tyhck9m"}], "cwe": ["CWE-923"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.57778, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58177", "publisher": "Apache Software Foundation", "title": "The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors", "summary": "The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors.\n\nThis issue affects Apache Traffic Server: from 10.0.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 10.1.4, which fix the issue.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00587, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T10:16:42.510", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 10.0.0 and < 10.1.4"], "fixed": "10.1.4", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 10.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58177"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4737, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65890", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors all", "summary": "Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00502, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:33.883", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65890"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42082, "pinned": false, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/gridbox-23-critical-vulnerabilities/", "url": "https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-21662", "publisher": "Johnson Controls", "title": "Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows U", "summary": "Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files.\n\nThis issue affects FM Systems Employee: before 2025.3.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00504, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:13.650", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fms employee", "vendor": "johnsoncontrols", "type": "app", "affected": ["<= 2025.3.1"], "fixed": "newer than 2025.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fms-employee || rpm -q fms-employee || fms-employee --version"}, {"label": "2. UPGRADE to newer than 2025.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fms-employee"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fms-employee"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21662"}, {"t": "Vendor Advisory", "u": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42237, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14175", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy In", "summary": "Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:31.633", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14175"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76221", "publisher": "VulnCheck", "title": "GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allow", "summary": "GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshCommand = touch /tmp/RCE #' to execute arbitrary commands via core.sshCommand or core.hooksPath on the next git operation.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T14:17:48.463", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.58"], "fixed": "3.1.58", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.58", "cmd": "pip install --upgrade \"gitpython>=3.1.58\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76221"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.55296, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "py3-gitpython", "status": "fixed", "fixed": "py3-gitpython-3.1.61-r0", "cmd": "apk add --upgrade py3-gitpython\napk info -v py3-gitpython", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66907", "publisher": "Apache Software Foundation", "title": "Relative path traversal vulnerability in Apache Camel Google Storage component.\n\n\n\nThis issue affects Apache C", "summary": "Relative path traversal vulnerability in Apache Camel Google Storage component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when the downloadFileName option is set. That option is documented as a folder or a filename, and when its value contains no expression token the consumer", "cvss": 7.5, "sev": "HIGH", "epss": 0.00808, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T17:18:06.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "camel", "vendor": "apache", "type": "app", "affected": [">= 4.0.0 and < 4.14.9", ">= 4.15.0 and < 4.18.4", ">= 4.19.0 and < 4.22.0"], "fixed": "4.14.9, 4.18.4, 4.22.0", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy camel || rpm -q camel || camel --version"}, {"label": "2. UPGRADE to 4.14.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade camel"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade camel"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison camel\nsudo apt install camel=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold camel"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list camel\nsudo dnf downgrade camel-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add camel"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66907"}, {"t": "Mailing List, Vendor Advisory", "u": "https://camel.apache.org/security/CVE-2026-66907.html"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56454, "pinned": false, "pocs": [{"kind": "poc", "name": "oscerd/CVE-2026-66907 (0 stars)", "url": "https://github.com/oscerd/CVE-2026-66907", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.apache.camel:camel-google-storage", "status": "fixed", "fixed": "4.14.9", "cmd": "Set org.apache.camel:camel-google-storage to 4.14.9 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-f78g-9385-qxqj", "note": "vulnerable: >= 4.0.0, < 4.14.9"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69100", "publisher": "VulnCheck", "title": "LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulne", "summary": "LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the script field via message template endpoints to execute arbitrary Groovy code and OS commands on the backend server.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01018, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:28.340", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69100"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.63033, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76311", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an emb", "summary": "In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the Splunk platform instance. The vulnerability is possible because the embedded report authorization flow does not block dispatch archive download requests be", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00446, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:14.837", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "splunk", "vendor": "splunk", "type": "app", "affected": [">= 9.4.0 and < 9.4.14", ">= 10.0.0 and < 10.0.9", ">= 10.2.0 and < 10.2.6", ">= 10.4.0 and < 10.4.2"], "fixed": "9.4.14, 10.0.9, 10.2.6, 10.4.2", "safe": "before 9.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy splunk || rpm -q splunk || splunk --version"}, {"label": "2. UPGRADE to 9.4.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade splunk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade splunk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison splunk\nsudo apt install splunk=<VERSION_BEFORE_9.4.0>\nsudo apt-mark hold splunk"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list splunk\nsudo dnf downgrade splunk-<VERSION_BEFORE_9.4.0>\nsudo dnf versionlock add splunk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76311"}, {"t": "Mitigation, Vendor Advisory", "u": "https://advisory.splunk.com/advisories/SVD-2026-0801"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37828, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2023-25957", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), ", "summary": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 latest compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0), Mendix SAML (Mendix 9.6 compatible, New Track) (All versions >= V3.1.9 < V3.2.7), Mendix SAML", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00581, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:28.577", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "saml", "vendor": "mendix", "type": "app", "affected": [">= 1.16.4 and < 1.17.2", ">= 2.2.0 and < 2.2.3", ">= 3.1.9 and < 3.2.5"], "fixed": "1.17.2, 2.2.3, 3.2.5", "safe": "before 1.16.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy saml || rpm -q saml || saml --version"}, {"label": "2. UPGRADE to 1.17.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade saml"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade saml"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.16.4 (Debian / Ubuntu)", "cmd": "apt-cache madison saml\nsudo apt install saml=<VERSION_BEFORE_1.16.4>\nsudo apt-mark hold saml"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list saml\nsudo dnf downgrade saml-<VERSION_BEFORE_1.16.4>\nsudo dnf versionlock add saml"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25957"}], "cwe": ["CWE-303", "CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47076, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-35050", "publisher": "GitHub, Inc.", "title": "text-generation-webui is an open-source web interface for running Large Language Models", "summary": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in \"py\" format and in the app root directory. This allows to overwrite python files, for instance the \"download-model.py\" file could be overwritten. Then, this python file can be triggered to get executed from \"Model\" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.006, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:42.583", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "textgen", "vendor": "oobabooga", "type": "app", "affected": ["< 4.1.1"], "fixed": "4.1.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy textgen || rpm -q textgen || textgen --version"}, {"label": "2. UPGRADE to 4.1.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade textgen"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade textgen"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35050"}, {"t": "Exploit, Mitigation", "u": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jg96-p5p6-q3cv"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.48074, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5735", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1", "summary": "Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00461, "kev": false, "added": "2026-04-07", "pub": "2026-04-07T13:16:47.763", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 149.0.2"], "fixed": "149.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 149.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 149.0.2"], "fixed": "149.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 149.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5735"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-25/"}], "cwe": ["CWE-787", "CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39008, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10/firefox-flatpak", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48242", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, pass", "summary": "Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:21.220", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48242"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.42558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-13164", "publisher": "Secur0", "title": "Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed a", "summary": "Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a working account on instances where registration is intended to be restricted, because the endpoint applies the AllowAny permission with no email verification, CAPTCHA, or administrator approval. Any account created this way can read", "cvss": 8.8, "sev": "HIGH", "epss": 0.0071, "kev": false, "added": "2026-06-24", "pub": "2026-06-24T17:16:56.847", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13164"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53003, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54653", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From  0.17.0 until 0.60.2, datamodel-code-generator preserves attacker-controlled default_factory values in src/datamodel_code_generator/parser/jsonschema.py through JsonSchemaObject.init and get_field_extras and emits them into Field(default_factory=...) or field(default", "cvss": 8.8, "sev": "HIGH", "epss": 0.00711, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.077", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": [">= 0.17.0 and < 0.60.2"], "fixed": "0.60.2", "safe": "before 0.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.60.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison datamodel-code-generator\nsudo apt install datamodel-code-generator=<VERSION_BEFORE_0.17.0>\nsudo apt-mark hold datamodel-code-generator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list datamodel-code-generator\nsudo dnf downgrade datamodel-code-generator-<VERSION_BEFORE_0.17.0>\nsudo dnf versionlock add datamodel-code-generator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54653"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/17fc235e234cbcfaaadef8c74cb72c9687db0d1d"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9"}], "cwe": ["CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.53051, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "datamodel-code-generator", "status": "fixed", "fixed": "0.60.2", "cmd": "pip install --upgrade \"datamodel-code-generator>=0.60.2\"\npip show datamodel-code-generator", "url": "https://github.com/advisories/GHSA-386q-5hp3-95m9", "note": "vulnerable: >= 0.17.0, <= 0.60.1"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67215", "publisher": "VulnCheck", "title": "cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC", "summary": "cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to ", "cvss": 7.5, "sev": "HIGH", "epss": 0.007, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:35.187", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "cjson", "vendor": "davegamble", "type": "app", "affected": ["<= 1.7.19"], "fixed": "newer than 1.7.19", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cjson || rpm -q cjson || cjson --version"}, {"label": "2. UPGRADE to newer than 1.7.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cjson"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cjson"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67215"}, {"t": "Patch", "u": "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261"}, {"t": "Patch", "u": "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52634, "pinned": false, "pocs": [{"kind": "writeup", "name": "joshua.hu/cjson-json-parser-cve-vulnerabilities", "url": "https://joshua.hu/cjson-json-parser-cve-vulnerabilities"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "cjson", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "cjson", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rpm-ostree", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67192", "publisher": "VulnCheck", "title": "Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows u", "summary": "Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can craft packets with an unvalidated length field passed directly to the GCM decrypt function, overwriting the stack cookie and return address to potentially achieve remote code execution before any authentication ", "cvss": 8.1, "sev": "HIGH", "epss": 0.01025, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:57.683", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67192"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.6329, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9044", "publisher": "TPLink", "title": "An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers", "summary": "An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from\u00a0improper filtering of special characters.\u00a0\n\nSuccessful exploitation of this vulnerability may enable an attacker to gain full control of the affected device, potentia", "cvss": 8.0, "sev": "HIGH", "epss": 0.02509, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:26.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "archer axe75 firmware", "vendor": "tp-link", "type": "os", "affected": ["< 1.5.6"], "fixed": "1.5.6", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9044"}, {"t": "Vendor Advisory", "u": "https://www.tp-link.com/us/support/faq/5215/"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.8465, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69253", "publisher": "GitHub, Inc.", "title": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows", "summary": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-tool components \u2014 AgentAsTool, ChatflowTool, and ExecuteFlow \u2014 ran code in the in-process \u00a0vm2\u00a0 sandbox. To build that code, they inserted a user-controlled \u00a0baseURL\u00a0 value straight into the JavaScript source, for example \u00a0const url = \"${baseURL}/...\";\u00a0. The only check on \u00a0baseURL\u00a0 was \u00a0isValidURL\u00a0, but a vali", "cvss": 8.8, "sev": "HIGH", "epss": 0.00664, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:29.100", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69253"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/3f257bdc8196082a178da7134a075824401b13b9"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6417"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wg86-r78f-74mp"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.51171, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-wg86-r78f-74mp", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wg86-r78f-74mp"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-wg86-r78f-74mp", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-wg86-r78f-74mp", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69254", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching packages/server/src/routes/node-custom-functions/index.ts could run a custom function that imported flowise-components/dist/src/utils.js, called execute", "cvss": 8.8, "sev": "HIGH", "epss": 0.00691, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:29.243", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69254"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/3086cb7e323bb96c5a581d3232ef975b0d92183d"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6306"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3769-jgqc-cxm7"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3769-jgqc-cxm7"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.52281, "pinned": false, "pocs": [{"kind": "poc", "name": "CompleteTech-LLC/flowise-cve-2026-69254-check (0 stars)", "url": "https://github.com/CompleteTech-LLC/flowise-cve-2026-69254-check", "stars": 0}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-3769-jgqc-cxm7", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-3769-jgqc-cxm7", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71479", "publisher": "GitHub, Inc.", "title": "New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system", "summary": "New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, max_tokens, max_completion_tokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversions in common/quota_math.go and related settlement paths, allowing a low-privileged account with positive balance or an active subscription to turn", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00647, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:44.307", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71479"}], "cwe": ["CWE-190", "CWE-682"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50384, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/QuantumNous/new-api", "status": "fixed", "fixed": "1.0.0-rc.18", "cmd": "go get github.com/QuantumNous/new-api@v1.0.0-rc.18\ngo list -m github.com/QuantumNous/new-api", "url": "https://github.com/advisories/GHSA-8r8v-xf7q-rcpr", "note": "vulnerable: <= 1.0.0-rc.17"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2023-27404", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20433)", "cvss": 7.8, "sev": "HIGH", "epss": 0.02507, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.427", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27404"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-121", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.84637, "pinned": false, "pocs": [{"kind": "writeup", "name": "cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2023-22647", "publisher": "SUSE", "title": "An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existi", "summary": "An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local\n cluster, resulting in the secret being deleted, but their read-level \npermissions to the secret being preserved. When this operation was \nfollowed-up by other specially crafted commands, it could result in the \nuser gaining access to tokens belonging to service accounts in the ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00715, "kev": false, "added": "2023-06-01", "pub": "2023-06-01T13:15:10.467", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "rancher", "vendor": "suse", "type": "app", "affected": [">= 2.6.0 and < 2.6.13", ">= 2.7.0 and < 2.7.4"], "fixed": "2.6.13, 2.7.4", "safe": "before 2.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rancher || rpm -q rancher || rancher --version"}, {"label": "2. UPGRADE to 2.6.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rancher"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rancher"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison rancher\nsudo apt install rancher=<VERSION_BEFORE_2.6.0>\nsudo apt-mark hold rancher"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rancher\nsudo dnf downgrade rancher-<VERSION_BEFORE_2.6.0>\nsudo dnf versionlock add rancher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22647"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647"}, {"t": "Vendor Advisory", "u": "https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647"}, {"t": "Vendor Advisory", "u": "https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6"}], "cwe": ["CWE-267"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.53212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/rancher/rancher", "status": "fixed", "fixed": "2.6.13", "cmd": "go get github.com/rancher/rancher@v2.6.13\ngo list -m github.com/rancher/rancher", "url": "https://github.com/advisories/GHSA-p976-h52c-26p6", "note": "vulnerable: >= 2.6.0, < 2.6.13"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55389", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref targets in src/datamodel_code_generator/parser/jsonschema.py through is_url and _get_ref_body without containing file:// or ../ traversal references to the input directory and without honoring --no-allow-", "cvss": 7.5, "sev": "HIGH", "epss": 0.00547, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:48.400", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": ["< 0.62.0"], "fixed": "0.62.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.62.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55389"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/2ff4a72b4550a2b2069754c5b075b1655067e5fb"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8359-h9fx-j6v9"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8359-h9fx-j6v9"}], "cwe": ["CWE-22", "CWE-200", "CWE-610"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45097, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "datamodel-code-generator", "status": "fixed", "fixed": "0.62.0", "cmd": "pip install --upgrade \"datamodel-code-generator>=0.62.0\"\npip show datamodel-code-generator", "url": "https://github.com/advisories/GHSA-8359-h9fx-j6v9", "note": "vulnerable: <= 0.61.0"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14488", "publisher": "Wordfence", "title": "The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatc", "summary": "The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handle_request() function routing the mbfs_delete action without any capability or ownership check, and the nonce verification in check_ajax() being gated behind is_ajax() which is false for template_redirect requests, making it bypassa", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00523, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:48.063", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14488"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43549, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17566", "publisher": "PostgreSQL", "title": "pgAdmin 4's Import/Export Data tool builds a psql \\copy (...) command line by interpolating a user-supplied SQ", "summary": "pgAdmin 4's Import/Export Data tool builds a psql \\copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql via --command. To stop an attacker from breaking out of the (...) wrapper, create_import_export_job() (route POST /import_export/job/<sid>, gated only by the ordinary, commonly-granted tools_import_export_data permission) validated the query with a hand-written parenthesi", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00673, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:00.037", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": ["< 9.18"], "fixed": "9.18", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.18 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17566"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/1496fabe28c9f825f6bac0f0d000d9d3276322c3"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10213"}], "cwe": ["CWE-78", "CWE-115"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.51562, "pinned": false, "pocs": [{"kind": "poc", "name": "HackSpeak/CVE-2026-17566 (2 stars)", "url": "https://github.com/HackSpeak/CVE-2026-17566", "stars": 2}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69250", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the OAuth2 token refresh endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is unauthenticated by design and performs a server-side HTTP request to the credential-controlled accessTokenUrl without SSRF protections. Runtime validation confirmed that the endpoint was reachable without authentication, triggered outbound POST requests t", "cvss": 7.5, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:44.277", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69250"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/da8b251a9a4c59484ceaf6f71df7406aede7bef2"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-r745-8hwv-h473"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-r745-8hwv-h473"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4662, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-r745-8hwv-h473", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66908", "publisher": "Apache Software Foundation", "title": "Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.\n\n\n\nThis issue affects Apac", "summary": "Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.\n\n\n\nThis issue affects Apache Camel: from 4.8.0 before 4.22.0.\n\n\n\nThe camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT keystore properties. JWTAuthenticationConfigurer.buildJwtOptions returned null when neither jwtIssuer nor jwtAudience was configured, and the caller th", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T17:18:06.530", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "camel", "vendor": "apache", "type": "app", "affected": [">= 4.8.0 and < 4.22.0"], "fixed": "4.22.0", "safe": "before 4.8.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy camel || rpm -q camel || camel --version"}, {"label": "2. UPGRADE to 4.22.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade camel"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade camel"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.8.0 (Debian / Ubuntu)", "cmd": "apt-cache madison camel\nsudo apt install camel=<VERSION_BEFORE_4.8.0>\nsudo apt-mark hold camel"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list camel\nsudo dnf downgrade camel-<VERSION_BEFORE_4.8.0>\nsudo dnf versionlock add camel"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66908"}, {"t": "Mailing List, Vendor Advisory", "u": "https://camel.apache.org/security/CVE-2026-66908.html"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48557, "pinned": false, "pocs": [{"kind": "poc", "name": "oscerd/CVE-2026-66908 (0 stars)", "url": "https://github.com/oscerd/CVE-2026-66908", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.apache.camel:camel-platform-http-main", "status": "fixed", "fixed": "4.22.0", "cmd": "Set org.apache.camel:camel-platform-http-main to 4.22.0 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-fpm2-m4qq-wghr", "note": "vulnerable: >= 4.8.0, < 4.22.0"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2022-43716", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM", "summary": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions <", "cvss": 7.5, "sev": "HIGH", "epss": 0.00954, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:17.467", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic cp 1242-7 v2 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 dnp3 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 iec firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte eu firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte us firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-43716"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61018, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2022-43768", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM", "summary": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions <", "cvss": 7.5, "sev": "HIGH", "epss": 0.00954, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:17.617", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic cp 1242-7 v2 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 dnp3 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 iec firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte eu firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte us firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-43768"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61018, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2023-2186", "publisher": "Trellix", "title": "On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a special", "summary": "On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string vulnerability to repeatedly crash the GTWWebMonitor.exe process to DoS the Web Monitor.  Furthermore, an authenticated user can leverage this vulnerability to lea", "cvss": 8.2, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2023-06-07", "pub": "2023-06-07T07:15:08.490", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "scada data gateway", "vendor": "trianglemicroworks", "type": "app", "affected": ["<= 5.01.03"], "fixed": "newer than 5.01.03", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scada-data-gateway || rpm -q scada-data-gateway || scada-data-gateway --version"}, {"label": "2. UPGRADE to newer than 5.01.03 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scada-data-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scada-data-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-2186"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52868, "pinned": false, "pocs": [{"kind": "writeup", "name": "www.trellix.com/en-us/about/newsroom/stories/research/industrial-and-manufacturing-cves.ht", "url": "https://www.trellix.com/en-us/about/newsroom/stories/research/industrial-and-manufacturing-cves.html"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36521", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions ", "summary": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a\r\nvulnerability that may lead to a denial of service condition. An attacker may\r\ncause a denial ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00626, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.897", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic mv540 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv540 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 u firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 x firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36521"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49396, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2023-36755", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00972, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.490", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36755"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.61617, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-34783", "publisher": "GitHub, Inc.", "title": "Ferret is a declarative system for working with web data", "summary": "Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret. When an operator scrapes a website that returns filenames containing ../ sequences, and uses those filenames to construct output paths (a standard scraping pattern), the attacker contr", "cvss": 8.1, "sev": "HIGH", "epss": 0.00714, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:10.430", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ferret", "vendor": "montferret", "type": "app", "affected": ["< 2.0.0", "2.0.0 alpha1", "2.0.0 alpha2", "2.0.0 alpha3"], "fixed": "2.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ferret || rpm -q ferret || ferret --version"}, {"label": "2. UPGRADE to 2.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ferret"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ferret"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34783"}, {"t": "Patch", "u": "https://github.com/MontFerret/ferret/commit/160ebad6bd50f153453e120f6d909f5b83322917"}, {"t": "Exploit, Mitigation", "u": "https://github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j"}, {"t": "Exploit, Mitigation", "u": "https://github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.53205, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j", "url": "https://github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/MontFerret/ferret/v2", "status": "fixed", "fixed": "2.0.0-alpha.4", "cmd": "go get github.com/MontFerret/ferret/v2@v2.0.0-alpha.4\ngo list -m github.com/MontFerret/ferret/v2", "url": "https://github.com/advisories/GHSA-j6v5-g24h-vg4j", "note": "vulnerable: < 2.0.0-alpha.4"}, {"os": "Go", "pkg": "github.com/MontFerret/ferret", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-j6v5-g24h-vg4j", "note": "vulnerable: <= 0.18.1"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5208", "publisher": "GitLab Inc.", "title": "Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute a", "summary": "Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names", "cvss": 8.2, "sev": "HIGH", "epss": 0.01501, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T12:16:22.383", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "coolercontrold", "vendor": "coolercontrol", "type": "app", "affected": [">= 3.1.0 and <= 4.0.0"], "fixed": "newer than 4.0.0", "safe": "before 3.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy coolercontrold || rpm -q coolercontrold || coolercontrold --version"}, {"label": "2. UPGRADE to newer than 4.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade coolercontrold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade coolercontrold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison coolercontrold\nsudo apt install coolercontrold=<VERSION_BEFORE_3.1.0>\nsudo apt-mark hold coolercontrold"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list coolercontrold\nsudo dnf downgrade coolercontrold-<VERSION_BEFORE_3.1.0>\nsudo dnf versionlock add coolercontrold"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5208"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.74106, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-24033", "publisher": "Apache Software Foundation", "title": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traff", "summary": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.817", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 9.0.0 and < 9.2.15", ">= 10.0.0 and < 10.1.4"], "fixed": "9.2.15, 10.1.4", "safe": "before 9.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 9.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24033"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46588, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50622", "publisher": "Apache Software Foundation", "title": "Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's ad", "summary": "Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations.\n\n\n\n\nAffect Version:\nThis issue affects Apache Atlas: from 0.8 through 2.5.0.\n\n\nMitigation:\nUsers are recommended to upgrade to version 2.6.0, which fixes the issue.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00576, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T10:16:41.047", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "atlas", "vendor": "apache", "type": "app", "affected": [">= 0.8.0 and < 2.6.0"], "fixed": "2.6.0", "safe": "before 0.8.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy atlas || rpm -q atlas || atlas --version"}, {"label": "2. UPGRADE to 2.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade atlas"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade atlas"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.8.0 (Debian / Ubuntu)", "cmd": "apt-cache madison atlas\nsudo apt install atlas=<VERSION_BEFORE_0.8.0>\nsudo apt-mark hold atlas"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list atlas\nsudo dnf downgrade atlas-<VERSION_BEFORE_0.8.0>\nsudo dnf versionlock add atlas"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50622"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/6r9vs7g5gkp983pwvky781hofdozhgzn"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46786, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54078", "publisher": "GitHub, Inc.", "title": "veraPDF validation model is an implementation of the veraPDF validation model", "summary": "veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/DictionaryKeysHelper.java in getRichTextStringOrStreamEntryStringRepresentation(), where a crafted PDF containing a malicious rich-text /RC or /RV entry can cause external entity expansion and reflect", "cvss": 8.7, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:53.053", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54078"}], "cwe": ["CWE-611"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45568, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.verapdf:validation-model", "status": "fixed", "fixed": "1.30.2", "cmd": "Set org.verapdf:validation-model to 1.30.2 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-3jh7-wm29-q568", "note": "vulnerable: >= 1.25.73, <= 1.30.1"}, {"os": "Maven", "pkg": "org.verapdf:validation-model-jakarta", "status": "fixed", "fixed": "1.30.2", "cmd": "Set org.verapdf:validation-model-jakarta to 1.30.2 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-3jh7-wm29-q568", "note": "vulnerable: >= 1.25.73, <= 1.30.1"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54079", "publisher": "GitHub, Inc.", "title": "veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair", "summary": "veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the getdynamicRender() method, where a crafted PDF containing a malicious XFA stream can cause external entity expansion during PDF/UA-1 validation and allow l", "cvss": 8.7, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:53.203", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54079"}], "cwe": ["CWE-611"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45567, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.verapdf:validation-model", "status": "fixed", "fixed": "1.30.2", "cmd": "Set org.verapdf:validation-model to 1.30.2 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-36mm-w85j-3q2j", "note": "vulnerable: >= 1.17.35, <= 1.30.1"}, {"os": "Maven", "pkg": "org.verapdf:validation-model-jakarta", "status": "fixed", "fixed": "1.30.2", "cmd": "Set org.verapdf:validation-model-jakarta to 1.30.2 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-36mm-w85j-3q2j", "note": "vulnerable: >= 1.17.35, <= 1.30.1"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-56671", "publisher": "GitHub, Inc.", "title": "ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface", "summary": "ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in app/model_manager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to use traversal, encoded traversal, absolute paths, or an unbounded path_index to read image-decodable files and enumerate host paths. get_model_preview (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00971, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T06:16:29.860", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56671"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61583, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62391", "publisher": "Apache Software Foundation", "title": "The security fix for CVE-2025-66518 is incomplete.\u00a0Any client who can access to Apache Kyuubi Server via Kyuub", "summary": "The security fix for CVE-2025-66518 is incomplete.\u00a0Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config\u00a0kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases.\n\nThis issue affects Apache Kyuubi: from 1.6.0 before 1.12.0.\n\nUsers are recommended to upgrade to version 1.12.0, which fixes the issue.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00788, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T11:17:11.593", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "kyuubi", "vendor": "apache", "type": "app", "affected": [">= 1.6.0 and < 1.12.0"], "fixed": "1.12.0", "safe": "before 1.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kyuubi || rpm -q kyuubi || kyuubi --version"}, {"label": "2. UPGRADE to 1.12.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kyuubi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kyuubi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison kyuubi\nsudo apt install kyuubi=<VERSION_BEFORE_1.6.0>\nsudo apt-mark hold kyuubi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list kyuubi\nsudo dnf downgrade kyuubi-<VERSION_BEFORE_1.6.0>\nsudo dnf versionlock add kyuubi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62391"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/vo4k4nxz23kfzrpp120nsojb0vrkx4w1"}], "cwe": ["CWE-22", "CWE-27"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55761, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55100", "publisher": "GitHub, Inc.", "title": "hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API", "summary": "hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of using encodeURIComponent() and URLSearchParams, allowing path traversal and query parameter injection. This issue is fixed in version 0.5.2.", "cvss": 8.7, "sev": "HIGH", "epss": 0.0056, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:17.480", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55100"}], "cwe": ["CWE-23", "CWE-74"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45877, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "hashi-vault-js", "status": "fixed", "fixed": "0.5.2", "cmd": "npm install hashi-vault-js@\">=0.5.2\"\nnpm ls hashi-vault-js", "url": "https://github.com/advisories/GHSA-g956-2f74-rmv7", "note": "vulnerable: <= 0.5.1"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67330", "publisher": "VulnCheck", "title": "@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 throu", "summary": "@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-beta.9 contain an authorization bypass. SCIM token issuance did not reject provider IDs already used by existing SSO, SAML, OIDC, generic OAuth, or social account providers, and the same logical provider ID was used for both SCIM provider configuration and account ownership. An authenticated user could mint a SCIM token whose ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00598, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.677", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67330"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.47992, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66321", "publisher": "Microsoft Corporation", "title": "Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an una", "summary": "Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.", "cvss": 7.4, "sev": "HIGH", "epss": 0.01066, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.440", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66321"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66321"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.64489, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69252", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permissions could call GET /api/v1/files to list files under the organization storage root and DELETE /api/v1/files?path=... to delete files belonging to other wor", "cvss": 8.8, "sev": "HIGH", "epss": 0.00544, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:28.960", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69252"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/bc22bf8baec95b6a3d6e1b3563b4f03491cd6fbb"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6435"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wp74-f5hh-5f3r"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wp74-f5hh-5f3r"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.44918, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-wp74-f5hh-5f3r", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74892", "publisher": "VulnCheck", "title": "openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry serve", "summary": "openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00509, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T11:16:44.263", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openssl encrypt", "vendor": "jahlives", "type": "app", "affected": ["< 1.4.0"], "fixed": "1.4.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show openssl-encrypt"}, {"label": "2. UPGRADE to 1.4.0", "cmd": "pip install --upgrade \"openssl-encrypt>=1.4.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74892"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p926-6hjp-w9jw"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.42623, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2023-32214", "publisher": "Mozilla Corporation", "title": "Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.\n*Note: ", "summary": "Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.\n*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00918, "kev": false, "added": "2023-06-19", "pub": "2023-06-19T10:15:09.613", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 113.0"], "fixed": "113.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 113.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-32214"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-17/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-18/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-17/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-18/"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.59877, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.11.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.11.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.11.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "firefox-esr", "status": "fixed", "fixed": "firefox-esr-102.11.0-r0", "cmd": "apk add --upgrade firefox-esr\napk info -v firefox-esr", "url": null, "note": null}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2022-31810", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8)", "summary": "A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow.\r\n\r\nThis could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00879, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.127", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "sipass integrated", "vendor": "siemens", "type": "app", "affected": ["< 2.90.3.8"], "fixed": "2.90.3.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sipass-integrated || rpm -q sipass-integrated || sipass-integrated --version"}, {"label": "2. UPGRADE to 2.90.3.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sipass-integrated"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sipass-integrated"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-31810"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-924149.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-924149.pdf"}], "cwe": ["CWE-20", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58714, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2023-35920", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions ", "summary": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of s", "cvss": 7.5, "sev": "HIGH", "epss": 0.00866, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.543", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic mv540 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv540 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 u firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 x firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-35920"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58303, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2023-35921", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions ", "summary": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted Ethernet frames sent to the devices. This could allow an unauthenticated remote attacker to cause a denial", "cvss": 7.5, "sev": "HIGH", "epss": 0.00866, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.610", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic mv540 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv540 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 h firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv550 s firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 u firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic mv560 x firmware", "vendor": "siemens", "type": "os", "affected": ["< 3.3.4"], "fixed": "3.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-35921"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58303, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2023-30367", "publisher": "MITRE", "title": "Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and m", "summary": "Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <= v1.76.20 and <= 1.77.3-dev loads configuration files in plain text into memory (after decrypting them if necessary) at application start-up, even if no connection ha", "cvss": 7.5, "sev": "HIGH", "epss": 0.00484, "kev": false, "added": "2023-07-26", "pub": "2023-07-26T21:15:09.980", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mremoteng", "vendor": "mremoteng", "type": "app", "affected": ["<= 1.76.20", "1.77.2-nb", "1.77.3-nb"], "fixed": "newer than 1.76.20", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mremoteng || rpm -q mremoteng || mremoteng --version"}, {"label": "2. UPGRADE to newer than 1.76.20 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mremoteng"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mremoteng"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30367"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40784, "pinned": false, "pocs": [{"kind": "poc", "name": "S1lkys/CVE-2023-30367-mRemoteNG-password-dumper (18 stars)", "url": "https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper", "stars": 18}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2022-4984", "publisher": "VulnCheck", "title": "ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.b", "summary": "ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database query. A remote unauthenticated attacker can exploit this issue to execute crafted SQL expressions and retrieve sensitive information from the bac", "cvss": 8.7, "sev": "HIGH", "epss": 0.00483, "kev": false, "added": "2025-11-13", "pub": "2025-11-13T20:15:46.853", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-4984"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40667, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-34989", "publisher": "GitHub, Inc.", "title": "CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC a", "summary": "CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name (e.g., full name / username). An attacker can inject a malicious JavaScript payload into their profile name, which is then stored server-side. This stored payload is later rendered unsafe", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:12.037", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ci4ms", "vendor": "ci4-cms-erp", "type": "app", "affected": ["< 0.31.0.0"], "fixed": "0.31.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ci4ms || rpm -q ci4ms || ci4ms --version"}, {"label": "2. UPGRADE to 0.31.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ci4ms"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ci4ms"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34989"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-vr2g-rhm5-q4jr"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-vr2g-rhm5-q4jr"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.37849, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Composer (PHP)", "pkg": "ci4-cms-erp/ci4ms", "status": "fixed", "fixed": "31.0.0.0", "cmd": "composer require \"ci4-cms-erp/ci4ms:>=31.0.0.0\"", "url": "https://github.com/advisories/GHSA-vr2g-rhm5-q4jr", "note": "vulnerable: <= 0.28.6.0"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-35044", "publisher": "GitHub, Inc.", "title": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference", "summary": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generate_containerfile() in src/bentoml/_internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extension to render user-provided dockerfile_template files. When a victim imports a malicious bento archive and runs bentoml containerize, attacker-controll", "cvss": 8.8, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:41.990", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bentoml", "vendor": "bentoml", "type": "app", "affected": ["< 1.4.38"], "fixed": "1.4.38", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bentoml || rpm -q bentoml || bentoml --version"}, {"label": "2. UPGRADE to 1.4.38 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bentoml"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bentoml"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35044"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/bentoml/BentoML/security/advisories/GHSA-v959-cwq9-7hr6"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.40462, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/bentoml/BentoML/security/advisories/GHSA-v959-cwq9-7hr6", "url": "https://github.com/bentoml/BentoML/security/advisories/GHSA-v959-cwq9-7hr6"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "bentoml", "status": "fixed", "fixed": "1.4.38", "cmd": "pip install --upgrade \"bentoml>=1.4.38\"\npip show bentoml", "url": "https://github.com/advisories/GHSA-v959-cwq9-7hr6", "note": "vulnerable: <= 1.4.37"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54811", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.", "summary": "Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:51.997", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54811"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33137, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-40521", "publisher": "VulnCheck", "title": "FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that al", "summary": "FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authenticated attackers to execute arbitrary code by uploading files with traversal sequences in the unique_name parameter. Attackers can supply path traversal sequences ../../../shell.php to write files outside the intended attachments directory into the web root, and by uploading PHP files without extension validation, achieve remo", "cvss": 8.8, "sev": "HIGH", "epss": 0.00977, "kev": false, "added": "2026-06-29", "pub": "2026-06-29T14:16:50.763", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40521"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.61813, "pinned": false, "pocs": [{"kind": "writeup", "name": "jivasecurity.com/writeups/frontaccounting-rce-attachment-upload-cve-2026-40521", "url": "https://jivasecurity.com/writeups/frontaccounting-rce-attachment-upload-cve-2026-40521"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60109", "publisher": "VulnCheck", "title": "Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that all", "summary": "Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) containing a PA-DATA element with padata-type 2, 3, 11, or 19. Attackers can exploit a parser and analyzer state mismatch where proc_padata() dereferences an uninitialized pa_data_element field sele", "cvss": 7.5, "sev": "HIGH", "epss": 0.00923, "kev": false, "added": "2026-07-09", "pub": "2026-07-09T15:16:41.757", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zeek", "vendor": "zeek", "type": "app", "affected": ["< 8.0.9"], "fixed": "8.0.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zeek || rpm -q zeek || zeek --version"}, {"label": "2. UPGRADE to 8.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zeek"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zeek"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60109"}, {"t": "Patch", "u": "https://github.com/zeek/zeek/commit/c82e3c734893d932e94310aec0dbeb1ffcea169d"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60036, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60027", "publisher": "Joomla! Project", "title": "Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - ", "summary": "Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-07-20", "pub": "2026-07-20T19:17:27.060", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60027"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43231, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14958", "publisher": "IBM Corporation", "title": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary co", "summary": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00822, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.317", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aspera faspex", "vendor": "ibm", "type": "app", "affected": [">= 5.0.0 and < 5.0.16"], "fixed": "5.0.16", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aspera-faspex || rpm -q aspera-faspex || aspera-faspex --version"}, {"label": "2. UPGRADE to 5.0.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aspera-faspex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aspera-faspex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aspera-faspex\nsudo apt install aspera-faspex=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold aspera-faspex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aspera-faspex\nsudo dnf downgrade aspera-faspex-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add aspera-faspex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14958"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280530"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.56918, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14974", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary c", "summary": "IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0068, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.700", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.31", ">= 9.0.0.0 and < 9.0.5.29"], "fixed": "8.5.5.31, 9.0.5.29", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.31 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14974"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281641"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51865, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54650", "publisher": "GitHub, Inc.", "title": "openhole exposes localhost to the internet in one command", "summary": "openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server in internal/server/public_proxy.go forwarded r.URL.Path instead of preserving the original request target with r.URL.EscapedPath(), allowing percent encoded dot segments %2e and separators %2f to reach tunneled local services as ../ and / for path traversal. This issue is fixed in version 0.1.2.", "cvss": 8.6, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:08.763", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54650"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43994, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/bablilayoub/openhole", "status": "fixed", "fixed": "0.1.2", "cmd": "go get github.com/bablilayoub/openhole@v0.1.2\ngo list -m github.com/bablilayoub/openhole", "url": "https://github.com/advisories/GHSA-fh2f-xfxc-q9cc", "note": "vulnerable: <= 0.1.1"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63232", "publisher": "CSA", "title": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to i", "summary": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment\nreinforcement endpoint, control data passed to unserialize(), write a webshell\nto a publicly accessible location, and execute arbitrary code on the server.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0053, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.600", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63232"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43988, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63233", "publisher": "CSA", "title": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to i", "summary": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment\noverall answer endpoint, control data passed to unserialize(), write a webshell\nto a publicly accessible location, and execute arbitrary code on the server.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0053, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.710", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63233"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43988, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63234", "publisher": "CSA", "title": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to i", "summary": "A SQL injection and unsafe deserialisation\nvulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark\nassessment endpoint, control data passed to unserialize(), write a webshell to\na publicly accessible location, and execute arbitrary code on the server.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0053, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.817", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63234"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43988, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-16503", "publisher": "CERT/CC", "title": "Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all i", "summary": "Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to \"postgres\". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00429, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:58.773", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16503"}], "cwe": ["CWE-1188", "CWE-1327", "CWE-1393"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36151, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54729", "publisher": "GitHub, Inc.", "title": "DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks", "summary": "DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.5, is_url_safe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yields no address and no dns.lookup fallback occurs, allowing server-side request forgery. This issue is fixed in version 1.0.5.", "cvss": 8.7, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:17.173", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54729"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40488, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "dssrf", "status": "fixed", "fixed": "1.0.5", "cmd": "npm install dssrf@\">=1.0.5\"\nnpm ls dssrf", "url": "https://github.com/advisories/GHSA-5846-7qm3-r52j", "note": "vulnerable: <= 1.0.4"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53510", "publisher": "GitHub, Inc.", "title": "Savon is a Ruby SOAP client", "summary": "Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00687, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:51.530", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53510"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52135, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "RubyGems", "pkg": "savon", "status": "fixed", "fixed": "2.17.2", "cmd": "bundle update savon\nbundle list | grep savon", "url": "https://github.com/advisories/GHSA-mx5j-mp4f-g8jg", "note": "vulnerable: >= 0.9.8, < 2.17.2"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-38710", "publisher": "MITRE", "title": "TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.s", "summary": "TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.", "cvss": 7.2, "sev": "HIGH", "epss": 0.02333, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T21:17:30.830", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38710"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.83435, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48399", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could r", "summary": "Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00874, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.693", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48399"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-657"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58566, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65802", "publisher": "Microsoft Corporation", "title": "External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclos", "summary": "External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00922, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:37.967", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65802"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65802"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.59985, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18753", "publisher": "GV", "title": "The\nproduct firmware contains an embedded, static RSA private key utilized by the\nLighttpd web server for TLS ", "summary": "The\nproduct firmware contains an embedded, static RSA private key utilized by the\nLighttpd web server for TLS termination. Exposure of this private key allows\nmalicious actors to breach the confidentiality and integrity of HTTPS\ncommunications, enabling traffic decryption and server spoofing.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0044, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T08:16:34.640", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18753"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37213, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18754", "publisher": "GV", "title": "The\nproduct firmware contains an embedded, static RSA private key utilized by the\nLighttpd web server for TLS ", "summary": "The\nproduct firmware contains an embedded, static RSA private key utilized by the\nLighttpd web server for TLS termination. Exposure of this private key allows\nmalicious actors to breach the confidentiality and integrity of HTTPS\ncommunications, enabling traffic decryption and server spoofing.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0044, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T08:16:34.803", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18754"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37213, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67200", "publisher": "VulnCheck", "title": "Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read", "summary": "Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-string-stripping sanitization to traverse outside the configured asset root directory and retrieve sensitive files such as system credentials and application secrets, with results exposed cro", "cvss": 7.5, "sev": "HIGH", "epss": 0.0085, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:40.717", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67200"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57771, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76886", "publisher": "GitLab Inc.", "title": "C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service", "summary": "C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service", "cvss": 8.1, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T23:16:19.553", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "wireshark", "vendor": "wireshark", "type": "app", "affected": [">= 4.4.0 and < 4.4.18", ">= 4.6.0 and < 4.6.8"], "fixed": "4.4.18, 4.6.8", "safe": "before 4.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wireshark || rpm -q wireshark || wireshark --version"}, {"label": "2. UPGRADE to 4.4.18 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wireshark"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wireshark"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wireshark\nsudo apt install wireshark=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold wireshark"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wireshark\nsudo dnf downgrade wireshark-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add wireshark"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76886"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21439"}, {"t": "Vendor Advisory", "u": "https://www.wireshark.org/security/wnpa-sec-2026-75.html"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21446"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31044, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3905 (important): wireshark", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3905.html", "date": "2026-09-14"}], "buzz": 1, "pinned": false, "pocs": [{"kind": "writeup", "name": "gitlab.com/wireshark/wireshark/-/work_items/21439", "url": "https://gitlab.com/wireshark/wireshark/-/work_items/21439"}, {"kind": "writeup", "name": "gitlab.com/wireshark/wireshark/-/work_items/21446", "url": "https://gitlab.com/wireshark/wireshark/-/work_items/21446"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "wireshark", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "wireshark", "status": "fixed", "fixed": "4.4.18-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade wireshark\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' wireshark)\" ge \"4.4.18-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "wireshark", "status": "fixed", "fixed": "wireshark-4.4.2-10.el10_2.8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:84721\nrpm -q wireshark", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "wireshark", "status": "fixed", "fixed": "wireshark-2.6.2-21.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:83657\nrpm -q wireshark", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "wireshark", "status": "fixed", "fixed": "wireshark-3.4.10-9.el9_8.5", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:83546\nrpm -q wireshark", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "wireshark", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "wireshark", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2117", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-76886.html", "note": "ALAS2023-2026-2117"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3905", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-76886.html", "note": "ALAS2-2026-3905"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2023-27463", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)", "summary": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.757", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom crossbow", "vendor": "siemens", "type": "app", "affected": ["< 5.3"], "fixed": "5.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ruggedcom-crossbow || rpm -q ruggedcom-crossbow || ruggedcom-crossbow --version"}, {"label": "2. UPGRADE to 5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ruggedcom-crossbow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ruggedcom-crossbow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27463"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.5634, "pinned": false}, {"id": "CVE-2022-43767", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM", "summary": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions <", "cvss": 7.5, "sev": "HIGH", "epss": 0.00723, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:17.540", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic cp 1242-7 v2 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 dnp3 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-1 iec firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte eu firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cp 1243-7 lte us firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-43767"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"}], "cwe": ["CWE-833"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.53516, "pinned": false}, {"id": "CVE-2026-34841", "publisher": "GitHub, Inc.", "title": "Bruno is an open source IDE for exploring and testing APIs", "summary": "Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan (RAT). Users of @usebruno/cli who ran npm install between 00:21 UTC and ~03:30 UTC on March 31, 2026 may have been impacted. Upgrade to 3.2.1", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00321, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:10.590", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bruno", "vendor": "usebruno", "type": "app", "affected": ["< 3.2.1"], "fixed": "3.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bruno || rpm -q bruno || bruno --version"}, {"label": "2. UPGRADE to 3.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bruno"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bruno"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34841"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/usebruno/bruno/pull/7632"}, {"t": "Mitigation, Patch", "u": "https://github.com/usebruno/bruno/security/advisories/GHSA-658g-p7jg-wx5g"}, {"t": "Mitigation, Press/Media Coverage", "u": "https://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat"}], "cwe": ["CWE-494", "CWE-506"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23844, "pinned": false}, {"id": "CVE-2026-62414", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Pag", "summary": "Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00404, "kev": false, "added": "2026-07-20", "pub": "2026-07-20T19:17:28.603", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62414"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33578, "pinned": false}, {"id": "CVE-2026-54603", "publisher": "GitHub, Inc.", "title": "OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC)", "summary": "OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Client#request overrides the request authority, so the bearer Authorization header is sent to an attacker-controlled host, leaking the credential. This issue is fixed in version 2.0.22.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00448, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:52.227", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54603"}], "cwe": ["CWE-200", "CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37989, "pinned": false}, {"id": "CVE-2026-54609", "publisher": "GitHub, Inc.", "title": "QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library", "summary": "QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of service on the host. No fixed version is available as of this review.", "cvss": 8.6, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:52.507", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54609"}], "cwe": ["CWE-400", "CWE-406", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38924, "pinned": false}, {"id": "CVE-2026-14270", "publisher": "Wordfence", "title": "The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is", "summary": "The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the eco_save_settings() function, which allows low-privileged authenticated users to modify the tc_eco_custom_file_types upload allowlist setting, combined with insufficient authorization on the wc", "cvss": 8.8, "sev": "HIGH", "epss": 0.00786, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T12:16:35.697", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14270"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.55683, "pinned": false}, {"id": "CVE-2026-63362", "publisher": "ICS-CERT", "title": "An unsigned integer underflow in the PubSub signature verification path \nin open62541 may allow a remote attac", "summary": "An unsigned integer underflow in the PubSub signature verification path \nin open62541 may allow a remote attacker to cause a denial of service \nvia a crafted UDP packet.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.01822, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.263", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63362"}], "cwe": ["CWE-191"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.78631, "pinned": false}, {"id": "CVE-2026-65423", "publisher": "ICS-CERT", "title": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote att", "summary": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to trigger an \nout-of-bounds write.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00799, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.743", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65423"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.56112, "pinned": false}, {"id": "CVE-2026-52855", "publisher": "GitHub, Inc.", "title": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel", "summary": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates allow a low-privileged user to read {{config.token}}, {{config.token_id}}, and {{config.docker.registries}} from the full daemon configuration. This issue is fixed in version 1.12.3.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00506, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T17:16:33.313", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52855"}], "cwe": ["CWE-200", "CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.42349, "pinned": false}, {"id": "CVE-2026-14804", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc", "summary": "Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00404, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.417", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14804"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33579, "pinned": false}, {"id": "CVE-2026-15721", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc", "summary": "Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00294, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.667", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15721"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20964, "pinned": false}, {"id": "CVE-2026-68494", "publisher": "HeroDevs", "title": "The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length cons", "summary": "The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered va", "cvss": 8.7, "sev": "HIGH", "epss": 0.00463, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:41.443", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39206, "pinned": false}, {"id": "CVE-2026-76404", "publisher": "Cisco Systems, Inc.", "title": "In Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrar", "summary": "In Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored data without checking whether the content is of the expected type.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00749, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:27.170", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "model context protocol server", "vendor": "splunk", "type": "app", "affected": ["< 1.2.1"], "fixed": "1.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy model-context-protocol-server || rpm -q model-context-protocol-server || model-context-protocol-server --version"}, {"label": "2. UPGRADE to 1.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade model-context-protocol-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade model-context-protocol-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76404"}, {"t": "Vendor Advisory", "u": "https://advisory.splunk.com/advisories/SVD-2026-0808"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.54438, "pinned": false}, {"id": "CVE-2023-28322", "publisher": "HackerOne", "title": "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might err", "summary": "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory ", "cvss": 3.7, "sev": "LOW", "epss": 0.02211, "kev": false, "added": "2023-05-26", "pub": "2023-05-26T21:15:16.153", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "curl", "vendor": "haxx", "type": "app", "affected": ["< 8.1.0"], "fixed": "8.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy curl || rpm -q curl || curl --version"}, {"label": "2. UPGRADE to 8.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade curl"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade curl"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["37", "38"], "fixed": null, "safe": "before 37", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "macos", "vendor": "apple", "type": "os", "affected": [">= 11.0 and < 11.7.9", ">= 12.0 and < 12.6.8", ">= 13.0 and < 13.5"], "fixed": "11.7.9, 12.6.8, 13.5", "safe": "before 11.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "clustered data ontap", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "ontap antivirus connector", "vendor": "netapp", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ontap-antivirus-connector || rpm -q ontap-antivirus-connector || ontap-antivirus-connector --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28322"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1954658"}, {"t": "Exploit, Patch", "u": "https://hackerone.com/reports/1954658"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8248, "pinned": false}, {"id": "CVE-2023-25744", "publisher": "Mozilla Corporation", "title": "Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7", "summary": "Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00673, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:11.677", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 110.0"], "fixed": "110.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 110.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.8"], "fixed": "102.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25744"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-05/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-05/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51572, "pinned": false}, {"id": "CVE-2023-25746", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox ESR 102.7", "summary": "Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.8 and Firefox ESR < 102.8.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00668, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:11.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.8"], "fixed": "102.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.8"], "fixed": "102.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25746"}, {"t": "Broken Link, Issue Tracking", "u": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-07/"}, {"t": "Broken Link, Issue Tracking", "u": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-07/"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51335, "pinned": false}, {"id": "CVE-2023-28162", "publisher": "Mozilla Corporation", "title": "While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type", "summary": "While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00702, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:12.160", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 111.0"], "fixed": "111.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 111.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28162"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811327"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-10/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-11/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811327"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}], "cwe": ["CWE-704", "CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.52736, "pinned": false}, {"id": "CVE-2023-29536", "publisher": "Mozilla Corporation", "title": "An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled me", "summary": "An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00702, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:12.477", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "focus", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy focus || rpm -q focus || focus --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade focus"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade focus"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29536"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.52736, "pinned": false}, {"id": "CVE-2023-29539", "publisher": "Mozilla Corporation", "title": "When handling the filename directive in the Content-Disposition header, the filename would be truncated if the", "summary": "When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00737, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:12.607", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "focus", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy focus || rpm -q focus || focus --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade focus"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade focus"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29539"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.53995, "pinned": false}, {"id": "CVE-2023-32207", "publisher": "Mozilla Corporation", "title": "A missing delay in popup notifications could have made it possible for an attacker to trick a user into granti", "summary": "A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00731, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:13.147", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 113.0"], "fixed": "113.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 113.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-32207"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826116"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-17/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-18/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826116"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.53784, "pinned": false}, {"id": "CVE-2023-32213", "publisher": "Mozilla Corporation", "title": "When reading a file, an uninitialized value could have been used as read limit", "summary": "When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00753, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:13.287", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 113.0"], "fixed": "113.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 113.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-32213"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826666"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-17/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-18/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826666"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54578, "pinned": false}, {"id": "CVE-2026-34969", "publisher": "GitHub, Inc.", "title": "Nhost is an open source Firebase alternative with GraphQL", "summary": "Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers, and proxy/CDN logs. Note that the refresh token is one-time use and all of these leak vectors are on owned infrastructure or services integrated by the ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00367, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T16:16:38.457", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "nhost\\/auth", "vendor": "nhost", "type": "app", "affected": ["< 0.48.0"], "fixed": "0.48.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nhostauth || rpm -q nhostauth || nhostauth --version"}, {"label": "2. UPGRADE to 0.48.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nhostauth"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nhostauth"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34969"}, {"t": "Exploit, Mitigation", "u": "https://github.com/nhost/nhost/security/advisories/GHSA-g2qj-prgh-4g9r"}, {"t": "Exploit, Mitigation", "u": "https://github.com/nhost/nhost/security/advisories/GHSA-g2qj-prgh-4g9r"}], "cwe": ["CWE-200", "CWE-598"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29348, "pinned": false}, {"id": "CVE-2026-34986", "publisher": "GitHub, Inc.", "title": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, inc", "summary": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_k", "cvss": 7.5, "sev": "HIGH", "epss": 0.00651, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:11.870", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "go-jose", "vendor": "go-jose project", "type": "app", "affected": [">= 3.0.0 and < 3.0.5", ">= 4.0.0 and < 4.1.4"], "fixed": "3.0.5, 4.1.4", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy go-jose || rpm -q go-jose || go-jose --version"}, {"label": "2. UPGRADE to 3.0.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade go-jose"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade go-jose"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison go-jose\nsudo apt install go-jose=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold go-jose"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list go-jose\nsudo dnf downgrade go-jose-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add go-jose"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"}], "cwe": ["CWE-248", "CWE-131"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50597, "pinned": false}, {"id": "CVE-2026-57832", "publisher": "Joomla! Project", "title": "Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extens", "summary": "Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00401, "kev": false, "added": "2026-07-15", "pub": "2026-07-15T09:16:33.450", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57832"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33189, "pinned": false}, {"id": "CVE-2026-67182", "publisher": "VulnCheck", "title": "Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to b", "summary": "Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers can craft a header value containing a complete additional HTTP request that is interpreted as a separate request by backends such as Go net/http and P", "cvss": 7.5, "sev": "HIGH", "epss": 0.00629, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:17:07.587", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67182"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49496, "pinned": false}, {"id": "CVE-2026-54635", "publisher": "GitHub, Inc.", "title": "pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchai", "summary": "pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup() stores bearer tokens only under the default suffix paths and never adds the custom path to the token map, so self._tokens.get(path) returns None and the authenti", "cvss": 7.5, "sev": "HIGH", "epss": 0.00709, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:22.427", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54635"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52988, "pinned": false}, {"id": "CVE-2026-59933", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point bac", "cvss": 7.5, "sev": "HIGH", "epss": 0.007, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:23.033", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59933"}], "cwe": ["CWE-400", "CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52648, "pinned": false}, {"id": "CVE-2026-59932", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the Gnumeric reader reads attacker-supplied .gnumeric files into memory and, when the file starts with gzip magic bytes, calls gzdecode() on the full compressed contents without enforcing a decompressed-size limit. A very small", "cvss": 7.5, "sev": "HIGH", "epss": 0.007, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:39.590", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59932"}], "cwe": ["CWE-400", "CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52646, "pinned": false}, {"id": "CVE-2026-54638", "publisher": "GitHub, Inc.", "title": "gotd/td is a T Telegram MTProto API client in Go", "summary": "gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated make([]byte, dataLen) before checking the remaining buffer, allowing remote unauthenticated denial of service through excessive memory allocation and CPU or garbage collection pressure. This issue is fixed in version 0.1", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:08.617", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54638"}], "cwe": ["CWE-770", "CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49553, "pinned": false}, {"id": "CVE-2026-66723", "publisher": "CERT.PL", "title": "MWDB Core versions >=2.2.0 and <2.19.0 contain a missing authorization vulnerability in the Remote Instances p", "summary": "MWDB Core versions >=2.2.0 and <2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the identity and permissions associated with the configured API key. This can result in unauthorized actions being performed on the remote instance as if execu", "cvss": 7.0, "sev": "HIGH", "epss": 0.00835, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:29.877", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66723"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.57309, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in MWDB Core software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-66723/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-56673", "publisher": "GitHub, Inc.", "title": "ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface", "summary": "ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_annotated_filepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated crafted POST /prompt workflow using LoadImage or sibling nodes to probe arbitrary host paths and exfiltrate image-format files through /view. LoadImage d", "cvss": 7.5, "sev": "HIGH", "epss": 0.00632, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T06:16:30.520", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56673"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49675, "pinned": false}, {"id": "CVE-2026-66312", "publisher": "Microsoft Corporation", "title": "Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a netwo", "summary": "Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.01099, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.510", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66312"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66312"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.65394, "pinned": false}, {"id": "CVE-2026-6837", "publisher": "Zyxel Corporation", "title": "A post-authentication command injection vulnerability in the \"export-cgi\" CGI program in Zyxel WAX650S firmwar", "summary": "A post-authentication command injection vulnerability in the \"export-cgi\" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.", "cvss": 7.2, "sev": "HIGH", "epss": 0.01521, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T03:16:25.890", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6837"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.74414, "pinned": false}, {"id": "CVE-2026-61387", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item c", "summary": "In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems` event filter can trigger a `StackOverflowError` during decoding, allowing an unauthenticated remote client to exhaust a finite global monitored-item quota and prevent all clients from crea", "cvss": 7.5, "sev": "HIGH", "epss": 0.0062, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.543", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 1.0.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61387"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/587e35669f519b2d7f6d850a5f86ee5a76c3a2c5"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/5f3f6da2a5ea80682e1da7c58f7a1870b09d2b43"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-400", "CWE-460", "CWE-772"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49059, "pinned": false, "mentions": [{"src": "CISA ICS Advisories", "group": "gov", "title": "Eclipse Foundation Eclipse Milo", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "date": "2026-10-15"}], "buzz": 1}, {"id": "CVE-2022-43760", "publisher": "SUSE", "title": "An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE ", "summary": "An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is \nexecuted within another user's browser, allowing the attacker to steal \nsensitive information, manipulate web content, or perform other \nmalicious activities on behalf of the victims. This could result in a \nuser with write access to the affected areas being ", "cvss": 8.4, "sev": "HIGH", "epss": 0.00714, "kev": false, "added": "2023-06-01", "pub": "2023-06-01T13:15:10.373", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "rancher", "vendor": "suse", "type": "app", "affected": [">= 2.6.0 and < 2.6.13", ">= 2.7.0 and < 2.7.4"], "fixed": "2.6.13, 2.7.4", "safe": "before 2.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rancher || rpm -q rancher || rancher --version"}, {"label": "2. UPGRADE to 2.6.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rancher"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rancher"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison rancher\nsudo apt install rancher=<VERSION_BEFORE_2.6.0>\nsudo apt-mark hold rancher"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rancher\nsudo dnf downgrade rancher-<VERSION_BEFORE_2.6.0>\nsudo dnf versionlock add rancher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-43760"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760"}, {"t": "Vendor Advisory", "u": "https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760"}, {"t": "Vendor Advisory", "u": "https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.53203, "pinned": false}, {"id": "CVE-2023-25747", "publisher": "Mozilla Corporation", "title": "A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API b", "summary": "A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30.\n*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00608, "kev": false, "added": "2023-06-19", "pub": "2023-06-19T11:15:09.753", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 110.1"], "fixed": "110.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 110.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25747"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-08/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-08/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48479, "pinned": false}, {"id": "CVE-2023-3600", "publisher": "Mozilla Corporation", "title": "During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potenti", "summary": "During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00634, "kev": false, "added": "2023-07-12", "pub": "2023-07-12T14:15:10.143", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.0.2"], "fixed": "115.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 115.0.2"], "fixed": "115.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 115.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 115.0.1"], "fixed": "115.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 115.0.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-3600"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839703"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-26/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-27/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839703"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-26/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-27/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4974, "pinned": false}, {"id": "CVE-2023-4049", "publisher": "Mozilla Corporation", "title": "Race conditions in reference counting code were found through code inspection", "summary": "Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00634, "kev": false, "added": "2023-08-01", "pub": "2023-08-01T15:15:10.030", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 116.0", ">= 102.0 and < 102.14", ">= 115.0 and < 115.1"], "fixed": "102.14, 115.1, 116.0", "safe": "before 102.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 102.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 102.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_102.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_102.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["11.0", "12.0"], "fixed": null, "safe": "before 11.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-4049"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-30/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-30/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49772, "pinned": false}, {"id": "CVE-2026-34893", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.", "summary": "Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:17.620", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34893"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39488, "pinned": false}, {"id": "CVE-2026-34894", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.", "summary": "Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:17.760", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34894"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39487, "pinned": false}, {"id": "CVE-2026-39446", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.", "summary": "Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:18.463", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39446"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36854, "pinned": false}, {"id": "CVE-2026-39445", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.", "summary": "Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T14:17:50.847", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39445"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36854, "pinned": false}, {"id": "CVE-2026-39559", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions.", "summary": "Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T14:17:51.343", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39559"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39492, "pinned": false}, {"id": "CVE-2026-56340", "publisher": "VulnCheck", "title": "vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing", "summary": "vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed (negative or out-of-bounds) tensor indices, when the prompt-embeds feature is enabled, to trigger crashes or resource exhaustion (denial of service), with potential for out-of-bounds/write-what-where memory", "cvss": 8.8, "sev": "HIGH", "epss": 0.00644, "kev": false, "added": "2026-06-20", "pub": "2026-06-20T19:16:23.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "vllm", "vendor": "vllm", "type": "app", "affected": [">= 0.10.2 and < 0.13.0"], "fixed": "0.13.0", "safe": "before 0.10.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vllm || rpm -q vllm || vllm --version"}, {"label": "2. UPGRADE to 0.13.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vllm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vllm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.10.2 (Debian / Ubuntu)", "cmd": "apt-cache madison vllm\nsudo apt install vllm=<VERSION_BEFORE_0.10.2>\nsudo apt-mark hold vllm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vllm\nsudo dnf downgrade vllm-<VERSION_BEFORE_0.10.2>\nsudo dnf versionlock add vllm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56340"}, {"t": "Vendor Advisory", "u": "https://github.com/vllm-project/vllm/security/advisories/GHSA-mcmc-2m55-j8jj"}], "cwe": ["CWE-20", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.50252, "pinned": false}, {"id": "CVE-2026-67184", "publisher": "VulnCheck", "title": "TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote att", "summary": "TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute() function fails to allocate the Url object when version parsing fails, leaving the url pointer NULL, and buildResponse() subsequently dereferences this NULL pointer without checking the valid_requ flag, produc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00608, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:17:07.880", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67184"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48434, "pinned": false}, {"id": "CVE-2026-67185", "publisher": "VulnCheck", "title": "TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read ar", "summary": "TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured web root in HttpBuilder::buildResponse() without normalization, dot-segment removal, or boundary checks. Attackers can craft a single request with ../ sequences that pass through the URL parser unchanged and reach the filesystem ca", "cvss": 7.5, "sev": "HIGH", "epss": 0.00546, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:17:08.013", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67185"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.45016, "pinned": false}, {"id": "CVE-2026-14869", "publisher": "HashiCorp Inc.", "title": "The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the stre", "summary": "The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled endpoint. This vulnerability, CVE-2026-14869, is fixed in terraform-mcp-server 1.1.0.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:31.423", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14869"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32404, "pinned": false}, {"id": "CVE-2026-16496", "publisher": "HashiCorp Inc.", "title": "The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP ", "summary": "The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability, CVE-2026-16496, is fixed in terraform-mcp-server 1.1.0.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00355, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:31.983", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16496"}], "cwe": ["CWE-384"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28012, "pinned": false}, {"id": "CVE-2026-57510", "publisher": "VulnCheck", "title": "SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC ", "summary": "SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs without organization scoping. Attackers can read cross-tenant execution history and event payloads containing sensitive secrets, write queue items and canva", "cvss": 8.8, "sev": "HIGH", "epss": 0.00624, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:27.027", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57510"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.49316, "pinned": false}, {"id": "CVE-2026-67216", "publisher": "VulnCheck", "title": "cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare()", "summary": "cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nes", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00645, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:35.333", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "cjson", "vendor": "davegamble", "type": "app", "affected": ["<= 1.7.19"], "fixed": "newer than 1.7.19", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cjson || rpm -q cjson || cjson --version"}, {"label": "2. UPGRADE to newer than 1.7.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cjson"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cjson"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67216"}, {"t": "Patch", "u": "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50325, "pinned": false}, {"id": "CVE-2026-9177", "publisher": "Toreon", "title": "A Server-Side Template Injection (SSTI) vulnerability was identified \nin the mail template functionality of th", "summary": "A Server-Side Template Injection (SSTI) vulnerability was identified \nin the mail template functionality of the Axway SecureTransport product in version 5.5-20260326. This \nflaw \nallows an attacker with admin privileges to inject arbitrary Java code expressions, which are \nexecuted server-side when the template is rendered (i.e., during email \nsending). Successful exploitation of this flaw allows an attacker to \nexecute \narbitrary code on the ser", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00501, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:35.857", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9177"}], "cwe": ["CWE-1336"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.42016, "pinned": false}, {"id": "CVE-2026-65886", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer al", "summary": "Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00552, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:28.467", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65886"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45388, "pinned": false}, {"id": "CVE-2026-17801", "publisher": "Chrome", "title": "Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pot", "summary": "Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00428, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.523", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17801"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.35995, "pinned": false}, {"id": "CVE-2026-14537", "publisher": "Google Inc.", "title": "Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 ", "summary": "Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-api flag is active.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00252, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T02:16:27.687", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mcp toolbox for databases", "vendor": "google", "type": "app", "affected": ["1.3.0", "1.4.0"], "fixed": null, "safe": "before 1.3.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mcp-toolbox-for-databases\nsudo apt install mcp-toolbox-for-databases=<VERSION_BEFORE_1.3.0>\nsudo apt-mark hold mcp-toolbox-for-databases"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mcp-toolbox-for-databases\nsudo dnf downgrade mcp-toolbox-for-databases-<VERSION_BEFORE_1.3.0>\nsudo dnf versionlock add mcp-toolbox-for-databases"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14537"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/googleapis/mcp-toolbox/pull/3435"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15715, "pinned": false}, {"id": "CVE-2026-17346", "publisher": "PostgreSQL", "title": "The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple ", "summary": "The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates to it, but missed several sinks that had been placed in test_sql_string_literal_lint.py's ALLOWLIST on the incorrect assumption that schema, table, publication, and subscription names sourced from pg_catalog via the browser tree could never contain an apostrophe. PostgreSQL permits arbitrary characters in quoted id", "cvss": 8.8, "sev": "HIGH", "epss": 0.00615, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:58.970", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 1.0 and < 9.17"], "fixed": "9.17", "safe": "before 1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_1.0>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_1.0>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17346"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/73b3218992cc37af6e10b7e54eaeed6ec293c6b2"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/f75452bfd0f786d0c071638919d48fc1d76f987d"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10193"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.48828, "pinned": false}, {"id": "CVE-2026-52856", "publisher": "GitHub, Inc.", "title": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel", "summary": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T17:16:33.460", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52856"}], "cwe": ["CWE-129", "CWE-248", "CWE-617", "CWE-755"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48534, "pinned": false}, {"id": "CVE-2026-66315", "publisher": "Microsoft Corporation", "title": "Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netwo", "summary": "Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00608, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.927", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66315"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66315"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48463, "pinned": false}, {"id": "CVE-2026-63252", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial ", "summary": "In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00583, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.913", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 0.6.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63252"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/459715793ec54b0f33367a14f94264500a0d872b"}, {"t": "Issue Tracking, Patch", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/179"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47181, "pinned": false}, {"id": "CVE-2026-78314", "publisher": "Deltaww", "title": "SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to \nremote code execution.", "summary": "SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to \nremote code execution.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00655, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T10:16:40.370", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78314"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.5077, "pinned": false}, {"id": "CVE-2026-62199", "publisher": "VulnCheck", "title": "OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter ", "summary": "OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions beyond the caller's intended authorization.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00525, "kev": false, "added": "2026-07-13", "pub": "2026-07-13T22:16:51.673", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.6.6"], "fixed": "2026.6.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.6.6", "cmd": "npm install openclaw@\">=2026.6.6\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43716, "pinned": false}, {"id": "CVE-2026-62203", "publisher": "VulnCheck", "title": "OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fa", "summary": "OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization level.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00525, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:06.587", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.6.6"], "fixed": "2026.6.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.6.6", "cmd": "npm install openclaw@\">=2026.6.6\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43716, "pinned": false}, {"id": "CVE-2026-60034", "publisher": "Joomla! Project", "title": "Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extensio", "summary": "Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00418, "kev": false, "added": "2026-07-20", "pub": "2026-07-20T19:17:27.910", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60034"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.35019, "pinned": false}, {"id": "CVE-2026-67183", "publisher": "VulnCheck", "title": "TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust av", "summary": "TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests. Each request causes HttpParser::execute() to allocate Url objects, HttpHeaders objects, and HttpHeader instances via raw new expressions that are never freed due to missing destructors and unreachable delete calls, causing worker resident memory to grow monotonically by approxi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00509, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:17:07.737", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67183"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42627, "pinned": false}, {"id": "CVE-2026-14973", "publisher": "IBM Corporation", "title": "IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of th", "summary": "IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00452, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.570", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aspera", "vendor": "ibm", "type": "app", "affected": [">= 1.0.5 and <= 1.0.19"], "fixed": "newer than 1.0.19", "safe": "before 1.0.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aspera || rpm -q aspera || aspera --version"}, {"label": "2. UPGRADE to newer than 1.0.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aspera"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aspera"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.5 (Debian / Ubuntu)", "cmd": "apt-cache madison aspera\nsudo apt install aspera=<VERSION_BEFORE_1.0.5>\nsudo apt-mark hold aspera"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aspera\nsudo dnf downgrade aspera-<VERSION_BEFORE_1.0.5>\nsudo dnf versionlock add aspera"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14973"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280939"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38282, "pinned": false}, {"id": "CVE-2026-15280", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:27.640", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.9"], "fixed": "26.0.0.9", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15280"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281633"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42136, "pinned": false}, {"id": "CVE-2026-54690", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.9.1 until 0.61.0, datamodel-code-generator silently dereferences attacker-controlled JSON Schema $ref HTTP or HTTPS URLs in src/datamodel_code_generator/parser/jsonschema.py through _get_ref_body, and the --allow-remote-refs gate can warn instead of blocking, allow", "cvss": 8.2, "sev": "HIGH", "epss": 0.00388, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.650", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": [">= 0.9.1 and < 0.61.0"], "fixed": "0.61.0", "safe": "before 0.9.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.61.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.9.1 (Debian / Ubuntu)", "cmd": "apt-cache madison datamodel-code-generator\nsudo apt install datamodel-code-generator=<VERSION_BEFORE_0.9.1>\nsudo apt-mark hold datamodel-code-generator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list datamodel-code-generator\nsudo dnf downgrade datamodel-code-generator-<VERSION_BEFORE_0.9.1>\nsudo dnf versionlock add datamodel-code-generator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54690"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/5fdba4a09f2d7a9996a504975b7ef7d63e3715bb"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-954p-556p-r752"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-954p-556p-r752"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31744, "pinned": false}, {"id": "CVE-2026-55390", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/parser/xmlschema.py for --input-file-type xmlschema resolves xs:include, xs:import, xs:redefine, and xs:override schemaLocation values outside the input base path, allowing arbitrary local files to be read and reflected into generated models. This issue is fixed in version 0.62.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:48.557", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55390"}], "cwe": ["CWE-22", "CWE-200", "CWE-610"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43994, "pinned": false}, {"id": "CVE-2026-55391", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodel_code_generator/http.py through get_body, _validate_url_for_fetch, and _get_ips_from_host, but then lets httpx resolve the host again for the connection, allowing DNS rebinding to bypass a", "cvss": 7.5, "sev": "HIGH", "epss": 0.00305, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:48.697", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": ["< 0.63.0"], "fixed": "0.63.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.63.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55391"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g"}], "cwe": ["CWE-350", "CWE-367", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22098, "pinned": false}, {"id": "CVE-2026-55415", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema extensions to reach src/datamodel_code_generator/parser/jsonschema.py and generated import handling through Import.from_full_path and Imports.create_line", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:48.983", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": [">= 0.11.6 and < 0.64.0"], "fixed": "0.64.0", "safe": "before 0.11.6", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.64.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.11.6 (Debian / Ubuntu)", "cmd": "apt-cache madison datamodel-code-generator\nsudo apt install datamodel-code-generator=<VERSION_BEFORE_0.11.6>\nsudo apt-mark hold datamodel-code-generator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list datamodel-code-generator\nsudo dnf downgrade datamodel-code-generator-<VERSION_BEFORE_0.11.6>\nsudo dnf versionlock add datamodel-code-generator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55415"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/577d49569c2254c371a97e495020ae2238a73b84"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-5578-w22f-pfx9"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-5578-w22f-pfx9"}], "cwe": ["CWE-94", "CWE-95"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.41127, "pinned": false}, {"id": "CVE-2026-65885", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods", "summary": "Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00521, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:10.820", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65885"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43433, "pinned": false}, {"id": "CVE-2026-17881", "publisher": "Chrome", "title": "Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitra", "summary": "Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00523, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.043", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17881"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43543, "pinned": false}, {"id": "CVE-2026-66360", "publisher": "ICS-CERT", "title": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiat", "summary": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:53.070", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66360"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41089, "pinned": false}, {"id": "CVE-2026-44615", "publisher": "Apache Software Foundation", "title": "Path traversal vulnerability in Apache Zeppelin", "summary": "Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder operations, could supply traversal segments in note or folder paths. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Zeppelin composed these values into filesystem paths using the server's filesystem or Hadoop identity without ensuring that the result remained under the configured notebook directory. This c", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00805, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T11:17:10.087", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zeppelin", "vendor": "apache", "type": "app", "affected": [">= 0.9.0 and < 0.12.1"], "fixed": "0.12.1", "safe": "before 0.9.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zeppelin || rpm -q zeppelin || zeppelin --version"}, {"label": "2. UPGRADE to 0.12.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zeppelin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zeppelin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.9.0 (Debian / Ubuntu)", "cmd": "apt-cache madison zeppelin\nsudo apt install zeppelin=<VERSION_BEFORE_0.9.0>\nsudo apt-mark hold zeppelin"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list zeppelin\nsudo dnf downgrade zeppelin-<VERSION_BEFORE_0.9.0>\nsudo dnf versionlock add zeppelin"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44615"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/zeppelin/pull/5227"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/zeppelin/pull/5248"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ps1f0symnyxzq8c2dc3244v051jcwp40"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5636, "pinned": false}, {"id": "CVE-2026-17349", "publisher": "PostgreSQL", "title": "/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed ", "summary": "/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing server, clones that server via Server.clone(), which copies every column from the source row, including user_id, shared, shared_username, and the stored credential fields password, save_password, and tunnel_password. When a non-owner triggered an adhoc connect against another user's (in practice, typically an adminis", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:59.480", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 9.0 and < 9.17"], "fixed": "9.17", "safe": "before 9.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_9.0>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_9.0>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17349"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/64a9cdbd6a240a962144f84418beaf9e66419779"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/a7e74a6ed685bc34e1f77a8b6a94d00fa3dff815"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10200"}], "cwe": ["CWE-522", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.32543, "pinned": false}, {"id": "CVE-2026-17351", "publisher": "PostgreSQL", "title": "The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exec", "summary": "The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wrapper. sqlparse's string-literal lexing can disagree with PostgreSQL's own parser: under standard_conforming_strings = on (PostgreSQL's default since 9.1), a backslash immediately before a qu", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:59.807", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 9.13 and < 9.17"], "fixed": "9.17", "safe": "before 9.13", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.13 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_9.13>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_9.13>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17351"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/bf4792444446f0e7ab721d23cbd6bfe6afaa7a8b"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/ef76102bcd1cdb544eb9b4ef18d3382f22b76752"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10192"}], "cwe": ["CWE-89", "CWE-115"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40712, "pinned": false}, {"id": "CVE-2026-67322", "publisher": "VulnCheck", "title": "GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from()", "summary": "GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git.polish_url(), which on non-Cygwin platforms calls os.path.expandvars() on the URL before invoking git clone. An attacker who controls the clone URL can embed $NAME or ${NAME} tokens that are expanded to the values of the hosting process's environment variables (e.g., AWS_SECRET_ACCESS_KEY or GITHUB_", "cvss": 7.5, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:02.493", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.52"], "fixed": "3.1.52", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.52", "cmd": "pip install --upgrade \"gitpython>=3.1.52\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67322"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24671, "pinned": false}, {"id": "CVE-2026-66326", "publisher": "Microsoft Corporation", "title": "Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over ", "summary": "Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00768, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.847", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66326"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66326"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55123, "pinned": false}, {"id": "CVE-2026-56846", "publisher": "HackerOne", "title": "A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable re", "summary": "A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.\r\n\r\nThis vulnerability affects Node.js **24.x** and **22.x**.", "cvss": 7.5, "sev": "HIGH", "epss": 0.005, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T01:16:19.840", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56846"}], "cwe": ["CWE-400"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41932, "pinned": false}, {"id": "CVE-2026-60007", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for inv", "summary": "In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00553, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.427", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 0.6.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60007"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/db59fae993a3a1bc66fffc8a2796d444b40285fb"}, {"t": "Issue Tracking, Patch", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/183"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45424, "pinned": false, "mentions": [{"src": "CISA ICS Advisories", "group": "gov", "title": "Eclipse Foundation Eclipse Milo", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "date": "2026-10-15"}], "buzz": 1}, {"id": "CVE-2026-70369", "publisher": "TuranSec", "title": "Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating th", "summary": "Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragments covering aqbasket.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, items.ccode, biblioitems.itemtype, aqbudgets.budget_code, aqorders.sort1, and aqorders.sort2.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00567, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:57.680", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70369"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46314, "pinned": false}, {"id": "CVE-2026-70370", "publisher": "TuranSec", "title": "Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Lin", "summary": "Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Column request parameters directly into identifier positions of the query (SELECT DISTINCTROW, GROUP BY, ORDER BY) with no whitelist validation.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00567, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:57.803", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70370"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46315, "pinned": false}, {"id": "CVE-2026-70371", "publisher": "TuranSec", "title": "Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlle", "summary": "Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string. The Line and Column parameters are not validated against any whitelist and land verbatim in identifier positions (SELECT DISTINCTROW, GROUP BY, ORDER BY), and each Filter slot is concatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments with no bound parameters.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00567, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:57.930", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70371"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46314, "pinned": false}, {"id": "CVE-2026-70372", "publisher": "TuranSec", "title": "Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled ", "summary": "Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string. An authenticated staff user holding the reports module permission can inject arbitrary SQL and read any table reachable by the Koha database user, including borrowers (password hashes, two-factor secrets, personal data), api_keys, and sessions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00567, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:58.040", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70372"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46315, "pinned": false}, {"id": "CVE-2026-70373", "publisher": "TuranSec", "title": "Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calcula", "summary": "Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calculate by concatenating several user-controlled request parameters directly into the SQL string. The PeriodTypeSel, PeriodDaySel, and PeriodMonthSel parameters are interpolated raw into single-quoted equality and function-comparison fragments, and the Filter slots plus the Line and Column identifiers are likewise interpolated with no whitelis", "cvss": 8.8, "sev": "HIGH", "epss": 0.00567, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:58.150", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70373"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46315, "pinned": false}, {"id": "CVE-2026-73851", "publisher": "GitHub, Inc.", "title": "Kiota is an OpenAPI based HTTP Client code generator", "summary": "Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package (e.g. ../../../../etc/passwd, an absolute path, or a file:// / http(s):// URI). When the generated manifest is deployed and consumed by an AI host, this can lead to inclusion or disclosure of files outside the inte", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.02275, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T15:16:57.980", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73851"}], "cwe": ["CWE-22", "CWE-829"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": [], "fix": false, "watched": false, "epss_pct": 0.8297, "pinned": false}, {"id": "CVE-2026-66494", "publisher": "Joomla! Project", "title": "Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 ", "summary": "Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript executes in their browser automatically..", "cvss": 8.7, "sev": "HIGH", "epss": 0.00498, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T13:16:52.827", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66494"}], "cwe": ["CWE-79", "CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41814, "pinned": false}, {"id": "CVE-2023-37207", "publisher": "Mozilla Corporation", "title": "A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external ", "summary": "A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00739, "kev": false, "added": "2023-07-05", "pub": "2023-07-05T09:15:09.963", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.0"], "fixed": "115.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.13"], "fixed": "102.13", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.13"], "fixed": "102.13", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["10.0", "11.0", "12.0"], "fixed": null, "safe": "before 10.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-37207"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}], "cwe": ["CWE-470"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54089, "pinned": false}, {"id": "CVE-2024-56835", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 8.8, "sev": "HIGH", "epss": 0.00507, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:28.580", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56835"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42404, "pinned": false}, {"id": "CVE-2026-35045", "publisher": "GitHub, Inc.", "title": "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists", "summary": "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users. This bypasses all object-level authorization checks enforced on standard single-recipe endpoints (PUT /api/recipe/{id}/), enabling forced ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00378, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:42.133", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "recipes", "vendor": "tandoor", "type": "app", "affected": ["< 2.6.4"], "fixed": "2.6.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy recipes || rpm -q recipes || recipes --version"}, {"label": "2. UPGRADE to 2.6.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade recipes"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade recipes"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35045"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-v8x3-w674-55p5"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.30631, "pinned": false}, {"id": "CVE-2026-36837", "publisher": "MITRE", "title": "TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the h", "summary": "TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00458, "kev": false, "added": "2026-04-29", "pub": "2026-04-29T15:16:05.530", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-36837"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38733, "pinned": false}, {"id": "CVE-2026-32995", "publisher": "HackerOne", "title": "The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, ", "summary": "The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7.13.8, and <7.10.12 accepts a client-supplied IMessage object and passes it directly to translateMessage() without checking Meteor.userId() or verifying room membership. Any authenticated DDP user can read the content of any message by ID from any room (private channels, DMs, E2EE rooms) by calling this method.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-05-28", "pub": "2026-05-28T05:16:35.477", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32995"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40518, "pinned": false}, {"id": "CVE-2026-42629", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.", "summary": "Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00496, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:40.287", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42629"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41676, "pinned": false}, {"id": "CVE-2026-44016", "publisher": "GitHub, Inc.", "title": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generati", "summary": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious H", "cvss": 8.2, "sev": "HIGH", "epss": 0.00593, "kev": false, "added": "2026-06-24", "pub": "2026-06-24T18:17:16.353", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "docling", "vendor": "docling", "type": "app", "affected": [">= 2.82.0 and < 2.91.0"], "fixed": "2.91.0", "safe": "before 2.82.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show docling"}, {"label": "2. UPGRADE to 2.91.0", "cmd": "pip install --upgrade \"docling>=2.91.0\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.82.0", "cmd": "pip index versions docling\npip install \"docling<2.82.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44016"}, {"t": "Mitigation, Patch", "u": "https://github.com/docling-project/docling/security/advisories/GHSA-pj2v-ggqh-cmq2"}], "cwe": ["CWE-94", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4768, "pinned": false}, {"id": "CVE-2026-63048", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3", "summary": "Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00382, "kev": false, "added": "2026-07-22", "pub": "2026-07-22T08:16:24.063", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63048"}], "cwe": ["CWE-434"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.31033, "pinned": false}, {"id": "CVE-2026-49258", "publisher": "GitHub, Inc.", "title": "Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN", "summary": "Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and below, the web UI (/ui/*) does not apply the per-operator CA scoping employed by the JSON API. This was partially addressed by GHSA-598g-h2vc-h5vg, but the changes were not implemented in the web read/mutation surface. Any authenticated non-admin operator (for example, one created via self-registration or OIDC) can access resources belonging to other o", "cvss": 8.8, "sev": "HIGH", "epss": 0.00481, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.000", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49258"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40551, "pinned": false}, {"id": "CVE-2026-15057", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due ", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:27.367", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.8"], "fixed": "26.0.0.8", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15057"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280126"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38928, "pinned": false}, {"id": "CVE-2026-47219", "publisher": "GitHub, Inc.", "title": "find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parame", "summary": "find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup() function passes req.method into find(), and find() indexes this.trees[method]. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or __proto__ can ", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:03.763", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47219"}], "cwe": ["CWE-20", "CWE-248"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3893, "pinned": false}, {"id": "CVE-2026-54719", "publisher": "GitHub, Inc.", "title": "goshs is a feature-rich single-binary file server for red teamers and developers", "summary": "goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.1, the httpserver/updown.go bulkDownload handler for ?bulk&file= ZIP downloads did not call findEffectiveACL or applyCustomAuth, allowing unauthenticated reads of files protected only by .goshs folder ACLs and block lists. This issue is fixed in version 2.1.1. This vulnerability exists due to an incomplete fix for CVE-2026-40189.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00466, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:09.213", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54719"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39391, "pinned": false}, {"id": "CVE-2026-17847", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote a", "summary": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00367, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.350", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17847"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.29415, "pinned": false}, {"id": "CVE-2026-10686", "publisher": "Zephyr Project", "title": "Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit", "summary": "Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6_route_packet() (subsys/net/ip) were affected: the explicit-route path (net_route_packet()) and the on-link cross-interface path (net_route_packet_if()). Each set the packet forwarding flag and called net_send_data() with the hop limit untouched and no expiry check.\n\nPer RFC 8200 the hop-limit decrement is the me", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00515, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:57.283", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 1.8.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 1.8.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10686"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/7d8f1afa7345975b58405d6fba18bb8c3f7cb12a"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4cg6-6jc4-2r6h"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43045, "pinned": false}, {"id": "CVE-2026-18481", "publisher": "AMZN", "title": "Stored cross-site scripting in the participant URL handling in AWS Ops \nWheel before PR #168 might allow an au", "summary": "Stored cross-site scripting in the participant URL handling in AWS Ops \nWheel before PR #168 might allow an authenticated remote user to steal \nsession tokens and escalate to full administrative control of the \ndeployed instance via a crafted participant_url value containing a \ndangerous URI scheme.\n\n\n\n\n\n\nTo remediate this issue, users should redeploy from the latest version of aws-ops-wheel.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00513, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T19:17:08.347", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18481"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42861, "pinned": false}, {"id": "CVE-2026-67978", "publisher": "MITRE", "title": "An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via t", "summary": "An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:47.213", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67978"}], "cwe": ["CWE-20", "CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38941, "pinned": false}, {"id": "CVE-2026-66318", "publisher": "Microsoft Corporation", "title": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose informa", "summary": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0036, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.317", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66318"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66318"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28638, "pinned": false}, {"id": "CVE-2026-58080", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleM", "summary": "In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions and construct the running configuration through `copy()`, sessions receive no role IDs and the default access controller skips role-permission checks, allowing an anonymous client where anonymous sessions are permitted to read role-permission metadata, invoke protected methods, or delete pr", "cvss": 8.2, "sev": "HIGH", "epss": 0.00378, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.293", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 1.0.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58080"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/d51f03e9a75f313ab41c3d68d809f4b922073f1a"}, {"t": "Issue Tracking, Patch", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/180"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3057, "pinned": false, "mentions": [{"src": "CISA ICS Advisories", "group": "gov", "title": "Eclipse Foundation Eclipse Milo", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "date": "2026-10-15"}], "buzz": 1}, {"id": "CVE-2026-18770", "publisher": "VulDB", "title": "A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0", "summary": "A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contac", "cvss": 7.3, "sev": "HIGH", "epss": 0.00516, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:34.043", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18770"}], "cwe": ["CWE-74", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43119, "pinned": false}, {"id": "CVE-2026-78202", "publisher": "VulDB", "title": "A vulnerability was found in itsourcecode Payroll System 1.0", "summary": "A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00495, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T07:16:54.400", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78202"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41585, "pinned": false}, {"id": "CVE-2023-25392", "publisher": "MITRE", "title": "Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.", "summary": "Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00434, "kev": false, "added": "2023-04-10", "pub": "2023-04-10T14:15:09.723", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bigflow", "vendor": "allegro", "type": "app", "affected": ["< 1.6"], "fixed": "1.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bigflow || rpm -q bigflow || bigflow --version"}, {"label": "2. UPGRADE to 1.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bigflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bigflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25392"}, {"t": "Patch", "u": "https://github.com/allegro/bigflow/pull/357"}, {"t": "Patch", "u": "https://github.com/allegro/bigflow/pull/357"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36628, "pinned": false}, {"id": "CVE-2023-36386", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 8.8, "sev": "HIGH", "epss": 0.00442, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.680", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36386"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37355, "pinned": false}, {"id": "CVE-2026-35039", "publisher": "GitHub, Inc.", "title": "fast-jwt provides fast JSON Web Token (JWT) implementation", "summary": "fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not properly create unique keys for different tokens can lead to cache collisions. This could cause tokens to be mis-identified during the verification process leading to valid tokens returning claims from different valid tokens and users being mis-identified as other users based on the wrong token. Version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00219, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:13.243", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fast-jwt", "vendor": "nearform", "type": "app", "affected": [">= 0.1.0 and < 6.1.0"], "fixed": "6.1.0", "safe": "before 0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls fast-jwt"}, {"label": "2. UPGRADE to 6.1.0", "cmd": "npm install fast-jwt@\">=6.1.0\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.1.0", "cmd": "npm view fast-jwt versions\nnpm install fast-jwt@\"<0.1.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35039"}, {"t": "Patch", "u": "https://github.com/nearform/fast-jwt/commit/de121056c6415b58770c60640881eaec67ac4ceb"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/nearform/fast-jwt/security/advisories/GHSA-rp9m-7r4c-75qg"}], "cwe": ["CWE-345", "CWE-706", "CWE-1289"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.11761, "pinned": false}, {"id": "CVE-2026-57386", "publisher": "Patchstack", "title": "Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This i", "summary": "Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-07-13", "pub": "2026-07-13T10:16:31.803", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57386"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34972, "pinned": false}, {"id": "CVE-2026-62217", "publisher": "VulnCheck", "title": "OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature", "summary": "OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. When the feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization, allowing non-allowlisted senders to perform unauthorized operations.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:08.553", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": [">= 2026.5.14 and < 2026.5.27"], "fixed": "2026.5.27", "safe": "before 2026.5.14", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.5.27", "cmd": "npm install openclaw@\">=2026.5.27\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.5.14", "cmd": "npm view openclaw versions\nnpm install openclaw@\"<2026.5.14\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217"}, {"t": "Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37921, "pinned": false}, {"id": "CVE-2026-62223", "publisher": "VulnCheck", "title": "OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature th", "summary": "OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization. Attackers can exploit misconfigured input paths to execute or persist unauthorized actions when the affected feature is enabled and reachable.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:09.440", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.5.18"], "fixed": "2026.5.18", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.5.18", "cmd": "npm install openclaw@\">=2026.5.18\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38219, "pinned": false}, {"id": "CVE-2026-48025", "publisher": "GitHub, Inc.", "title": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network", "summary": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at internal/api/enroll.go:116, internal/api/updates.go:297, and internal/api/mobile_bundle.go:40 use the manager for one Sign() and drop the reference on function ", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:20.583", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48025"}], "cwe": ["CWE-244"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42379, "pinned": false}, {"id": "CVE-2026-16771", "publisher": "CERT/CC", "title": "In firmware versions 2.7.7 and earlier, the Arris BGW210\u2011700 gateway fails to enforce any server\u2011side authenti", "summary": "In firmware versions 2.7.7 and earlier, the Arris BGW210\u2011700 gateway fails to enforce any server\u2011side authentication on its /cgi-bin/*.ha management endpoints, relying solely on client\u2011side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the LAN to read sensitive configuration data, modify persistent device settings, or trigger backend diagnostic operations. The issue appears systemic across", "cvss": 8.8, "sev": "HIGH", "epss": 0.00425, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:32.247", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16771"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35701, "pinned": false}, {"id": "CVE-2026-16184", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sendin", "summary": "IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00474, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:23.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.31", ">= 9.0.0.0 and < 9.0.5.29"], "fixed": "8.5.5.31, 9.0.5.29", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.31 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16184"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281628"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40026, "pinned": false}, {"id": "CVE-2026-14528", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive in", "summary": "IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00452, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.060", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.31", ">= 9.0.0.0 and < 9.0.5.29"], "fixed": "8.5.5.31, 9.0.5.29", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.31 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14528"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281649"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3828, "pinned": false}, {"id": "CVE-2026-14996", "publisher": "IBM Corporation", "title": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.", "summary": "IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:27.240", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aspera faspex", "vendor": "ibm", "type": "app", "affected": [">= 5.0.0 and < 5.0.16"], "fixed": "5.0.16", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aspera-faspex || rpm -q aspera-faspex || aspera-faspex --version"}, {"label": "2. UPGRADE to 5.0.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aspera-faspex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aspera-faspex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aspera-faspex\nsudo apt install aspera-faspex=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold aspera-faspex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aspera-faspex\nsudo dnf downgrade aspera-faspex-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add aspera-faspex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14996"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280530"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25728, "pinned": false}, {"id": "CVE-2026-54659", "publisher": "GitHub, Inc.", "title": "Pagy is agnostic pagination in plain Ruby", "summary": "Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as <locale>.yml path components, allowing untrusted params[:locale] values with absolute paths or ../ sequences to create a file existence and readability oracle for YAML files. This issue is fixed in version 43.5.6.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0054, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:09.067", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54659"}], "cwe": ["CWE-22", "CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.44672, "pinned": false}, {"id": "CVE-2026-65889", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp me", "summary": "Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:33.757", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65889"}], "cwe": ["CWE-22", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36888, "pinned": false}, {"id": "CVE-2026-54080", "publisher": "GitHub, Inc.", "title": "veraPDF PDF parser is a PDF parser for veraPDF", "summary": "veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/cmap/CMapParser.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java, where a crafted Type 0 font /Encoding or /ToUnicode CMap stream can execute unbounded PostScript array allocation or a zero-increment for loop and exhaust validat", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:53.347", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54080"}], "cwe": ["CWE-1325"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43608, "pinned": false}, {"id": "CVE-2026-54081", "publisher": "GitHub, Inc.", "title": "veraPDF PDF parser is a PDF parser for veraPDF", "summary": "veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java, where a crafted Type 1 font /FontDescriptor /FontFile program can execute unbounded PostScript array allocation, a zero-increment for loop, or self-recursi", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:53.493", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54081"}], "cwe": ["CWE-1325"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43616, "pinned": false}, {"id": "CVE-2026-17768", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:39.990", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17768"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26853, "pinned": false}, {"id": "CVE-2026-17803", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a ", "summary": "Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00319, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.737", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17803"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.23614, "pinned": false}, {"id": "CVE-2026-17804", "publisher": "Chrome", "title": "Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised ", "summary": "Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.847", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17804"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26851, "pinned": false}, {"id": "CVE-2026-17832", "publisher": "Chrome", "title": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised ", "summary": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00336, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.777", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17832"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.25847, "pinned": false}, {"id": "CVE-2026-17834", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.987", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17834"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26851, "pinned": false}, {"id": "CVE-2026-17837", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.310", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17837"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.2685, "pinned": false}, {"id": "CVE-2026-17848", "publisher": "Chrome", "title": "Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially pe", "summary": "Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00319, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.453", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17848"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.23613, "pinned": false}, {"id": "CVE-2026-17856", "publisher": "Chrome", "title": "Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attack", "summary": "Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.353", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17856"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26848, "pinned": false}, {"id": "CVE-2026-17865", "publisher": "Chrome", "title": "Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacke", "summary": "Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.400", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17865"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26847, "pinned": false}, {"id": "CVE-2026-17347", "publisher": "PostgreSQL", "title": "The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external com", "summary": "The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a per-user encryption key, with %u in the configured string replaced by the current user's name. The previous implementation substituted the username directly into the command string and executed the result with subprocess.Popen(..., shell=True). Because the username can originate from an external authentication source (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00716, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:59.140", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 7.2 and < 9.17"], "fixed": "9.17", "safe": "before 7.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_7.2>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_7.2>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17347"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/e7a85767314e7b0fe0b35fe80b9c1af38f48dff6"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/ea7e798aac27174d2bacee1d6e136bed76a95e23"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10191"}], "cwe": ["CWE-78", "CWE-88"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.53275, "pinned": false}, {"id": "CVE-2026-54737", "publisher": "GitHub, Inc.", "title": "@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency", "summary": "@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This issue is fixed in version 2.0.5.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00455, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:17.330", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54737"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38499, "pinned": false}, {"id": "CVE-2026-16881", "publisher": "LINE Corporation", "title": "A code injection vulnerability exists in the LINE Android app prior to version 26.7.2", "summary": "A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. \n\nThe profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. \n\nAs a result, an attacker who is able to place crafted content in a profile could cause unintended code to execute with the application's privileges when a victim views that profile. \n\nA server-side mitigation has been dep", "cvss": 8.7, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T06:16:29.810", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16881"}], "cwe": [], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37586, "pinned": false}, {"id": "CVE-2026-62927", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-", "summary": "In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.670", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 1.0.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62927"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/59b50bed094de0d18a130a48f3527254dc76105d"}, {"t": "Issue Tracking, Patch", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/178"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3503, "pinned": false, "mentions": [{"src": "CISA ICS Advisories", "group": "gov", "title": "Eclipse Foundation Eclipse Milo", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "date": "2026-10-15"}], "buzz": 1}, {"id": "CVE-2026-17070", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Missing Authorization vulnerability in HAVELSAN Inc", "summary": "Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Liman MYS: from 2.2.3 before 2.3.1.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T14:16:30.733", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17070"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34967, "pinned": false}, {"id": "CVE-2026-18650", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Missing Authorization vulnerability in HAVELSAN Inc", "summary": "Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation.\n\nThis issue affects Liman MYS: from 2.2.3 before 2.3.1.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:31.410", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18650"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34979, "pinned": false}, {"id": "CVE-2026-77079", "publisher": "VulnCheck", "title": "n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignmen", "summary": "n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. When deleting a custom project role with a reassignment target, the code validated only that the target role existed and was project-scoped, performing no project-level authorization check. A user holding only the narrow role:manageProject global scope could delete any custom project role in use on the instance and reassign its h", "cvss": 8.8, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-20", "pub": "2026-08-20T12:16:39.263", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 2.33.4", "2.34.0"], "fixed": "2.33.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.33.4", "cmd": "npm install n8n@\">=2.33.4\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77079"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-xhmh-8fgr-xqhj"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38219, "pinned": false}, {"id": "CVE-2026-78201", "publisher": "VulDB", "title": "A vulnerability has been found in itsourcecode Payroll System 1.0", "summary": "A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T06:21:09.847", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78201"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36292, "pinned": false}, {"id": "CVE-2023-28665", "publisher": "Tenable Network Security, Inc.", "title": "The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripti", "summary": "The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only be triggered by an authenticated user.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00887, "kev": false, "added": "2023-03-22", "pub": "2023-03-22T21:15:19.077", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bulk price update for woocommerce", "vendor": "technocrackers", "type": "app", "affected": ["< 2.2.2"], "fixed": "2.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bulk-price-update-for-woocommerce || rpm -q bulk-price-update-for-woocommerce || bulk-price-update-for-woocommerce --version"}, {"label": "2. UPGRADE to 2.2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bulk-price-update-for-woocommerce"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bulk-price-update-for-woocommerce"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28665"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.58922, "pocs": [{"kind": "nuclei", "name": "Woo Bulk Price Update <2.2.2 - Cross-Site Scripting", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28665.yaml"}], "pinned": false}, {"id": "CVE-2023-33524", "publisher": "MITRE", "title": "Advent/SSC Inc", "summary": "Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact information on the host which contains usernames, e-mail addresses, and other internal information stored within the web app.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00953, "kev": false, "added": "2023-06-05", "pub": "2023-06-05T17:15:08.940", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tamale rms", "vendor": "advent", "type": "app", "affected": ["< 23.1"], "fixed": "23.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tamale-rms || rpm -q tamale-rms || tamale-rms --version"}, {"label": "2. UPGRADE to 23.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tamale-rms"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tamale-rms"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-33524"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60999, "pinned": false}, {"id": "CVE-2025-34336", "publisher": "VulnCheck", "title": "eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file u", "summary": "eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/insertImageCk.do image upload endpoints. These controllers accept multipart requests without authentication, pass the uploaded content to a shared upload helper, and store the file on the server under a framework-controlled path. The framework then returns a download URL tha", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00461, "kev": false, "added": "2025-11-19", "pub": "2025-11-19T17:15:49.073", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34336"}], "cwe": ["CWE-434"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39008, "pinned": false}, {"id": "CVE-2026-5665", "publisher": "VulDB", "title": "A security vulnerability has been detected in code-projects Online FIR System 1.0", "summary": "A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T16:16:41.773", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5665"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34237, "pinned": false}, {"id": "CVE-2026-40767", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.", "summary": "Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-06-15", "pub": "2026-06-15T21:16:49.353", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40767"}], "cwe": ["CWE-281"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32396, "pinned": false}, {"id": "CVE-2026-57833", "publisher": "Joomla! Project", "title": "Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analy", "summary": "Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-07-15", "pub": "2026-07-15T10:16:47.737", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57833"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.36915, "pinned": false}, {"id": "CVE-2026-13463", "publisher": "IBM Corporation", "title": "IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion", "summary": "IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00381, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:25.533", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "cloud pak system", "vendor": "ibm", "type": "app", "affected": ["2.3.5.0"], "fixed": null, "safe": "before 2.3.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cloud-pak-system || rpm -q cloud-pak-system || cloud-pak-system --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.3.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cloud-pak-system\nsudo apt install cloud-pak-system=<VERSION_BEFORE_2.3.5.0>\nsudo apt-mark hold cloud-pak-system"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cloud-pak-system\nsudo dnf downgrade cloud-pak-system-<VERSION_BEFORE_2.3.5.0>\nsudo dnf versionlock add cloud-pak-system"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13463"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279434"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30859, "pinned": false}, {"id": "CVE-2026-65943", "publisher": "Joomla! Project", "title": "Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0", "summary": "Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:11.087", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ro csvi", "vendor": "rolandd", "type": "app", "affected": ["< 9.11.0"], "fixed": "9.11.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ro-csvi || rpm -q ro-csvi || ro-csvi --version"}, {"label": "2. UPGRADE to 9.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ro-csvi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ro-csvi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65943"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32397, "pinned": false}, {"id": "CVE-2026-54661", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates servers[0].url from src/code-gen-process.ts into the HttpClient constructor without escaping, allowing an attacker-controlled OpenAPI spec to inject code that executes when new HttpClient() or new Api() is constructed. This issue is fixed in version 13.12.2.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.440", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54661"}], "cwe": ["CWE-74", "CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40269, "pinned": false}, {"id": "CVE-2026-54662", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers[0].url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpolates apiConfig.baseUrl into the generated HttpClient baseUrl field without escaping, allowing an attacker-controlled OpenAPI spec to inject TypeScript static field code that executes when the", "cvss": 8.3, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.577", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54662"}], "cwe": ["CWE-74", "CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.4027, "pinned": false}, {"id": "CVE-2026-54664", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas.*.enum[i] values to Ts.StringValue in src/configuration.ts without escaping before templates/base/enum-data-contract.ejs renders TypeScript enum declarations, allowing an attacker-controlled OpenAPI spec to inject code that executes when the generated module is imp", "cvss": 8.3, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.850", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54664"}], "cwe": ["CWE-74", "CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40269, "pinned": false}, {"id": "CVE-2026-54666", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-routes/schema-routes.ts passes OpenAPI path keys through parseRouteName to templates/default/procedure-call.ejs and templates/modular/procedure-call.ejs without escaping JavaScript template literal interpolation, allowing an attacker-controlled path containing ${...} to execute when the generated method is called. This issue", "cvss": 8.3, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.990", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54666"}], "cwe": ["CWE-74", "CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.4027, "pinned": false}, {"id": "CVE-2026-17778", "publisher": "Chrome", "title": "Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbi", "summary": "Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.087", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17778"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30967, "pinned": false}, {"id": "CVE-2026-17807", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co", "summary": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.157", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17807"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34537, "pinned": false}, {"id": "CVE-2026-17836", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co", "summary": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.190", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17836"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34533, "pinned": false}, {"id": "CVE-2026-17875", "publisher": "Chrome", "title": "Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrar", "summary": "Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.423", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17875"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30967, "pinned": false}, {"id": "CVE-2026-67328", "publisher": "VulnCheck", "title": "@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider", "summary": "@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflected XSS on logout endpoints to gain unauthorized session access and account takeover.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00491, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.380", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67328"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41326, "pinned": false}, {"id": "CVE-2026-66310", "publisher": "Microsoft Corporation", "title": "External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclos", "summary": "External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00364, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.240", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge || rpm -q edge || edge --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66310"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66310"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29063, "pinned": false}, {"id": "CVE-2026-66314", "publisher": "Microsoft Corporation", "title": "Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized at", "summary": "Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00574, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.797", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66314"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66314"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46717, "pinned": false}, {"id": "CVE-2023-28828", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Polarion ALM (All versions < V22R2)", "summary": "A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0059, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:18.393", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "polarion alm", "vendor": "siemens", "type": "app", "affected": ["< 2304.0"], "fixed": "2304.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy polarion-alm || rpm -q polarion-alm || polarion-alm --version"}, {"label": "2. UPGRADE to 2304.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade polarion-alm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade polarion-alm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28828"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-632164.pdf"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-632164.pdf"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47521, "pinned": false}, {"id": "CVE-2025-52547", "publisher": "Armis", "title": "E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation", "summary": "E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:37.227", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-52547"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2565, "pinned": false}, {"id": "CVE-2025-62034", "publisher": "Patchstack", "title": "Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.", "summary": "Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:09.613", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62034"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.27871, "pinned": false}, {"id": "CVE-2026-35167", "publisher": "GitHub, Inc.", "title": "Kedro is a toolbox for production-ready data science", "summary": "Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are used as path components, traversal sequences such as ../ are preserved and can escape the intended versioned dataset directory.\nThis is reachable through multiple entry points: catalog.load(...", "cvss": 7.1, "sev": "HIGH", "epss": 0.00405, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:43.217", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "kedro", "vendor": "linuxfoundation", "type": "app", "affected": ["< 1.3.0"], "fixed": "1.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show kedro"}, {"label": "2. UPGRADE to 1.3.0", "cmd": "pip install --upgrade \"kedro>=1.3.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35167"}, {"t": "Vendor Advisory", "u": "https://github.com/kedro-org/kedro/security/advisories/GHSA-6326-w46w-ppjw"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33638, "pinned": false}, {"id": "CVE-2026-59931", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the WEBSERVICE() domain whitelist can be bypassed via an HTTP redirect (SSRF). In Calculation/Web/Service.php, the webService() method validates a URL's host against the whitelist set via Spreadsheet::setDomainWhiteList(), then", "cvss": 7.7, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:22.873", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59931"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.44009, "pinned": false}, {"id": "CVE-2026-66745", "publisher": "VulnCheck", "title": "Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulne", "summary": "Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controlled session identifier and wait for a victim to authenticate through fw.login.php, after which the attacker gains a fully authenticated administrative s", "cvss": 7.5, "sev": "HIGH", "epss": 0.00554, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:41.440", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66745"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45515, "pinned": false}, {"id": "CVE-2026-63231", "publisher": "CSA", "title": "A post-authentication SQL injection\nvulnerability in Koollab LMS allowed an authenticated attacker to use an e", "summary": "A post-authentication SQL injection\nvulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via\nthe face-to-face runs update endpoint to read the entire application database\nand obtain valid JWT tokens for account takeover.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00446, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.490", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63231"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37766, "pinned": false}, {"id": "CVE-2026-67217", "publisher": "VulnCheck", "title": "cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c", "summary": "cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operation is fully validated, so the target document is mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure s", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00433, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:35.477", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "cjson", "vendor": "davegamble", "type": "app", "affected": ["<= 1.7.19"], "fixed": "newer than 1.7.19", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cjson || rpm -q cjson || cjson --version"}, {"label": "2. UPGRADE to newer than 1.7.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cjson"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cjson"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67217"}, {"t": "Patch", "u": "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L887-L948"}], "cwe": ["CWE-696"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36556, "pinned": false}, {"id": "CVE-2026-17784", "publisher": "Chrome", "title": "Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compr", "summary": "Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.723", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17784"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26855, "pinned": false}, {"id": "CVE-2026-17855", "publisher": "Chrome", "title": "Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised ", "summary": "Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00275, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.230", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17855"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.18948, "pinned": false}, {"id": "CVE-2026-17884", "publisher": "Chrome", "title": "Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentia", "summary": "Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.340", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17884"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26846, "pinned": false}, {"id": "CVE-2026-17886", "publisher": "Chrome", "title": "Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially ", "summary": "Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.540", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17886"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26846, "pinned": false}, {"id": "CVE-2026-64607", "publisher": "Apache Software Foundation", "title": "HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the con", "summary": "HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message.\u00a0Please note this defect does not affect HttpClient based on the async i/o model.\n\nThis issue affects Apache HttpComponents Client: from 5.0-alpha1 through 5.6.2.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00464, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T11:17:11.710", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "httpclient", "vendor": "apache", "type": "app", "affected": [">= 5.0.0 and < 5.6.3"], "fixed": "5.6.3", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy httpclient || rpm -q httpclient || httpclient --version"}, {"label": "2. UPGRADE to 5.6.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade httpclient"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade httpclient"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison httpclient\nsudo apt install httpclient=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold httpclient"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list httpclient\nsudo dnf downgrade httpclient-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add httpclient"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64607"}], "cwe": ["CWE-772"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39261, "pinned": false}, {"id": "CVE-2026-46593", "publisher": "CERT.PL", "title": "A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script", "summary": "A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to\u00a0pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks.\nThis issue was fixed in version 4.1.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T12:16:50.527", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46593"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31209, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in PHP Jabbers scripts", "url": "https://cert.pl/en/posts/2026/07/CVE-2025-67649/", "date": "2026-07-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-14838", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consult", "summary": "Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.540", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14838"}], "cwe": ["CWE-598"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.264, "pinned": false}, {"id": "CVE-2026-18401", "publisher": "HeroDevs", "title": "The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint de", "summary": "The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters). An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length, leading to excessive memory allocation and potential CPU exhaustion, resulting in a denial of service.\n\n\n\nThe synchronous parser enforces this limit corr", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00408, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:29.900", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18401"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33971, "pinned": false}, {"id": "CVE-2026-76601", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not ", "summary": "Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.090", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76601"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3371, "pinned": false}, {"id": "CVE-2023-30549", "publisher": "GitHub, Inc.", "title": "Apptainer is an open source container platform for Linux", "summary": "Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic and Ubuntu 20.04 focal. Use-after-free flaws in the ke", "cvss": 7.1, "sev": "HIGH", "epss": 0.00369, "kev": false, "added": "2023-04-25", "pub": "2023-04-25T21:15:10.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "apptainer", "vendor": "lfprojects", "type": "app", "affected": ["< 1.1.8"], "fixed": "1.1.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apptainer || rpm -q apptainer || apptainer --version"}, {"label": "2. UPGRADE to 1.1.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apptainer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apptainer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "singularity", "vendor": "sylabs", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy singularity || rpm -q singularity || singularity --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["7.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30549"}, {"t": "Patch", "u": "https://github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg"}, {"t": "Patch", "u": "https://github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29563, "pinned": false}, {"id": "CVE-2023-29105", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl", "summary": "A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions < V2.1). The affected device is vulnerable to a denial of service while parsing a random (non-JSON) MQTT payload. This could allow an attacker who can manipulate the communication between the ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00551, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:17.627", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "6gk1411-1ac00 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.1"], "fixed": "2.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "6gk1411-5ac00 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.1"], "fixed": "2.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29105"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf"}], "cwe": ["CWE-544"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4536, "pinned": false}, {"id": "CVE-2023-29106", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl", "summary": "A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00718, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:17.703", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "6gk1411-1ac00 firmware", "vendor": "siemens", "type": "os", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "6gk1411-5ac00 firmware", "vendor": "siemens", "type": "os", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29106"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.53336, "pinned": false}, {"id": "CVE-2023-28163", "publisher": "Mozilla Corporation", "title": "When downloading files through the Save As dialog on Windows with suggested filenames containing environment v", "summary": "When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>*This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00798, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:12.207", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 111.0"], "fixed": "111.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 111.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28163"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1817768"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-10/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-11/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1817768"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.56106, "pinned": false}, {"id": "CVE-2025-11715", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143", "summary": "Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.800", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", "< 144.0"], "fixed": "140.4.0, 144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", "< 144.0"], "fixed": "140.4.0, 144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11715"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24629, "pinned": false}, {"id": "CVE-2026-35043", "publisher": "GitHub, Inc.", "title": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference", "summary": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the cloud deployment path in src/bentoml/_internal/cloud/deployment.py was not included in the fix for CVE-2026-33744. Line 1648 interpolates system_packages directly into a shell command using an f-string without any quoting. The generated script is uploaded to BentoCloud as setup.sh and executed on the cloud build infrastr", "cvss": 7.8, "sev": "HIGH", "epss": 0.00261, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:41.823", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bentoml", "vendor": "bentoml", "type": "app", "affected": ["< 1.4.38"], "fixed": "1.4.38", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bentoml || rpm -q bentoml || bentoml --version"}, {"label": "2. UPGRADE to 1.4.38 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bentoml"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bentoml"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35043"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/bentoml/BentoML/security/advisories/GHSA-fgv4-6jr3-jgfw"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/bentoml/BentoML/security/advisories/GHSA-fgv4-6jr3-jgfw"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.16907, "pinned": false}, {"id": "CVE-2026-54185", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Cornerstone < 7.8.8 versions.", "summary": "Subscriber SQL Injection in Cornerstone < 7.8.8 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:49.817", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54185"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.28303, "pinned": false}, {"id": "CVE-2026-62192", "publisher": "VulnCheck", "title": "OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild acti", "summary": "OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester authorization and execute restricted operations.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00415, "kev": false, "added": "2026-07-13", "pub": "2026-07-13T22:16:50.457", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": [">= 2026.6.6 and < 2026.6.9"], "fixed": "2026.6.9", "safe": "before 2026.6.6", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.6.9", "cmd": "npm install openclaw@\">=2026.6.9\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.6.6", "cmd": "npm view openclaw versions\nnpm install openclaw@\"<2026.6.6\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34741, "pinned": false}, {"id": "CVE-2026-48060", "publisher": "GitHub, Inc.", "title": "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework", "summary": "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting due to the contents of the CSRF cookie being excluded from automatic escaping by the template engine when configured inline with documentation recommendations. This issue has been patched in ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00399, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:25.760", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48060"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.33026, "pinned": false}, {"id": "CVE-2026-14976", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00613, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.830", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.9"], "fixed": "26.0.0.9", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14976"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281633"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.48736, "pinned": false}, {"id": "CVE-2026-17868", "publisher": "Chrome", "title": "Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pe", "summary": "Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00332, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.713", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17868"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25211, "pinned": false}, {"id": "CVE-2026-56670", "publisher": "GitHub, Inc.", "title": "ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface", "summary": "ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served uploaded SVG files inline because image/svg+xml and related XML content types were absent from the dangerous-content-type handling, allowing stored cross-site scripting in the ComfyUI origin. This issue is fixed in version 0.28.0.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00397, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T06:16:27.560", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56670"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32705, "pinned": false}, {"id": "CVE-2026-56672", "publisher": "GitHub, Inc.", "title": "ComfyUI is a node-based diffusion model GUI, API, and backend", "summary": "ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and SVG files with extension-derived content types, allowing stored cross-site scripting in the ComfyUI origin and access to browser-stored API tokens, settings, workflows, and authenticated-equivalent API calls. The handler used web.FileResponse(path), so an uploaded .html/.svg was served as text/html/image/svg+xml. PO", "cvss": 8.2, "sev": "HIGH", "epss": 0.00397, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T06:16:30.170", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56672"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32705, "pinned": false}, {"id": "CVE-2026-10079", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS)", "summary": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to \"null\", causing ACS to treat the workload as having empty UID, name and labels and namespace \"default\". This bypasses deploy-time policy detection and enforcement v", "cvss": 8.5, "sev": "HIGH", "epss": 0.00194, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T10:16:43.190", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10079"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.08629, "pinned": false}, {"id": "CVE-2026-10685", "publisher": "Zephyr Project", "title": "The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt", "summary": "The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c invoked the application's params->subscribe() callback after it had already called params->notify(conn, params, NULL, 0).\n\nPer the public GATT API, a notify callback with NULL data is the documented signal that the subscription has terminated and the bt_gatt_subscribe_params struct may be freed or reused by the application; calling sub", "cvss": 7.6, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T15:16:27.433", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 2.4.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 2.4.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10685"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/c7292f20223637232b6f962141725611a38f6a52"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-29xh-jm2m-4qvx"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.22005, "pinned": false}, {"id": "CVE-2026-17348", "publisher": "PostgreSQL", "title": "In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator; the applica", "summary": "In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator; the application's before_request hook only handles desktop-mode auto-login and the Kerberos/Webserver-auth redirect, so any route shipped without the decorator is reachable without authentication (CWE-306). This is the same defect class previously fixed as CVE-2026-12046 (the sqleditor close/update_connection routes).\n\nA follow-up sweep, prompted by", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00422, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:59.287", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 1.0 and < 9.17"], "fixed": "9.17", "safe": "before 1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_1.0>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_1.0>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17348"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/24fdcf0f58591c87ada31366c01e1af180eceb05"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10194"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35455, "pinned": false}, {"id": "CVE-2026-18394", "publisher": "AMZN", "title": "Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attac", "summary": "Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attackers to obtain credentials configured via HTTP_REQUEST_TOKEN_CONFIG by influencing the LLM to route requests through actor-controlled proxy infrastructure.\n\n\n\nTo remediate this issue, users should upgrade to version 0.8.2.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00521, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:49.780", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18394"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43414, "pinned": false}, {"id": "CVE-2026-53599", "publisher": "GitHub, Inc.", "title": "REDAXO is a PHP-based content management system", "summary": "REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with media[upload] permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with multi-extension PHP handlers can execute as the web-server user. This issue is fixed in version 5.21.1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:51.847", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53599"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.42568, "pinned": false}, {"id": "CVE-2026-67331", "publisher": "VulnCheck", "title": "better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their", "summary": "better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users' providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00388, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.833", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67331"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31759, "pinned": false}, {"id": "CVE-2026-67287", "publisher": "Joomla! Project", "title": "Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthent", "summary": "Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00419, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:21.750", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67287"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35126, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2023-27310", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2)", "summary": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00632, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:28.777", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom crossbow", "vendor": "siemens", "type": "app", "affected": ["< 5.2"], "fixed": "5.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ruggedcom-crossbow || rpm -q ruggedcom-crossbow || ruggedcom-crossbow --version"}, {"label": "2. UPGRADE to 5.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ruggedcom-crossbow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ruggedcom-crossbow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27310"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.49671, "pinned": false}, {"id": "CVE-2023-25751", "publisher": "Mozilla Corporation", "title": "Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritt", "summary": "Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0069, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:11.947", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 111.0"], "fixed": "111.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 111.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.9"], "fixed": "102.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25751"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814899"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-10/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-11/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814899"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-09/"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.52241, "pinned": false}, {"id": "CVE-2023-32211", "publisher": "Mozilla Corporation", "title": "A type checking bug would have led to invalid code being compiled", "summary": "A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00738, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:13.197", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 113.0"], "fixed": "113.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 113.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.11"], "fixed": "102.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-32211"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-17/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-18/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-16/"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.5403, "pinned": false}, {"id": "CVE-2023-36749", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.4, "sev": "HIGH", "epss": 0.00292, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.103", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-36749"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-327"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20623, "pinned": false}, {"id": "CVE-2023-4052", "publisher": "Mozilla Corporation", "title": "The Firefox updater created a directory writable by non-privileged users", "summary": "The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. \n*This bug only affects Firefox on Windows. Other operating systems are unaffected.* Thi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00711, "kev": false, "added": "2023-08-01", "pub": "2023-08-01T15:15:10.207", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 116.0"], "fixed": "116.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 116.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 115.1"], "fixed": "115.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 115.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-4052"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-29/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-31/"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.53034, "pinned": false}, {"id": "CVE-2025-57835", "publisher": "MITRE", "title": "An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850", "summary": "An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:40.770", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "exynos 990 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "exynos 980 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "exynos 850 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "exynos 1080 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "exynos 1280 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "exynos 1330 firmware", "vendor": "samsung", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-57835"}, {"t": "Vendor Advisory", "u": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}, {"t": "Vendor Advisory", "u": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-57835/"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19253, "pinned": false}, {"id": "CVE-2026-48388", "publisher": "Adobe Systems Incorporated", "title": "Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have re", "summary": "Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00305, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:20.887", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "photoshop installer", "vendor": "adobe", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop-installer || rpm -q photoshop-installer || photoshop-installer --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48388"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.22093, "pinned": false}, {"id": "CVE-2026-54656", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI", "summary": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.52.1 until 0.60.2, datamodel-code-generator interpolates validators from --extra-template-data in src/datamodel_code_generator/model/pydantic_v2/base_model.py through _process_validators into @field_validator decorators without safe validation, allowing Python code", "cvss": 7.8, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.507", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "datamodel-code-generator", "vendor": "koxudaxi", "type": "app", "affected": [">= 0.52.1 and < 0.60.2"], "fixed": "0.60.2", "safe": "before 0.52.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datamodel-code-generator || rpm -q datamodel-code-generator || datamodel-code-generator --version"}, {"label": "2. UPGRADE to 0.60.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datamodel-code-generator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datamodel-code-generator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.52.1 (Debian / Ubuntu)", "cmd": "apt-cache madison datamodel-code-generator\nsudo apt install datamodel-code-generator=<VERSION_BEFORE_0.52.1>\nsudo apt-mark hold datamodel-code-generator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list datamodel-code-generator\nsudo dnf downgrade datamodel-code-generator-<VERSION_BEFORE_0.52.1>\nsudo dnf versionlock add datamodel-code-generator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54656"}, {"t": "Patch", "u": "https://github.com/koxudaxi/datamodel-code-generator/commit/a43d02906111a2fdcaf13ee5b62eb2da85376f19"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.15798, "pinned": false}, {"id": "CVE-2026-54691", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private, link-local, metadata, and other network-accessible resources. This issue is fixed in version 0.61.0.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.800", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54691"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30364, "pinned": false}, {"id": "CVE-2026-54082", "publisher": "GitHub, Inc.", "title": "veraPDF validation model is an implementation of the veraPDF validation model", "summary": "veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate(...) and GFPDAcroForm.getdynamicRender(), where default DocumentBuilderFactory parsing of rich-text annotation or form-field values and XFA configurations in untrusted PDFs can allow local file disclosure and outbound network requests. This ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00395, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:53.630", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54082"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32521, "pinned": false}, {"id": "CVE-2026-62999", "publisher": "GitHub, Inc.", "title": "Copier is a library and CLI app for rendering project templates", "summary": "Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments or encoded path separators in a template URL can match a configured trusted repository prefix before an HTTP server or Git transport decodes the path, allowing unsafe template features from a repository outside the trusted prefix to run after user interaction. This issue is fixed in version 9.17.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:53.523", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62999"}], "cwe": ["CWE-22", "CWE-180"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37337, "pinned": false}, {"id": "CVE-2026-54909", "publisher": "GitHub, Inc.", "title": "pion/stun is a Go implementation of STUN", "summary": "pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00644, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:25.433", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54909"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.50285, "pinned": false}, {"id": "CVE-2026-67243", "publisher": "JPCERT/CC", "title": "freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability", "summary": "freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00542, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T08:16:35.240", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67243"}], "cwe": ["CWE-434"], "vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.44804, "pinned": false}, {"id": "CVE-2026-66883", "publisher": "EEF", "title": "Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Auth", "summary": "Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session.\n\nThis vulnerability is associated with program files lib/oidcc/plug/authorize.ex and lib/oidcc/plug/authorization_callback.ex, and program routines Oidcc.Plug.Authorize.call/2 and Oidcc.Plug.AuthorizationCall", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00443, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T12:16:36.163", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66883"}], "cwe": ["CWE-178"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37524, "pinned": false}, {"id": "CVE-2026-67198", "publisher": "VulnCheck", "title": "Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that all", "summary": "Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with no viewport set or MakeTableReq with no data field to trigger unwrap() calls on None values at nine distinct sites, causing the process to abort with SIG", "cvss": 7.5, "sev": "HIGH", "epss": 0.00295, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:40.423", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67198"}], "cwe": ["CWE-616"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20995, "pinned": false}, {"id": "CVE-2026-25289", "publisher": "Qualcomm, Inc.", "title": "Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frame", "summary": "Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00193, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:24.890", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "sm7550p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7635p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7675 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7675p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm8425 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm8550p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25289"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.08533, "pinned": false}, {"id": "CVE-2023-23598", "publisher": "Mozilla Corporation", "title": "Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs co", "summary": "Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00641, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:10.580", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 109.0"], "fixed": "109.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 109.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.7"], "fixed": "102.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.7"], "fixed": "102.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-23598"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800425"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-01/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-02/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-03/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800425"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-01/"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.50089, "pinned": false}, {"id": "CVE-2023-25738", "publisher": "Mozilla Corporation", "title": "Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could", "summary": "Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00635, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:11.367", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 110.0"], "fixed": "110.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 110.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.8"], "fixed": "102.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.8"], "fixed": "102.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25738"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-05/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-07/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-05/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-06/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-07/"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.49807, "pinned": false}, {"id": "CVE-2023-2187", "publisher": "Trellix", "title": "On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast", "summary": "On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a \"password change event\". Furthermore, an attacker could use this vulnerability to spam the logged-in user with false events.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00593, "kev": false, "added": "2023-06-07", "pub": "2023-06-07T07:15:08.740", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "scada data gateway", "vendor": "trianglemicroworks", "type": "app", "affected": ["<= 5.01.03"], "fixed": "newer than 5.01.03", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scada-data-gateway || rpm -q scada-data-gateway || scada-data-gateway --version"}, {"label": "2. UPGRADE to newer than 5.01.03 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scada-data-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scada-data-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-2187"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47661, "pinned": false}, {"id": "CVE-2025-41713", "publisher": "CERT VDE", "title": "During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to u", "summary": "During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2025-09-15", "pub": "2025-09-15T08:15:35.343", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-41713"}], "cwe": ["CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30161, "pinned": false}, {"id": "CVE-2026-53982", "publisher": "VulnCheck", "title": "Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows a", "summary": "Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by triggering account deletion while a device identifier is linked to the active session. The platform incorrectly associates the deletion state with the device identifier, causing the affected device or browser environment to be redirected to an account-disabled page for approxi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00599, "kev": false, "added": "2026-06-12", "pub": "2026-06-12T17:16:26.727", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53982"}], "cwe": ["CWE-645"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.48025, "pinned": false}, {"id": "CVE-2026-62227", "publisher": "VulnCheck", "title": "OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot ro", "summary": "OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:10.027", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": [">= 2026.4.14 and < 2026.5.26"], "fixed": "2026.5.26", "safe": "before 2026.4.14", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.5.26", "cmd": "npm install openclaw@\">=2026.5.26\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.4.14", "cmd": "npm view openclaw versions\nnpm install openclaw@\"<2026.4.14\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227"}, {"t": "Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32195, "pinned": false}, {"id": "CVE-2026-48395", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in ", "summary": "Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00293, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.753", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48395"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-426"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20813, "pinned": false}, {"id": "CVE-2026-48396", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i", "summary": "Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.870", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48396"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19198, "pinned": false}, {"id": "CVE-2026-50736", "publisher": "EnterpriseDB Corporation", "title": "The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to ", "summary": "The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party acting as the publisher can send crafted queue messages that cause arbitrary SQL to be executed on the subscriber as superuser, escalating from a role permitt", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.700", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pglogical", "vendor": "enterprisedb", "type": "app", "affected": [">= 2.0.0 and < 2.4.8"], "fixed": "2.4.8", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pglogical || rpm -q pglogical || pglogical --version"}, {"label": "2. UPGRADE to 2.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pglogical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pglogical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pglogical\nsudo apt install pglogical=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold pglogical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pglogical\nsudo dnf downgrade pglogical-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add pglogical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50736"}, {"t": "Vendor Advisory", "u": "https://www.enterprisedb.com/docs/security/advisories/cve202650736/"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34662, "pinned": false}, {"id": "CVE-2026-54660", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRemoteSchemasCache resolves external $ref URLs, allowing an attacker-controlled OpenAPI spec to exfiltrate the developer or CI bearer token to a cross-origin endpoint. This issue is fixed in v", "cvss": 7.4, "sev": "HIGH", "epss": 0.00437, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.300", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54660"}], "cwe": ["CWE-200", "CWE-201", "CWE-522", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.36986, "pinned": false}, {"id": "CVE-2026-17786", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an atta", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.950", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17786"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17208, "pinned": false}, {"id": "CVE-2026-17877", "publisher": "Chrome", "title": "Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local at", "summary": "Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)", "cvss": 8.4, "sev": "HIGH", "epss": 0.00126, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.637", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17877"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.02117, "pinned": false}, {"id": "CVE-2026-14539", "publisher": "Google Inc.", "title": "An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox ve", "summary": "An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to cause a denial of service (DoS). The /mcp endpoint handler reads incoming payloads directly into system memory using an unrestricted buffer loop (io.ReadAll) without applying defensive constraints such as http.MaxBytesReader or pre-read Content-Length enforcement. By s", "cvss": 7.5, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T02:16:28.920", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mcp toolbox for databases", "vendor": "google", "type": "app", "affected": ["< 1.5.0"], "fixed": "1.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version"}, {"label": "2. UPGRADE to 1.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mcp-toolbox-for-databases"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mcp-toolbox-for-databases"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14539"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/googleapis/mcp-toolbox/pull/3216"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.13984, "pinned": false}, {"id": "CVE-2026-14541", "publisher": "Google Inc.", "title": "An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of", "summary": "An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for opaque tokens skips audience validation entirely. As a result, the toolbox will accept any valid Google OAuth access token\u2014even those minted for unrelated ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00253, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T03:16:24.170", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mcp toolbox for databases", "vendor": "google", "type": "app", "affected": ["1.4.0"], "fixed": null, "safe": "before 1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mcp-toolbox-for-databases\nsudo apt install mcp-toolbox-for-databases=<VERSION_BEFORE_1.4.0>\nsudo apt-mark hold mcp-toolbox-for-databases"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mcp-toolbox-for-databases\nsudo dnf downgrade mcp-toolbox-for-databases-<VERSION_BEFORE_1.4.0>\nsudo dnf versionlock add mcp-toolbox-for-databases"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14541"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/googleapis/mcp-toolbox/pull/3450"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1584, "pinned": false}, {"id": "CVE-2026-65804", "publisher": "Microsoft Corporation", "title": "Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unautho", "summary": "Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00413, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.100", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65804"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65804"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.34556, "pinned": false}, {"id": "CVE-2026-66311", "publisher": "Microsoft Corporation", "title": "Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering ", "summary": "Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00405, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.373", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66311"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66311"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33617, "pinned": false}, {"id": "CVE-2026-11368", "publisher": "Zephyr Project", "title": "The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its ow", "summary": "The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_chan = chan). When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system workqueue (att_tx_destroy -> att_tx_destroy_work_handler -> att_on_sent_cb -> bt_att_sent), where bt_att_sent dereferences the channel and it", "cvss": 7.1, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:24.843", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 4.4.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 4.4.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11368"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/dfdea9bad8d9b5b31c125e97fcffb549f2217caa"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-85vg-gwc4-77g7"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.21672, "pinned": false}, {"id": "CVE-2026-24084", "publisher": "Qualcomm, Inc.", "title": "Weak configuration when UE does not verify the consistency of its additional security capabilities with the re", "summary": "Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0025, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:24.370", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "sdx57m firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sdx61 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sdx71m firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm6650p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7325p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7435 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24084"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-1294"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15487, "pinned": false}, {"id": "CVE-2026-68813", "publisher": "Microsoft Corporation", "title": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.", "summary": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00541, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:05.563", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "365 apps", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy 365-apps || rpm -q 365-apps || 365-apps --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "microsoft 365", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy microsoft-365 || rpm -q microsoft-365 || microsoft-365 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2019", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2019 || rpm -q office-2019 || office-2019 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2021", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2021 || rpm -q office-2021 || office-2021 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2021", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2021 || rpm -q office-2021 || office-2021 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2024", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2024 || rpm -q office-2024 || office-2024 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68813"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68813"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.44739, "pinned": false}, {"id": "CVE-2025-62066", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:12.617", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62066"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32497, "pinned": false}, {"id": "CVE-2026-62220", "publisher": "VulnCheck", "title": "OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser ", "summary": "OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availability.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00518, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:08.990", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": [">= 2026.2.25 and < 2026.5.26"], "fixed": "2026.5.26", "safe": "before 2026.2.25", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.5.26", "cmd": "npm install openclaw@\">=2026.5.26\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.2.25", "cmd": "npm view openclaw versions\nnpm install openclaw@\"<2026.2.25\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220"}, {"t": "Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43213, "pinned": false}, {"id": "CVE-2026-48372", "publisher": "Adobe Systems Incorporated", "title": "Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code e", "summary": "Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00337, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T18:17:20.747", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "format plugins", "vendor": "adobe", "type": "app", "affected": ["< 2026.07"], "fixed": "2026.07", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy format-plugins || rpm -q format-plugins || format-plugins --version"}, {"label": "2. UPGRADE to 2026.07 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade format-plugins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade format-plugins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48372"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25949, "pinned": false}, {"id": "CVE-2026-50737", "publisher": "EnterpriseDB Corporation", "title": "When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affect", "summary": "When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber. Because the apply worker runs at a privilege level equivalent to a PostgreSQL superuser in default installations, any function invoked by such a default expression also runs at that privilege. A party acting as the publisher can use this path to cause functions to be executed on the subscr", "cvss": 7.5, "sev": "HIGH", "epss": 0.00397, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.827", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pglogical", "vendor": "enterprisedb", "type": "app", "affected": [">= 2.0.0 and < 2.4.8"], "fixed": "2.4.8", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pglogical || rpm -q pglogical || pglogical --version"}, {"label": "2. UPGRADE to 2.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pglogical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pglogical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pglogical\nsudo apt install pglogical=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold pglogical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pglogical\nsudo dnf downgrade pglogical-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add pglogical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50737"}, {"t": "Vendor Advisory", "u": "https://www.enterprisedb.com/docs/security/advisories/cve202650737/"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32767, "pinned": false}, {"id": "CVE-2026-66063", "publisher": "GitHub, Inc.", "title": "goshs is a feature-rich single-binary file server for red teamers and developers", "summary": "goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00343, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:10.353", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66063"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26657, "pinned": false}, {"id": "CVE-2026-63238", "publisher": "CSA", "title": "An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated\nattacker to take over any acc", "summary": "An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated\nattacker to take over any account, including administrator accounts, by\nsupplying a valid user UUID without providing primary credentials via the 2FA\nvalidation endpoint.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00341, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.237", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63238"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.2635, "pinned": false}, {"id": "CVE-2026-18192", "publisher": "TWCERT/CC", "title": "VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote atta", "summary": "VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0057, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.383", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18192"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.46477, "pinned": false}, {"id": "CVE-2026-17869", "publisher": "Chrome", "title": "Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an ou", "summary": "Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.1, "sev": "HIGH", "epss": 0.00327, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.817", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17869"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24545, "pinned": false}, {"id": "CVE-2026-18157", "publisher": "Red Hat, Inc.", "title": "A flaw was found in yggdrasil-worker-package-manager", "summary": "A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-get. Successful exploitation could lead to remote code execution (RCE) with root privileges, enabling the attacker to fully compromise the system's integri", "cvss": 7.8, "sev": "HIGH", "epss": 0.00356, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T03:16:25.223", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18157"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.28101, "pinned": false}, {"id": "CVE-2026-67607", "publisher": "VulnCheck", "title": "LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the ", "summary": "LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c that allows remote unauthenticated attackers to destabilize or crash the daemon by triggering unsynchronized access to shared per-connection state without holding the required mutex lock. Attackers can send a data-transfer command such as LIST followed immediately by ABOR to exploit the missin", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00395, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:11.913", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67607"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32518, "pinned": false}, {"id": "CVE-2026-67326", "publisher": "VulnCheck", "title": "GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allo", "summary": "GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged [core] section with hooksPath pointing to attacker-controlled directories, achieving remote code execution when git hooks are triggered.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00254, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.063", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.50"], "fixed": "3.1.50", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.50", "cmd": "pip install --upgrade \"gitpython>=3.1.50\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67326"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.16018, "pinned": false}, {"id": "CVE-2026-66325", "publisher": "Microsoft Corporation", "title": "Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfo", "summary": "Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00392, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.703", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66325"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66325"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.32117, "pinned": false}, {"id": "CVE-2026-18720", "publisher": "VulDB", "title": "A flaw has been found in kalcaddle kodbox 1.67 Build 02", "summary": "A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00483, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T03:16:25.703", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18720"}], "cwe": ["CWE-266", "CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40706, "pinned": false}, {"id": "CVE-2026-67199", "publisher": "VulnCheck", "title": "Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server ", "summary": "Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large iteration count in an expression column evaluated once per table row, causing the Tornado IOLoop to block without any iteration cap, deadline, or cancellation ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00519, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:40.570", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67199"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4332, "pinned": false}, {"id": "CVE-2023-28666", "publisher": "Tenable Network Security, Inc.", "title": "The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vuln", "summary": "The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00441, "kev": false, "added": "2023-03-22", "pub": "2023-03-22T21:15:19.133", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "inpost gallery", "vendor": "pluginus", "type": "app", "affected": ["<= 2.1.4.1"], "fixed": "newer than 2.1.4.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy inpost-gallery || rpm -q inpost-gallery || inpost-gallery --version"}, {"label": "2. UPGRADE to newer than 2.1.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade inpost-gallery"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade inpost-gallery"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28666"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.373, "pinned": false}, {"id": "CVE-2025-10532", "publisher": "Mozilla Corporation", "title": "Incorrect boundary conditions in the JavaScript: GC component", "summary": "Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00312, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:47.067", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", ">= 141.0 and < 143.0"], "fixed": "140.3.0, 143.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10532"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22906, "pinned": false}, {"id": "CVE-2025-11713", "publisher": "Mozilla Corporation", "title": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could have been used to trick a user into executing unexpe", "summary": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00287, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", "< 144.0"], "fixed": "140.4.0, 144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11713"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-116"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20139, "pinned": false}, {"id": "CVE-2026-33456", "publisher": "Checkmk GmbH", "title": "Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated u", "summary": "Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00337, "kev": false, "added": "2026-04-10", "pub": "2026-04-10T09:16:24.493", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.4.0", "2.4.0 b1", "2.4.0 b2", "2.4.0 b3", "2.4.0 b4", "2.4.0 b5", "2.4.0 b6", "2.4.0 p1"], "fixed": null, "safe": "before 2.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.4.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.4.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33456"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17989"}], "cwe": ["CWE-140"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.25852, "pinned": false}, {"id": "CVE-2024-47091", "publisher": "Checkmk GmbH", "title": "Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) ", "summary": "Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' (or with write access to a binary referenced by such a service) to execute arbitrary code in the context of the Checkmk agent service, which typically runs as SYSTEM.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00119, "kev": false, "added": "2026-05-13", "pub": "2026-05-13T10:16:14.460", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.2.0", "2.2.0 b1", "2.2.0 b2", "2.2.0 b3", "2.2.0 b4", "2.2.0 b5", "2.2.0 b6", "2.2.0 b7"], "fixed": null, "safe": "before 2.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.2.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.2.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-47091"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/19198"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.01685, "pinned": false}, {"id": "CVE-2026-62186", "publisher": "VulnCheck", "title": "OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP mode", "summary": "OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to bypass admin authorization policies and execute restricted operations.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-07-13", "pub": "2026-07-13T22:16:49.607", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.6.8"], "fixed": "2026.6.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.6.8", "cmd": "npm install openclaw@\">=2026.6.8\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24718, "pinned": false}, {"id": "CVE-2026-47726", "publisher": "GitHub, Inc.", "title": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network", "summary": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 \u2014 handleGetAuditLog does no admin check. The route is bearer-auth gated only; any operator API key returns the full audit log via store.ListAuditEntries (up to limit=1000). This includes cross-tenant actor names, host/CA/operator IDs, action timestamps, and masked-IP entries from rate-limit refusals \u2014 enough s", "cvss": 7.1, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:34.393", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47726"}], "cwe": ["CWE-285"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34586, "pinned": false}, {"id": "CVE-2026-48374", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner", "summary": "Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00306, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:34.987", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48374"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22238, "pinned": false}, {"id": "CVE-2026-48390", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation", "summary": "Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00249, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.123", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48390"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15351, "pinned": false}, {"id": "CVE-2026-48391", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in ", "summary": "Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00269, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.243", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48391"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-426"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18035, "pinned": false}, {"id": "CVE-2026-66064", "publisher": "GitHub, Inc.", "title": "goshs is a feature-rich single-binary file server for red teamers and developers", "summary": "goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00445, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T23:17:10.490", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66064"}], "cwe": ["CWE-41", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37678, "pinned": false}, {"id": "CVE-2026-56389", "publisher": "CERT.PL", "title": "GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handli", "summary": "GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML\u2011to\u2011HTML transformation step via %define tool.xsltproc, which is accepted without restriction and passed directly to execvp().\n \nWhen running bison --html on a attacker-provided grammar, this behavior allows execution of an arbitrary ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00224, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:49.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bison", "vendor": "gnu", "type": "app", "affected": ["3.8.2"], "fixed": null, "safe": "before 3.8.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bison || rpm -q bison || bison --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.8.2 (Debian / Ubuntu)", "cmd": "apt-cache madison bison\nsudo apt install bison=<VERSION_BEFORE_3.8.2>\nsudo apt-mark hold bison"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bison\nsudo dnf downgrade bison-<VERSION_BEFORE_3.8.2>\nsudo dnf versionlock add bison"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56389"}, {"t": "Patch", "u": "https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12301, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU Bison software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56389/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-65944", "publisher": "Joomla! Project", "title": "Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0", "summary": "Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0", "cvss": 8.8, "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:11.190", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ro csvi", "vendor": "rolandd", "type": "app", "affected": ["< 9.11.0"], "fixed": "9.11.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ro-csvi || rpm -q ro-csvi || ro-csvi --version"}, {"label": "2. UPGRADE to 9.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ro-csvi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ro-csvi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65944"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09434, "pinned": false}, {"id": "CVE-2026-66322", "publisher": "Microsoft Corporation", "title": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing", "summary": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.577", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66322"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66322"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.12624, "pinned": false}, {"id": "CVE-2026-58042", "publisher": "HackerOne", "title": "A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than", "summary": "A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.\r\n\r\nRepeated triggering of this condition can lead to denial of service.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00369, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T01:16:20.123", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58042"}], "cwe": ["CWE-400"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29675, "pinned": false}, {"id": "CVE-2026-70310", "publisher": "Microsoft Corporation", "title": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.", "summary": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00435, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:08.283", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "365 apps", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy 365-apps || rpm -q 365-apps || 365-apps --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "microsoft 365", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy microsoft-365 || rpm -q microsoft-365 || microsoft-365 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2019", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2019 || rpm -q office-2019 || office-2019 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2021", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2021 || rpm -q office-2021 || office-2021 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2021", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2021 || rpm -q office-2021 || office-2021 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "office 2024", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy office-2024 || rpm -q office-2024 || office-2024 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70310"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70310"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.36754, "pinned": false}, {"id": "CVE-2026-74632", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: fix huge_zero_pfn race\n\nP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: fix huge_zero_pfn race\n\nPatch series \"mm/huge_memory: fix huge_zero_pfn race\", v2.\n\nThere is a subtle race in the reference-counted huge_zero_folio\nimplementation.\n\nThe fast path atomic logic fails to account for the fact that the shrinker\n(which drops the final huge_zero_refcount pin) can overwrite huge_zero_pfn\nwith the ~0UL sentinel value in shrink_huge_zero_f", "cvss": 7.8, "sev": "HIGH", "epss": 0.00129, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T16:16:36.217", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74632"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.02329, "pinned": false}, {"id": "CVE-2022-29562", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 3.7, "sev": "LOW", "epss": 0.00748, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:10.043", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.16.0"], "fixed": "2.16.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-29562"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54389, "pinned": false}, {"id": "CVE-2023-37246", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21109)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00265, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.550", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix", "vendor": "siemens", "type": "app", "affected": [">= 2201 and < 2201.0008", ">= 2302 and < 2302.0002"], "fixed": "2201.0008, 2302.0002", "safe": "before 2201", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix || rpm -q tecnomatix || tecnomatix --version"}, {"label": "2. UPGRADE to 2201.0008 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2201 (Debian / Ubuntu)", "cmd": "apt-cache madison tecnomatix\nsudo apt install tecnomatix=<VERSION_BEFORE_2201>\nsudo apt-mark hold tecnomatix"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tecnomatix\nsudo dnf downgrade tecnomatix-<VERSION_BEFORE_2201>\nsudo dnf versionlock add tecnomatix"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-37246"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17425, "pinned": false}, {"id": "CVE-2026-8723", "publisher": "harborist", "title": "### Summary\n\n\n\n`qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly", "summary": "### Summary\n\n\n\n`qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's null-related options (`skipNulls`, `strictNullHandling`).\n\n\n\n### Details\n\n\n\nIn the comma + `encodeValuesOnly` branch, `lib/stringify.js:145` mapped the array through the raw encoder before joining:\n\n\n\n```js\n\n\n\nobj = utils.maybeMap", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-05-17", "pub": "2026-05-17T00:16:21.233", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8723"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35053, "pinned": false}, {"id": "CVE-2026-62206", "publisher": "VulnCheck", "title": "OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions", "summary": "OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach the affected path.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00356, "kev": false, "added": "2026-07-17", "pub": "2026-07-17T02:18:06.887", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.6.9"], "fixed": "2026.6.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.6.9", "cmd": "npm install openclaw@\">=2026.6.9\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2811, "pinned": false}, {"id": "CVE-2026-54605", "publisher": "GitHub, Inc.", "title": "OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers", "summary": "OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token_request parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recursively, which can mutate the consumer's configuration and expose signed OAuth request metadata, including the Authorization header, to a cross-origin host. This issue is fixed in version 1.1.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00188, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:52.367", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54605"}], "cwe": ["CWE-200", "CWE-346", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08036, "pinned": false}, {"id": "CVE-2026-47725", "publisher": "GitHub, Inc.", "title": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network", "summary": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.3, every /ui/* POST / PUT / PATCH / DELETE route processes the request as soon as the session cookie validates. SameSite=Lax on the session cookie prevents most cross-site form submits but does not protect: top-level form-submit navigations from third-party pages (some browsers still send Lax cookies on top-level POSTs); same-registrable", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00219, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:34.237", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47725"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.11752, "pinned": false}, {"id": "CVE-2026-16192", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulner", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:23.460", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.9"], "fixed": "26.0.0.9", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16192"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281648"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30143, "pinned": false}, {"id": "CVE-2026-57511", "publisher": "VulnCheck", "title": "SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers", "summary": "SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject arbitrary SMTP headers by including CRLF sequences in the event payload title field delivered via webhook. Attackers can manipulate the unsanitized title field passed to the SMTP DATA command to add Bcc recipients for content exfiltration, forge the From address to bypass SPF and DKIM checks, or inject Content-Type and MIME bou", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00404, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:27.197", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57511"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33496, "pinned": false}, {"id": "CVE-2026-14893", "publisher": "IBM Corporation", "title": "IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @ins", "summary": "IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:26.193", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14893"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.25606, "pinned": false}, {"id": "CVE-2026-65325", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate co", "summary": "Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname.\n\nThis issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T09:16:30.543", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "traffic server", "vendor": "apache", "type": "app", "affected": [">= 9.0.0 and < 9.2.15", ">= 10.0.0 and < 10.1.4"], "fixed": "9.2.15, 10.1.4", "safe": "before 9.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-server || rpm -q traffic-server || traffic-server --version"}, {"label": "2. UPGRADE to 9.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-server\nsudo apt install traffic-server=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold traffic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-server\nsudo dnf downgrade traffic-server-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add traffic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65325"}, {"t": "Vendor Advisory, Mitigation", "u": "https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.19623, "pinned": false}, {"id": "CVE-2026-12895", "publisher": "Spanish National Cybersecurity Institute, S.A. (INCIBE)", "title": "SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2", "summary": "SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using `str.format()` without employing parameterized queries, allowing the name (docname) of a Supplier record containing SQL metacharacters to be interpreted as part of the query. Exploitation of this vulnerability could allow an authenticated user with low privileges to execute arbitrary SQ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:47.227", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12895"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.29232, "pinned": false}, {"id": "CVE-2026-14354", "publisher": "Schneider Electric SE", "title": "CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and u", "summary": "CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00157, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:17:42.723", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14354"}], "cwe": ["CWE-522"], "vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04465, "pinned": false}, {"id": "CVE-2026-16751", "publisher": "CERT/CC", "title": "Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allo", "summary": "Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00423, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:28.683", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16751"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3554, "pinned": false}, {"id": "CVE-2026-67213", "publisher": "VulnCheck", "title": "nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions", "summary": "nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that passes an unvalidated, attacker-controlled size of 0 to these functions is exposed to a denial-of-service condition.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:34.890", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "nanoid", "vendor": "nanoid project", "type": "app", "affected": [">= 3.0.0 and < 3.3.17", ">= 5.0.0 and < 5.1.6"], "fixed": "3.3.17, 5.1.6", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls nanoid"}, {"label": "2. UPGRADE to 3.3.17", "cmd": "npm install nanoid@\">=3.3.17\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0", "cmd": "npm view nanoid versions\nnpm install nanoid@\"<3.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213"}, {"t": "Patch", "u": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"}, {"t": "Patch, Release Notes", "u": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25028, "pinned": false}, {"id": "CVE-2026-67214", "publisher": "VulnCheck", "title": "nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions", "summary": "nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning indefinitely and hanging the calling thread. An application that passes an unvalidated, attacker-controlled negative size to these functi", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:35.043", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "nanoid", "vendor": "nanoid project", "type": "app", "affected": ["< 3.3.16", ">= 4.0.0 and < 5.1.16"], "fixed": "3.3.16, 5.1.16", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls nanoid"}, {"label": "2. UPGRADE to 3.3.16", "cmd": "npm install nanoid@\">=3.3.16\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0", "cmd": "npm view nanoid versions\nnpm install nanoid@\"<4.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214"}, {"t": "Patch", "u": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"}, {"t": "Patch, Release Notes", "u": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24883, "pinned": false}, {"id": "CVE-2026-67193", "publisher": "VulnCheck", "title": "Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated at", "summary": "Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the server's current GetTickCount() value by sending a USER command with a username ending in the :adm suffix. Attackers can trigger the admin protocol path within the standard FTP listener pre-authentication to leak timing information from the FTP 331 response without requiring a separate port or configuration change.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00409, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:57.833", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67193"}], "cwe": ["CWE-203"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34055, "pinned": false}, {"id": "CVE-2026-17887", "publisher": "Chrome", "title": "Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a u", "summary": "Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.647", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17887"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21978, "pinned": false}, {"id": "CVE-2026-63550", "publisher": "ICS-CERT", "title": "The MMS BER decoder contains a boundary-handling flaw in the processing \nof certain fields within confirmed-re", "summary": "The MMS BER decoder contains a boundary-handling flaw in the processing \nof certain fields within confirmed-request messages. When a crafted \nBER-encoded element is received over an established MMS session (TCP \nport 102), the decoder may advance its internal read position \nincorrectly, leading to a heap out-of-bounds read. This condition causes\n the MMS handling process to terminate unexpectedly, resulting in a \ndenial-of-service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00436, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.443", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63550"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.36817, "pinned": false}, {"id": "CVE-2026-18536", "publisher": "CPANSec", "title": "Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP.\n\nThe Data::Entropy::", "summary": "Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP.\n\nThe Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP.\n\nThe Data::Entropy::RawSource::RandomOrg integrity check trivially matches any non-empty byte string.\n\nAny on-path attacker, such as open WiFi, a compromised ISP, captive portal, or a hostile egress proxy substitutes the respo", "cvss": 7.5, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T11:16:38.483", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "data\\", "vendor": "rrwo", "type": "app", "affected": ["< 0.010"], "fixed": "0.010", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy data || rpm -q data || data --version"}, {"label": "2. UPGRADE to 0.010 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade data"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade data"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18536"}, {"t": "Vendor Advisory", "u": "https://github.com/robrwo/Data-Entropy/security/advisories/GHSA-845w-rcqw-jwvv"}], "cwe": ["CWE-319", "CWE-353"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.04261, "pinned": false}, {"id": "CVE-2026-66313", "publisher": "Microsoft Corporation", "title": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tamperin", "summary": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:38.647", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66313"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66313"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.1348, "pinned": false}, {"id": "CVE-2026-14194", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software", "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00443, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:31.927", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14194"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37498, "pinned": false}, {"id": "CVE-2026-63248", "publisher": "Eclipse Foundation", "title": "In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorizat", "summary": "In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certifi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:18:55.790", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "milo", "vendor": "eclipse", "type": "app", "affected": [">= 0.6.0 and < 1.1.5"], "fixed": "1.1.5", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy milo || rpm -q milo || milo --version"}, {"label": "2. UPGRADE to 1.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade milo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade milo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison milo\nsudo apt install milo=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold milo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list milo\nsudo dnf downgrade milo-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add milo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63248"}, {"t": "Patch", "u": "https://github.com/eclipse-milo/milo/commit/a5dae1be0657d2b4fcb66e63f377c1dc36069e2a"}, {"t": "Issue Tracking, Patch", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/181"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.16789, "pinned": false, "mentions": [{"src": "CISA ICS Advisories", "group": "gov", "title": "Eclipse Foundation Eclipse Milo", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "date": "2026-10-15"}], "buzz": 1}, {"id": "CVE-2026-70933", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T21:17:51.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70933"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30435, "pinned": false}, {"id": "CVE-2026-71046", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM.  While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change).  Successful attacks of this ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T21:18:04.483", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "agile product lifecycle management", "vendor": "oracle", "type": "app", "affected": ["9.3.6"], "fixed": null, "safe": "before 9.3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-product-lifecycle-management || rpm -q agile-product-lifecycle-management || agile-product-lifecycle-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-product-lifecycle-management\nsudo apt install agile-product-lifecycle-management=<VERSION_BEFORE_9.3.6>\nsudo apt-mark hold agile-product-lifecycle-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-product-lifecycle-management\nsudo dnf downgrade agile-product-lifecycle-management-<VERSION_BEFORE_9.3.6>\nsudo dnf versionlock add agile-product-lifecycle-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71046"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04908, "pinned": false}, {"id": "CVE-2026-76259", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with ", "summary": "In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all relevant data and system integrity available to the user account running Splunk Enterprise. The vulnerability is possible because the Windows management-", "cvss": 8.8, "sev": "HIGH", "epss": 0.00167, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:13.927", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "splunk", "vendor": "splunk", "type": "app", "affected": [">= 9.3.0 and < 9.3.14", ">= 9.4.0 and < 9.4.13", ">= 10.0.0 and < 10.0.9", ">= 10.2.0 and < 10.2.6", ">= 10.4.0 and < 10.4.2"], "fixed": "9.3.14, 9.4.13, 10.0.9, 10.2.6, 10.4.2", "safe": "before 9.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy splunk || rpm -q splunk || splunk --version"}, {"label": "2. UPGRADE to 9.3.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade splunk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade splunk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison splunk\nsudo apt install splunk=<VERSION_BEFORE_9.3.0>\nsudo apt-mark hold splunk"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list splunk\nsudo dnf downgrade splunk-<VERSION_BEFORE_9.3.0>\nsudo dnf versionlock add splunk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76259"}, {"t": "Vendor Advisory", "u": "https://advisory.splunk.com/advisories/SVD-2026-0801"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.05643, "pinned": false}, {"id": "CVE-2026-76390", "publisher": "Cisco Systems, Inc.", "title": "In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could ", "summary": "In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer (REST) API endpoints and authentication model. The vulnerability is possible because the generated OpenAPI specification is packaged in a static file path that", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00394, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:25.357", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "talos intelligence for enterprise security cloud", "vendor": "cisco", "type": "app", "affected": [">= 1.0.0 and < 1.0.3"], "fixed": "1.0.3", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy talos-intelligence-for-enterprise-security-cloud || rpm -q talos-intelligence-for-enterprise-security-cloud || talos-intelligence-for-enterprise-security-cloud --version"}, {"label": "2. UPGRADE to 1.0.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade talos-intelligence-for-enterprise-security-cloud"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade talos-intelligence-for-enterprise-security-cloud"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison talos-intelligence-for-enterprise-security-cloud\nsudo apt install talos-intelligence-for-enterprise-security-cloud=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold talos-intelligence-for-enterprise-security-cloud"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list talos-intelligence-for-enterprise-security-cloud\nsudo dnf downgrade talos-intelligence-for-enterprise-security-cloud-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add talos-intelligence-for-enterprise-security-cloud"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76390"}, {"t": "Vendor Advisory", "u": "https://advisory.splunk.com/advisories/SVD-2026-0808"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32376, "pinned": false}, {"id": "CVE-2023-24581", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00237, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.387", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24581"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1394, "pinned": false}, {"id": "CVE-2023-37375", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21060)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.813", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix", "vendor": "siemens", "type": "app", "affected": [">= 2201 and < 2201.0008", ">= 2302 and < 2302.0002"], "fixed": "2201.0008, 2302.0002", "safe": "before 2201", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix || rpm -q tecnomatix || tecnomatix --version"}, {"label": "2. UPGRADE to 2201.0008 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2201 (Debian / Ubuntu)", "cmd": "apt-cache madison tecnomatix\nsudo apt install tecnomatix=<VERSION_BEFORE_2201>\nsudo apt-mark hold tecnomatix"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tecnomatix\nsudo dnf downgrade tecnomatix-<VERSION_BEFORE_2201>\nsudo dnf versionlock add tecnomatix"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-37375"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}], "cwe": ["CWE-121", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12979, "pinned": false}, {"id": "CVE-2025-40946", "publisher": "Siemens AG", "title": "A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All vers", "summary": "A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplane", "cvss": 8.3, "sev": "HIGH", "epss": 0.00186, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:42.860", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40946"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07825, "pinned": false}, {"id": "CVE-2026-48245", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the ", "summary": "Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:21.653", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48245"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31296, "pinned": false}, {"id": "CVE-2026-54798", "publisher": "Siemens AG", "title": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE", "summary": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00411, "kev": false, "added": "2026-07-09", "pub": "2026-07-09T15:16:36.443", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54798"}], "cwe": ["CWE-489"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34269, "pinned": false}, {"id": "CVE-2026-48392", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th", "summary": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.377", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48392"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16371, "pinned": false}, {"id": "CVE-2026-48393", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th", "summary": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.503", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48393"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1637, "pinned": false}, {"id": "CVE-2026-48394", "publisher": "Adobe Systems Incorporated", "title": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th", "summary": "Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:35.627", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bridge", "vendor": "adobe", "type": "app", "affected": ["< 15.1.7", ">= 16.0 and < 16.0.6"], "fixed": "15.1.7, 16.0.6", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bridge || rpm -q bridge || bridge --version"}, {"label": "2. UPGRADE to 15.1.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bridge"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bridge"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bridge\nsudo apt install bridge=<VERSION_BEFORE_16.0>\nsudo apt-mark hold bridge"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bridge\nsudo dnf downgrade bridge-<VERSION_BEFORE_16.0>\nsudo dnf versionlock add bridge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48394"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16369, "pinned": false}, {"id": "CVE-2026-50735", "publisher": "EnterpriseDB Corporation", "title": "pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication p", "summary": "pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogical replication protocol, can return crafted messages that cause the subscriber's apply worker to read beyond the bounds of an allocated buffer, disclosin", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.540", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pglogical", "vendor": "enterprisedb", "type": "app", "affected": [">= 2.0.0 and < 2.4.8"], "fixed": "2.4.8", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pglogical || rpm -q pglogical || pglogical --version"}, {"label": "2. UPGRADE to 2.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pglogical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pglogical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pglogical\nsudo apt install pglogical=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold pglogical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pglogical\nsudo dnf downgrade pglogical-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add pglogical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50735"}, {"t": "Vendor Advisory", "u": "https://www.enterprisedb.com/docs/security/advisories/cve202650735/"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30391, "pinned": false}, {"id": "CVE-2026-16581", "publisher": "ICS-CERT", "title": "In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source C", "summary": "In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00381, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:28.070", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16581"}], "cwe": ["CWE-540"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30929, "pinned": false}, {"id": "CVE-2026-49447", "publisher": "GitHub, Inc.", "title": "Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, a", "summary": "Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. In 0.22.18, `GET /cosmos/api/constellation/public-devices` discloses Constellation device metadata to a requester that supplies any non-empty Authorization header. The handler strips the string Bearer  from the header but never validates the resulting token and never uses it in the database query. This vulnerab", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:28.427", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49447"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31298, "pinned": false}, {"id": "CVE-2026-12927", "publisher": "Schneider Electric SE", "title": "CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary c", "summary": "CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00184, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:17:36.300", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12927"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07601, "pinned": false}, {"id": "CVE-2026-17816", "publisher": "Chrome", "title": "Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote ", "summary": "Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00292, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.153", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17816"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20702, "pinned": false}, {"id": "CVE-2026-34641", "publisher": "Adobe Systems Incorporated", "title": "Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution", "summary": "Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:23.563", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "premiere", "vendor": "adobe", "type": "app", "affected": ["< 26.3"], "fixed": "26.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy premiere || rpm -q premiere || premiere --version"}, {"label": "2. UPGRADE to 26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade premiere"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade premiere"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "premiere pro", "vendor": "adobe", "type": "app", "affected": ["< 25.6.6"], "fixed": "25.6.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy premiere-pro || rpm -q premiere-pro || premiere-pro --version"}, {"label": "2. UPGRADE to 25.6.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade premiere-pro"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade premiere-pro"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34641"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16364, "pinned": false}, {"id": "CVE-2026-67329", "publisher": "VulnCheck", "title": "@better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an autho", "summary": "@better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middleware validates the organization ID taken from the request query string against the authorizeReference callback, but the handler reads the organization ID only from the request body and falls back to the caller's active organization from their session. When these differ, an au", "cvss": 7.1, "sev": "HIGH", "epss": 0.00313, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.523", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67329"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.23018, "pinned": false}, {"id": "CVE-2026-24079", "publisher": "Qualcomm, Inc.", "title": "Cryptographic Issue while processing registration requests with malformed or missing authentication parameters", "summary": "Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00208, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:23.453", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ar8035 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6620 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6640 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6200 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6700 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "snapdragon 778g\\+ 5g mobile platform firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24079"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10407, "pinned": false}, {"id": "CVE-2022-47936", "publisher": "Siemens AG", "title": "A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.", "summary": "A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:14.473", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "jt open toolkit", "vendor": "siemens", "type": "app", "affected": ["< 11.2.3.0"], "fixed": "11.2.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jt-open-toolkit || rpm -q jt-open-toolkit || jt-open-toolkit --version"}, {"label": "2. UPGRADE to 11.2.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jt-open-toolkit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jt-open-toolkit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "jt utilities", "vendor": "siemens", "type": "app", "affected": ["< 11.2.3.0"], "fixed": "11.2.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jt-utilities || rpm -q jt-utilities || jt-utilities --version"}, {"label": "2. UPGRADE to 11.2.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jt-utilities"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jt-utilities"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "parasolid", "vendor": "siemens", "type": "app", "affected": [">= 34.0 and < 34.0.252", ">= 34.1 and < 34.1.242", ">= 35.0 and < 35.0.170", ">= 35.1 and < 35.1.150"], "fixed": "34.0.252, 34.1.242, 35.0.170, 35.1.150", "safe": "before 34.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy parasolid || rpm -q parasolid || parasolid --version"}, {"label": "2. UPGRADE to 34.0.252 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade parasolid"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade parasolid"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 34.0 (Debian / Ubuntu)", "cmd": "apt-cache madison parasolid\nsudo apt install parasolid=<VERSION_BEFORE_34.0>\nsudo apt-mark hold parasolid"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list parasolid\nsudo dnf downgrade parasolid-<VERSION_BEFORE_34.0>\nsudo dnf versionlock add parasolid"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-47936"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12652, "pinned": false}, {"id": "CVE-2023-24549", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:14.880", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24549"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11554, "pinned": false}, {"id": "CVE-2023-24550", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:14.967", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24550"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11552, "pinned": false}, {"id": "CVE-2023-24552", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:15.137", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2022", "vendor": "siemens", "type": "app", "affected": ["all versions", "maintenance_pack_1", "maintenance_pack_2", "maintenance_pack_3", "maintenance_pack_4", "maintenance_pack_5", "maintenance_pack_7", "maintenance_pack_8"], "fixed": null, "safe": "before maintenance_pack_1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2022 || rpm -q solid-edge-se2022 || solid-edge-se2022 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before maintenance_pack_1 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2022\nsudo apt install solid-edge-se2022=<VERSION_BEFORE_maintenance_pack_1>\nsudo apt-mark hold solid-edge-se2022"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2022\nsudo dnf downgrade solid-edge-se2022-<VERSION_BEFORE_maintenance_pack_1>\nsudo dnf versionlock add solid-edge-se2022"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24552"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11553, "pinned": false}, {"id": "CVE-2023-24556", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:15.483", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24556"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11555, "pinned": false}, {"id": "CVE-2023-24562", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:15.977", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24562"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-824"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11549, "pinned": false}, {"id": "CVE-2023-24564", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v", "summary": "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.137", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["< 2210.0002.004"], "fixed": "2210.0002.004", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. UPGRADE to 2210.0002.004 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2023"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2023"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24564"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12551, "pinned": false}, {"id": "CVE-2023-24979", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.547", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24979"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12549, "pinned": false}, {"id": "CVE-2023-24980", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.623", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24980"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12548, "pinned": false}, {"id": "CVE-2023-24981", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.700", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24981"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12548, "pinned": false}, {"id": "CVE-2023-24982", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.783", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24982"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12547, "pinned": false}, {"id": "CVE-2023-24984", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:16.943", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24984"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1255, "pinned": false}, {"id": "CVE-2023-24987", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:17.177", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24987"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11551, "pinned": false}, {"id": "CVE-2023-24989", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:17.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24989"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11555, "pinned": false}, {"id": "CVE-2023-24993", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:17.633", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24993"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12549, "pinned": false}, {"id": "CVE-2023-24995", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19817)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:17.780", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-24995"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12549, "pinned": false}, {"id": "CVE-2023-25140", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versio", "summary": "A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in th", "cvss": 7.8, "sev": "HIGH", "epss": 0.00214, "kev": false, "added": "2023-02-14", "pub": "2023-02-14T11:15:17.927", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "parasolid", "vendor": "siemens", "type": "app", "affected": [">= 34.0 and < 34.0.254", ">= 34.1 and < 34.1.242", ">= 35.0 and < 35.0.170", ">= 35.1 and < 35.1.150"], "fixed": "34.0.254, 34.1.242, 35.0.170, 35.1.150", "safe": "before 34.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy parasolid || rpm -q parasolid || parasolid --version"}, {"label": "2. UPGRADE to 34.0.254 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade parasolid"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade parasolid"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 34.0 (Debian / Ubuntu)", "cmd": "apt-cache madison parasolid\nsudo apt install parasolid=<VERSION_BEFORE_34.0>\nsudo apt-mark hold parasolid"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list parasolid\nsudo dnf downgrade parasolid-<VERSION_BEFORE_34.0>\nsudo dnf versionlock add parasolid"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge", "vendor": "siemens", "type": "app", "affected": ["se2022"], "fixed": null, "safe": "before se2022", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge || rpm -q solid-edge || solid-edge --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before se2022 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge\nsudo apt install solid-edge=<VERSION_BEFORE_se2022>\nsudo apt-mark hold solid-edge"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge\nsudo dnf downgrade solid-edge-<VERSION_BEFORE_se2022>\nsudo dnf versionlock add solid-edge"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-25140"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11197, "pinned": false}, {"id": "CVE-2023-27402", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20334)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00223, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.240", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27402"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12217, "pinned": false}, {"id": "CVE-2023-27403", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.  (ZDI-CAN-20303, ZDI-CAN-20348)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00223, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.337", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27403"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-119", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12215, "pinned": false}, {"id": "CVE-2023-27405", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20432)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00223, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.513", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix plant simulation", "vendor": "siemens", "type": "app", "affected": ["< 2201.0006"], "fixed": "2201.0006", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix-plant-simulation || rpm -q tecnomatix-plant-simulation || tecnomatix-plant-simulation --version"}, {"label": "2. UPGRADE to 2201.0006 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix-plant-simulation"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix-plant-simulation"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27405"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12217, "pinned": false}, {"id": "CVE-2023-29053", "publisher": "Siemens AG", "title": "A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.", "summary": "A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:18.460", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "jt open toolkit", "vendor": "siemens", "type": "app", "affected": ["< 11.3.2.0"], "fixed": "11.3.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jt-open-toolkit || rpm -q jt-open-toolkit || jt-open-toolkit --version"}, {"label": "2. UPGRADE to 11.3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jt-open-toolkit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jt-open-toolkit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "jt utilities", "vendor": "siemens", "type": "app", "affected": ["< 13.3.0.0"], "fixed": "13.3.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jt-utilities || rpm -q jt-utilities || jt-utilities --version"}, {"label": "2. UPGRADE to 13.3.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jt-utilities"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jt-utilities"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29053"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-642810.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-642810.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11554, "pinned": false}, {"id": "CVE-2023-30986", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (", "summary": "A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19561)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:18.350", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["all versions", "update_0001"], "fixed": null, "safe": "before update_0001", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before update_0001 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2023\nsudo apt install solid-edge-se2023=<VERSION_BEFORE_update_0001>\nsudo apt-mark hold solid-edge-se2023"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2023\nsudo dnf downgrade solid-edge-se2023-<VERSION_BEFORE_update_0001>\nsudo dnf versionlock add solid-edge-se2023"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30986"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf"}], "cwe": ["CWE-119", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12548, "pinned": false}, {"id": "CVE-2023-0547", "publisher": "Mozilla Corporation", "title": "OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revo", "summary": "OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00372, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:10.337", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": [">= 68.0 and < 102.10"], "fixed": "102.10", "safe": "before 68.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 68.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_68.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_68.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-0547"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811298"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811298"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29995, "pinned": false}, {"id": "CVE-2023-23601", "publisher": "Mozilla Corporation", "title": "Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could le", "summary": "Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2023-06-02", "pub": "2023-06-02T17:15:10.727", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 109.0"], "fixed": "109.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 109.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.7"], "fixed": "102.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.7"], "fixed": "102.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-23601"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794268"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-01/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-02/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-03/"}, {"t": "Issue Tracking, Permissions Required", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794268"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-01/"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27136, "pinned": false}, {"id": "CVE-2023-33124", "publisher": "Siemens AG", "title": "A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All v", "summary": "A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsin", "cvss": 7.8, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2023-06-13", "pub": "2023-06-13T09:15:18.500", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "jt2go", "vendor": "siemens", "type": "app", "affected": ["< 14.2.0.3"], "fixed": "14.2.0.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jt2go || rpm -q jt2go || jt2go --version"}, {"label": "2. UPGRADE to 14.2.0.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jt2go"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jt2go"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "teamcenter visualization", "vendor": "siemens", "type": "app", "affected": [">= 13.2.0 and < 13.2.0.13", ">= 13.3.0 and < 13.3.0.10", ">= 14.0 and < 14.0.0.6", ">= 14.1 and < 14.1.0.8", ">= 14.2 and < 14.2.0.3"], "fixed": "13.2.0.13, 13.3.0.10, 14.0.0.6, 14.1.0.8, 14.2.0.3", "safe": "before 13.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teamcenter-visualization || rpm -q teamcenter-visualization || teamcenter-visualization --version"}, {"label": "2. UPGRADE to 13.2.0.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade teamcenter-visualization"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade teamcenter-visualization"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison teamcenter-visualization\nsudo apt install teamcenter-visualization=<VERSION_BEFORE_13.2.0>\nsudo apt-mark hold teamcenter-visualization"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list teamcenter-visualization\nsudo dnf downgrade teamcenter-visualization-<VERSION_BEFORE_13.2.0>\nsudo dnf versionlock add teamcenter-visualization"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-33124"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf"}], "cwe": ["CWE-119", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1155, "pinned": false}, {"id": "CVE-2023-37248", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat", "summary": "A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21155)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2023-07-11", "pub": "2023-07-11T10:15:11.680", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tecnomatix", "vendor": "siemens", "type": "app", "affected": [">= 2201 and < 2201.0008", ">= 2302 and < 2302.0002"], "fixed": "2201.0008, 2302.0002", "safe": "before 2201", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tecnomatix || rpm -q tecnomatix || tecnomatix --version"}, {"label": "2. UPGRADE to 2201.0008 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tecnomatix"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tecnomatix"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2201 (Debian / Ubuntu)", "cmd": "apt-cache madison tecnomatix\nsudo apt install tecnomatix=<VERSION_BEFORE_2201>\nsudo apt-mark hold tecnomatix"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tecnomatix\nsudo dnf downgrade tecnomatix-<VERSION_BEFORE_2201>\nsudo dnf versionlock add tecnomatix"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-37248"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12549, "pinned": false}, {"id": "CVE-2026-33862", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All ver", "summary": "A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application does not properly encode or filter user-supplied data. This could allow an attacker to inject malicious code that can be executed by other users when they visit the affe", "cvss": 7.3, "sev": "HIGH", "epss": 0.00276, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:45.773", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "teamcenter", "vendor": "siemens", "type": "app", "affected": [">= 2312.0 and < 2312.0014", ">= 2406.0 and < 2406.0012", ">= 2412.0 and < 2412.0009", ">= 2506.0 and < 2506.0005"], "fixed": "2312.0014, 2406.0012, 2412.0009, 2506.0005", "safe": "before 2312.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teamcenter || rpm -q teamcenter || teamcenter --version"}, {"label": "2. UPGRADE to 2312.0014 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade teamcenter"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade teamcenter"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2312.0 (Debian / Ubuntu)", "cmd": "apt-cache madison teamcenter\nsudo apt install teamcenter=<VERSION_BEFORE_2312.0>\nsudo apt-mark hold teamcenter"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list teamcenter\nsudo dnf downgrade teamcenter-<VERSION_BEFORE_2312.0>\nsudo dnf versionlock add teamcenter"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33862"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-827383.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18995, "pinned": false}, {"id": "CVE-2026-39515", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Motors < 1.4.107 versions.", "summary": "Subscriber Broken Access Control in Motors < 1.4.107 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-06-15", "pub": "2026-06-15T21:16:46.213", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39515"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29476, "pinned": false}, {"id": "CVE-2026-53844", "publisher": "VulnCheck", "title": "OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search tha", "summary": "OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that should not be visible to their session.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00361, "kev": false, "added": "2026-06-16", "pub": "2026-06-16T19:17:01.390", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openclaw", "vendor": "openclaw", "type": "app", "affected": ["< 2026.4.29", "2026.4.29 beta1", "2026.4.29 beta2", "2026.4.29 beta3", "2026.4.29 beta4"], "fixed": "2026.4.29", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls openclaw"}, {"label": "2. UPGRADE to 2026.4.29", "cmd": "npm install openclaw@\">=2026.4.29\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844"}, {"t": "Vendor Advisory", "u": "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2869, "pinned": false}, {"id": "CVE-2026-13442", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00295, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:25.387", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13442"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279988"}], "cwe": ["CWE-520"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21017, "pinned": false}, {"id": "CVE-2026-54621", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/UnionTypeStatement.jinja2 and src/datamodel_code_generator/model/template/UnionTypeStatement.py312.jinja2 are rendered into Python comments without neutralizing carriage returns in Python # comments, allowing attacker-controlled GraphQL schema content to inject Python code ", "cvss": 7.8, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:39.930", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54621"}], "cwe": ["CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10672, "pinned": false}, {"id": "CVE-2026-54654", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in src/datamodel_code_generator/model/template/TypeAliasAnnotation.jinja2, src/datamodel_code_generator/model/template/TypedDict.jinja2, src/datamodel_code_generator/model/template/dataclass.jinja2, src/datamodel_code_generator/model/template/msgspec.Struct.jinja2, src/da", "cvss": 7.8, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.217", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54654"}], "cwe": ["CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10673, "pinned": false}, {"id": "CVE-2026-54655", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/parser/jsonschema.py in _get_python_type_override are inserted into generated field annotations without sufficient validation, allowing attacker-controlled JSON Schema content to execute Python code when the generated module is imported. This issue is fixed in version 0.60.2.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:40.360", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54655"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10673, "pinned": false}, {"id": "CVE-2026-66488", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2", "summary": "Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00345, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:34.167", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66488"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.269, "pinned": false}, {"id": "CVE-2026-66489", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2", "summary": "Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:34.270", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66489"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27044, "pinned": false}, {"id": "CVE-2026-59232", "publisher": "Secur0", "title": "Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated user", "summary": "Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary JavaScript in the application origin via HTML markup stored in the lead name field, which the view renders through Blade's unescaped output directive and inside a JavaScript string literal in an onclick attribute.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00529, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:08.360", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59232"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4397, "pinned": false}, {"id": "CVE-2026-65841", "publisher": "GitHub, Inc.", "title": "Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor", "summary": "Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when content is loaded. This issue is fixed in version 4.13.6.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00529, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:53.967", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65841"}], "cwe": ["CWE-80"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4397, "pinned": false}, {"id": "CVE-2026-2411", "publisher": "Zephyr Project", "title": "Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declara", "summary": "Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declaration whose permission is hard-coded to BT_GATT_PERM_READ, and a Characteristic Value attribute that carries the application-specified security permissions (e.g. BT_GATT_PERM_READ_ENCRYPT / READ_AUTHEN / READ_LESC). The public notify and indicate APIs explicitly accept either attribute, and passing the declaration is the documented, common", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:16:57.160", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 2.6.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 2.6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-2411"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/c3386f92fe81bd10dc23e6a115e6a80a7d863546"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4w3r-v9q9-4462"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.07537, "pinned": false}, {"id": "CVE-2026-14202", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc", "summary": "Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.050", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14202"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24905, "pinned": false}, {"id": "CVE-2026-14465", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc", "summary": "Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay).\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.293", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14465"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2797, "pinned": false}, {"id": "CVE-2026-18772", "publisher": "Samsung TV & Appliance", "title": "Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponen", "summary": "Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.923", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "rlottie", "vendor": "samsung", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rlottie || rpm -q rlottie || rlottie --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18772"}, {"t": "Patch", "u": "https://github.com/Samsung/rlottie/pull/596"}], "cwe": ["CWE-1325"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2799, "pinned": false}, {"id": "CVE-2026-10709", "publisher": "Autodesk", "title": "A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflo", "summary": "A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00209, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:17:32.377", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fbx software development kit", "vendor": "autodesk", "type": "app", "affected": ["< 2020.3.10"], "fixed": "2020.3.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fbx-software-development-kit || rpm -q fbx-software-development-kit || fbx-software-development-kit --version"}, {"label": "2. UPGRADE to 2020.3.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fbx-software-development-kit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fbx-software-development-kit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10709"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0010"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10549, "pinned": false}, {"id": "CVE-2026-10710", "publisher": "Autodesk", "title": "A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflo", "summary": "A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00209, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:17:32.507", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fbx software development kit", "vendor": "autodesk", "type": "app", "affected": ["< 2020.3.10"], "fixed": "2020.3.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fbx-software-development-kit || rpm -q fbx-software-development-kit || fbx-software-development-kit --version"}, {"label": "2. UPGRADE to 2020.3.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fbx-software-development-kit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fbx-software-development-kit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10710"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0010"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10549, "pinned": false}, {"id": "CVE-2026-18809", "publisher": "Mozilla Corporation", "title": "Information disclosure in Firefox for Android and Firefox Focus for Android", "summary": "Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:17:36.680", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18809"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28331, "pinned": false}, {"id": "CVE-2026-73378", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.713", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73378"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15646, "pinned": false}, {"id": "CVE-2023-26293", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), T", "summary": "A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation", "cvss": 7.3, "sev": "HIGH", "epss": 0.00249, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:18.157", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "tia portal", "vendor": "siemens", "type": "app", "affected": ["15", "16", "17", "17 update1", "17 update2", "17 update3", "17 update4", "17 update5"], "fixed": null, "safe": "before 15", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tia-portal || rpm -q tia-portal || tia-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 15 (Debian / Ubuntu)", "cmd": "apt-cache madison tia-portal\nsudo apt install tia-portal=<VERSION_BEFORE_15>\nsudo apt-mark hold tia-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tia-portal\nsudo dnf downgrade tia-portal-<VERSION_BEFORE_15>\nsudo dnf versionlock add tia-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-26293"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf"}], "cwe": ["CWE-20", "CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15308, "pinned": false}, {"id": "CVE-2025-59571", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethem", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through < 1.7.06.", "cvss": 7.1, "sev": "HIGH", "epss": 0.0025, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:55.690", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59571"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15402, "pinned": false}, {"id": "CVE-2026-5670", "publisher": "VulDB", "title": "A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3", "summary": "A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This issue affects the function move_uploaded_file of the file /AssignmentSection/submission/upload.php. Performing a manipulation of the argument File results in unrestricted upload. The attack can be initiated remotely. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this produ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T17:17:15.470", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5670"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27125, "pinned": false}, {"id": "CVE-2024-54017", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP20", "summary": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTE", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:40.120", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-54017"}], "cwe": ["CWE-334"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22217, "pinned": false}, {"id": "CVE-2026-25440", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.", "summary": "Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-06-15", "pub": "2026-06-15T21:16:40.410", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25440"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20885, "pinned": false}, {"id": "CVE-2026-41557", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T13:20:38.410", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41557"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15671, "pinned": false}, {"id": "CVE-2026-56045", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-06-26", "pub": "2026-06-26T15:16:44.443", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56045"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15679, "pinned": false}, {"id": "CVE-2026-50738", "publisher": "EnterpriseDB Corporation", "title": "A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be derefe", "summary": "A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a low-privileged user able to influence worker start, stop, and restart timing through permitted pglogical operations. In the typical case the condition crashes rep", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00508, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.967", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pglogical", "vendor": "enterprisedb", "type": "app", "affected": [">= 2.0.0 and < 2.4.8"], "fixed": "2.4.8", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pglogical || rpm -q pglogical || pglogical --version"}, {"label": "2. UPGRADE to 2.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pglogical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pglogical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pglogical\nsudo apt install pglogical=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold pglogical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pglogical\nsudo dnf downgrade pglogical-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add pglogical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50738"}, {"t": "Vendor Advisory", "u": "https://www.enterprisedb.com/docs/security/advisories/cve202650738/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.42552, "pinned": false}, {"id": "CVE-2026-65891", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename", "summary": "Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintention", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00336, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:10.980", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "jce", "vendor": "widgetfactorylimited", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jce || rpm -q jce || jce --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jce"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jce"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65891"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.25754, "pinned": false}, {"id": "CVE-2026-17796", "publisher": "Chrome", "title": "Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.003", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17796"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23505, "pinned": false}, {"id": "CVE-2026-17800", "publisher": "Chrome", "title": "Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attack", "summary": "Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.417", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17800"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2351, "pinned": false}, {"id": "CVE-2026-14538", "publisher": "Google Inc.", "title": "An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool componen", "summary": "An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enforce dataset restrictions, but due to a fail-open logic flaw, it bypasses validation when the API returns an empty array for specialized constructs. This a", "cvss": 7.7, "sev": "HIGH", "epss": 0.00204, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T02:16:28.757", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mcp toolbox for databases", "vendor": "google", "type": "app", "affected": [">= 0.16.1 and <= 1.4.0"], "fixed": "newer than 1.4.0", "safe": "before 0.16.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version"}, {"label": "2. UPGRADE to newer than 1.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mcp-toolbox-for-databases"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mcp-toolbox-for-databases"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.16.1 (Debian / Ubuntu)", "cmd": "apt-cache madison mcp-toolbox-for-databases\nsudo apt install mcp-toolbox-for-databases=<VERSION_BEFORE_0.16.1>\nsudo apt-mark hold mcp-toolbox-for-databases"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mcp-toolbox-for-databases\nsudo dnf downgrade mcp-toolbox-for-databases-<VERSION_BEFORE_0.16.1>\nsudo dnf versionlock add mcp-toolbox-for-databases"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14538"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/googleapis/mcp-toolbox/pull/3452"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09908, "pinned": false}, {"id": "CVE-2026-46594", "publisher": "CERT.PL", "title": "A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script", "summary": "A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.\nThis issue was fixed in version 4.1.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00554, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T12:16:50.653", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46594"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.45541, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in PHP Jabbers scripts", "url": "https://cert.pl/en/posts/2026/07/CVE-2025-67649/", "date": "2026-07-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-53573", "publisher": "GitHub, Inc.", "title": "GeoNetwork is a catalog application to manage spatially referenced resources", "summary": "GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00648, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:24.667", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53573"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.50432, "pinned": false}, {"id": "CVE-2026-8508", "publisher": "Zyxel Corporation", "title": "An improper authentication vulnerability in the \"social_login.cgi\" CGI program in Zyxel WAX650S firmware versi", "summary": "An improper authentication vulnerability in the \"social_login.cgi\" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00317, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T03:16:26.023", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8508"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23465, "pinned": false}, {"id": "CVE-2026-18722", "publisher": "VulDB", "title": "A vulnerability was found in diaowen DWSurvey up to 6.14.0", "summary": "A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00365, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T04:16:32.280", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18722"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29148, "pinned": false}, {"id": "CVE-2026-18723", "publisher": "VulDB", "title": "A vulnerability was determined in diaowen DWSurvey up to 6.14.0", "summary": "A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T04:16:32.493", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18723"}], "cwe": ["CWE-266", "CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27123, "pinned": false}, {"id": "CVE-2026-18773", "publisher": "VulDB", "title": "A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5", "summary": "A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:22.470", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27124, "pinned": false}, {"id": "CVE-2026-59086", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions", "summary": "A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00154, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:00.333", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59086"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04206, "pinned": false}, {"id": "CVE-2026-59700", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001)", "summary": "A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:00.627", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59700"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04295, "pinned": false}, {"id": "CVE-2023-22972", "publisher": "MITRE", "title": "A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in O", "summary": "A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUEST_URI.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00429, "kev": false, "added": "2023-02-22", "pub": "2023-02-22T21:15:11.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openemr", "vendor": "open-emr", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openemr || rpm -q openemr || openemr --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openemr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openemr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22972"}, {"t": "Patch, Release Notes", "u": "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29"}, {"t": "Patch, Release Notes", "u": "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.3612, "pinned": false}, {"id": "CVE-2023-29054", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All", "summary": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), S", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2023-04-11", "pub": "2023-04-11T10:15:18.517", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "scalance x200-4p irt firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "scalance x201-3p irt firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "scalance x201-3p irt pro firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "scalance x202-2irt firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "scalance x202-2p irt firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "scalance x202-2p irt pro firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.5.2"], "fixed": "5.5.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29054"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf"}], "cwe": ["CWE-326"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16244, "pinned": false}, {"id": "CVE-2023-22685", "publisher": "Patchstack", "title": "Auth", "summary": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <=\u00a0v2.2 versions.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00369, "kev": false, "added": "2023-05-12", "pub": "2023-05-12T16:15:09.393", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "category specific rss feed subscription", "vendor": "tipsandtricks-hq", "type": "app", "affected": ["<= 2.2"], "fixed": "newer than 2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy category-specific-rss-feed-subscription || rpm -q category-specific-rss-feed-subscription || category-specific-rss-feed-subscription --version"}, {"label": "2. UPGRADE to newer than 2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade category-specific-rss-feed-subscription"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade category-specific-rss-feed-subscription"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22685"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29642, "pinned": false}, {"id": "CVE-2023-31238", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG", "summary": "A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2023-06-13", "pub": "2023-06-13T09:15:18.093", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "q200 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.70"], "fixed": "2.70", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-31238"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.35936, "pinned": false}, {"id": "CVE-2025-61166", "publisher": "MITRE", "title": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via ", "summary": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00175, "kev": false, "added": "2026-04-06", "pub": "2026-04-06T18:16:41.070", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "signinghub", "vendor": "ascertia", "type": "app", "affected": ["8.6.8", "10.0"], "fixed": null, "safe": "before 8.6.8", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy signinghub || rpm -q signinghub || signinghub --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.6.8 (Debian / Ubuntu)", "cmd": "apt-cache madison signinghub\nsudo apt install signinghub=<VERSION_BEFORE_8.6.8>\nsudo apt-mark hold signinghub"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list signinghub\nsudo dnf downgrade signinghub-<VERSION_BEFORE_8.6.8>\nsudo dnf versionlock add signinghub"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-61166"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Public exploit reference"], "fix": false, "watched": false, "epss_pct": 0.06634, "pinned": false}, {"id": "CVE-2025-56536", "publisher": "MITRE", "title": "A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrar", "summary": "A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-04-29", "pub": "2026-04-29T16:16:21.720", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "opennebula", "vendor": "opennebula", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy opennebula || rpm -q opennebula || opennebula --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade opennebula"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade opennebula"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-56536"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.07685, "pinned": false}, {"id": "CVE-2026-44411", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5)", "summary": "A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:46.430", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2026", "vendor": "siemens", "type": "app", "affected": ["< 226.0", "226.0", "226.0 update_1", "226.0 update_2", "226.0 update_3", "226.0 update_4"], "fixed": "226.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2026 || rpm -q solid-edge-se2026 || solid-edge-se2026 --version"}, {"label": "2. UPGRADE to 226.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade solid-edge-se2026"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade solid-edge-se2026"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44411"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-921111.html"}], "cwe": ["CWE-824"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04297, "pinned": false}, {"id": "CVE-2026-44412", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5)", "summary": "A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted PAR files.\r\nThis could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:46.567", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44412"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04297, "pinned": false}, {"id": "CVE-2026-40793", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.", "summary": "Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-06-15", "pub": "2026-06-15T21:16:51.660", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40793"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2151, "pinned": false}, {"id": "CVE-2026-18085", "publisher": "BlackBerry", "title": "An Improper Input Validation in the BlackBerry UEM\u00a0Management\u00a0Console\u00a0of\u00a0BlackBerry UEM\u00a012.23.0 QF8 and earlie", "summary": "An Improper Input Validation in the BlackBerry UEM\u00a0Management\u00a0Console\u00a0of\u00a0BlackBerry UEM\u00a012.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00263, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:38.150", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "unified endpoint manager", "vendor": "blackberry", "type": "app", "affected": ["12.23.0", "12.23.0 quick_fix1", "12.23.0 quick_fix2", "12.23.0 quick_fix3", "12.23.0 quick_fix4", "12.23.0 quick_fix5", "12.23.0 quick_fix6", "12.23.0 quick_fix7"], "fixed": null, "safe": "before 12.22.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-endpoint-manager || rpm -q unified-endpoint-manager || unified-endpoint-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.22.1 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-endpoint-manager\nsudo apt install unified-endpoint-manager=<VERSION_BEFORE_12.22.1>\nsudo apt-mark hold unified-endpoint-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-endpoint-manager\nsudo dnf downgrade unified-endpoint-manager-<VERSION_BEFORE_12.22.1>\nsudo dnf versionlock add unified-endpoint-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18085"}, {"t": "Vendor Advisory", "u": "https://support.blackberry.com/pkb/s/article/141208"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1713, "pinned": false}, {"id": "CVE-2026-16107", "publisher": "IBM Corporation", "title": "IBM TS4500 CLI tool Versions:\u00a0 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certifica", "summary": "IBM TS4500 CLI tool Versions:\u00a0 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow\u00a0an attacker to obtain sensitive information using man in the middle techniques.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00199, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:23.200", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16107"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.09267, "pinned": false}, {"id": "CVE-2026-35226", "publisher": "CERT VDE", "title": "An out\u2011of\u2011bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on ", "summary": "An out\u2011of\u2011bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:31.267", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-35226"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19505, "pinned": false}, {"id": "CVE-2026-50641", "publisher": "CERT.PL", "title": "Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database\n\nThis issue wa", "summary": "Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database\n\nThis issue was fixed in version\u00a06.8.0.0, users were also requested to change their password on the first login.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:18:53.053", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50641"}], "cwe": ["CWE-256"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1399, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in Streamsoft Business Intelligence software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-50641/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-59247", "publisher": "EEF", "title": "Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to sub", "summary": "Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution.\n\nDuring dependency resolution Gleam fetches package metadata from the signature-verified Hex repository, which covers each release's dependency requirements and SHA-256 outer_checksum. After resolving versions, gleam_cli::dependencies::lookup_package makes a second request ", "cvss": 7.6, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:26.780", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59247"}], "cwe": ["CWE-345"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07388, "pinned": false}, {"id": "CVE-2026-65947", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2", "summary": "Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2", "cvss": 7.3, "sev": "HIGH", "epss": 0.0019, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:29.500", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65947"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08185, "pinned": false}, {"id": "CVE-2026-66724", "publisher": "CERT.PL", "title": "MWDB Core versions >=2.0.0 and <2.19.0 contain a missing authorization vulnerability in the deprecated config ", "summary": "MWDB Core versions >=2.0.0 and <2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user without the adding_configs or adding_blobs capabilities to upload config and text blob objects to the system. The impact is limited to adding new conf", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00439, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:30.010", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66724"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37138, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in MWDB Core software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-66723/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-50558", "publisher": "GitHub, Inc.", "title": "Penelope Shell Handler is a post-exploitation shell handler for authorized security testing", "summary": "Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download() implementation in penelope.py used tar.extractall(local_download_folder) on tar archives returned by remote sessions without validating member paths, allowing a malicious or compromised session to write files outside the intended download directory and potentially overwrite ~/.penelope/peneloperc. This issue is fixed i", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00367, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T16:17:52.900", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50558"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29399, "pinned": false}, {"id": "CVE-2026-17764", "publisher": "Chrome", "title": "Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to byp", "summary": "Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:39.473", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17764"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21283, "pinned": false}, {"id": "CVE-2026-17774", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an at", "summary": "Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Medium)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00178, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.670", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17774"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0697, "pinned": false}, {"id": "CVE-2026-17791", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.477", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17791"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20307, "pinned": false}, {"id": "CVE-2026-17792", "publisher": "Chrome", "title": "Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.587", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17792"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20306, "pinned": false}, {"id": "CVE-2026-17793", "publisher": "Chrome", "title": "Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote a", "summary": "Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.683", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17793"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20306, "pinned": false}, {"id": "CVE-2026-17805", "publisher": "Chrome", "title": "Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote at", "summary": "Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.950", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17805"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21282, "pinned": false}, {"id": "CVE-2026-17811", "publisher": "Chrome", "title": "Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potent", "summary": "Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 7.1, "sev": "HIGH", "epss": 0.00227, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.603", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17811"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12692, "pinned": false}, {"id": "CVE-2026-17813", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.833", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17813"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21282, "pinned": false}, {"id": "CVE-2026-17814", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 al", "summary": "Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.937", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17814"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21284, "pinned": false}, {"id": "CVE-2026-17819", "publisher": "Chrome", "title": "Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attack", "summary": "Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.460", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17819"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20305, "pinned": false}, {"id": "CVE-2026-17824", "publisher": "Chrome", "title": "Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote atta", "summary": "Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.960", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17824"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20086, "pinned": false}, {"id": "CVE-2026-17825", "publisher": "Chrome", "title": "Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.057", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17825"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20087, "pinned": false}, {"id": "CVE-2026-17828", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.367", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17828"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20306, "pinned": false}, {"id": "CVE-2026-17830", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17830"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20084, "pinned": false}, {"id": "CVE-2026-17831", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.667", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17831"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20305, "pinned": false}, {"id": "CVE-2026-17835", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.093", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17835"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20307, "pinned": false}, {"id": "CVE-2026-17838", "publisher": "Chrome", "title": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack", "summary": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.417", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17838"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20307, "pinned": false}, {"id": "CVE-2026-17839", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.520", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17839"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20306, "pinned": false}, {"id": "CVE-2026-17840", "publisher": "Chrome", "title": "Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perfor", "summary": "Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.617", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17840"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20308, "pinned": false}, {"id": "CVE-2026-17861", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local ", "summary": "Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00129, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.903", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17861"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02335, "pinned": false}, {"id": "CVE-2026-17862", "publisher": "Chrome", "title": "Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perfo", "summary": "Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00137, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.057", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17862"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0281, "pinned": false}, {"id": "CVE-2026-17863", "publisher": "Chrome", "title": "Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local att", "summary": "Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00132, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.190", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17863"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02491, "pinned": false}, {"id": "CVE-2026-17864", "publisher": "Chrome", "title": "Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacke", "summary": "Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00124, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.293", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17864"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0199, "pinned": false}, {"id": "CVE-2026-17867", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote at", "summary": "Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 7.1, "sev": "HIGH", "epss": 0.00217, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.610", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17867"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11511, "pinned": false}, {"id": "CVE-2026-17873", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.223", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17873"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20086, "pinned": false}, {"id": "CVE-2026-17888", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote a", "summary": "Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)", "cvss": 7.1, "sev": "HIGH", "epss": 0.00211, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.763", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17888"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10786, "pinned": false}, {"id": "CVE-2026-65421", "publisher": "ICS-CERT", "title": "The MMS BER decoder contains a flaw in decoding fixed-width BER fields \n(boolean/integer): an attacker-supplie", "summary": "The MMS BER decoder contains a flaw in decoding fixed-width BER fields \n(boolean/integer): an attacker-supplied length value is not validated, \ncausing a read past the end of a heap buffer. This leads to termination \nof the MMS service process and a denial-of-service condition.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00285, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.597", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65421"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1993, "pinned": false}, {"id": "CVE-2026-66349", "publisher": "ICS-CERT", "title": "The MMS server connection handler contains a flaw in its processing of \nBER-encoded request data", "summary": "The MMS server connection handler contains a flaw in its processing of \nBER-encoded request data. When an MMS confirmed request PDU containing \nan extended BER tag is received over an established session, the decoder\n may advance its internal buffer incorrectly due to a missing bounds \ncheck. This results in a one byte heap out-of-bounds read and causes the\n MMS service process to terminate, leading to a denial-of-service \ncondition.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.920", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66349"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20998, "pinned": false}, {"id": "CVE-2026-59231", "publisher": "Secur0", "title": "Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticate", "summary": "Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report client_logo field, which the server-side headless browser fetches while rendering the report.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0045, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:08.227", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59231"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38113, "pinned": false}, {"id": "CVE-2026-10773", "publisher": "Zephyr Project", "title": "The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-eleme", "summary": "The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char * name table after a faulty bounds check. The guard used msg_type <= sizeof(name) instead of msg_type <= ARRAY_SIZE(name); sizeof returns the byte size of the pointer array (32 on 32-bit, 64 on 64-bit targets) rather than the element count of 8, so message-type values from 9 up to that byte size pass the check and cause name", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:16:56.987", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 3.6.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 3.6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10773"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/73c8a7df4f00088fc04ee5ab71bcabf47fcd3db7"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r5hq-xq42-wcfq"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r5hq-xq42-wcfq"}], "cwe": ["CWE-125", "CWE-682"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.17554, "pinned": false}, {"id": "CVE-2026-18719", "publisher": "VulDB", "title": "A vulnerability was detected in cemtan sar2html 4.0.0", "summary": "A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T02:16:16.973", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18719"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23337, "pinned": false}, {"id": "CVE-2026-18755", "publisher": "GV", "title": "A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe", "summary": "A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library (DLL) file into the application search path prior to the legitimate library, the malicious code is loaded and executed under the security privileges of the GV-ASManager process.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00188, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T08:16:34.930", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18755"}], "cwe": ["CWE-428"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08011, "pinned": false}, {"id": "CVE-2026-18766", "publisher": "VulDB", "title": "A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f", "summary": "A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filter_col can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:33.850", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18766"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23333, "pinned": false}, {"id": "CVE-2026-67618", "publisher": "VulnCheck", "title": "marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltr", "summary": "marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious base_url in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own settings due to insufficient sanitization in sanitize_pyproject_dict. When an operator opens the crafted notebook and makes an AI request, marimo resolves the ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:41.293", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67618"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20996, "pinned": false}, {"id": "CVE-2026-21366", "publisher": "Qualcomm, Inc.", "title": "Memory corruption while processing a packet with a size close to the maximum allowed value.", "summary": "Memory corruption while processing a packet with a size close to the maximum allowed value.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00103, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:22.780", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "lemans au lgit firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "lemansau firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qam8255p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qam8295p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qam8620p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qamsrv1h firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21366"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00928, "pinned": false}, {"id": "CVE-2026-24080", "publisher": "Qualcomm, Inc.", "title": "Memory Corruption when handling malformed request parameters in the fingerprint TA.", "summary": "Memory Corruption when handling malformed request parameters in the fingerprint TA.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00103, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:23.770", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "qam8295p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qca6574au firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qca6595au firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qca6678aq firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qca6696 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sa6145p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24080"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00928, "pinned": false}, {"id": "CVE-2026-24083", "publisher": "Qualcomm, Inc.", "title": "Memory Corruption while processing IOCTL device driver requests with invalid arguments.", "summary": "Memory Corruption while processing IOCTL device driver requests with invalid arguments.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00103, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:24.123", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "qam8295p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qca6696 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sa8295p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24083"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-822"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00929, "pinned": false}, {"id": "CVE-2026-25292", "publisher": "Qualcomm, Inc.", "title": "Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework con", "summary": "Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:25.183", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "sm6225p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm6450p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm6475p firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm6475q firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm6850 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sm7435 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25292"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-1286"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04274, "pinned": false}, {"id": "CVE-2026-76239", "publisher": "VulnCheck", "title": "Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, ", "summary": "Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal loopback and private network destinations. Attackers can trigger matching fact-change events to cause the Stigmem server to issue server-side HTTP POST requests to internal services, enabling blind SSRF attacks against localhost and private network endpoints.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00324, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T14:17:56.157", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76239"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24239, "pinned": false}, {"id": "CVE-2026-78200", "publisher": "VulDB", "title": "A flaw has been found in itsourcecode Library Management System 1.0", "summary": "A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T06:20:56.080", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78200"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25331, "pinned": false}, {"id": "CVE-2022-47924", "publisher": "CERT VDE", "title": "An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a loc", "summary": "An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation.\n\n", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2023-03-27", "pub": "2023-03-27T14:15:07.690", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "csaf-validator-lib", "vendor": "csaf-validator-lib project", "type": "app", "affected": ["< 0.1.0"], "fixed": "0.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy csaf-validator-lib || rpm -q csaf-validator-lib || csaf-validator-lib --version"}, {"label": "2. UPGRADE to 0.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade csaf-validator-lib"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade csaf-validator-lib"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-47924"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16953, "pinned": false}, {"id": "CVE-2023-22348", "publisher": "Checkmk GmbH", "title": "Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote auth", "summary": "Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00591, "kev": false, "added": "2023-05-17", "pub": "2023-05-17T16:15:09.110", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.1.0", "2.1.0 b1", "2.1.0 b2", "2.1.0 b3", "2.1.0 b4", "2.1.0 b5", "2.1.0 b6", "2.1.0 b7"], "fixed": null, "safe": "before 2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.1.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.1.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "checkmk", "vendor": "tribe29", "type": "app", "affected": ["< 2.1.0"], "fixed": "2.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. UPGRADE to 2.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade checkmk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade checkmk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22348"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/13982"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/13982"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.47612, "pinned": false}, {"id": "CVE-2023-23548", "publisher": "Checkmk GmbH", "title": "Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.", "summary": "Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2023-08-01", "pub": "2023-08-01T10:15:09.740", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["<= 1.6.0", "2.0.0", "2.0.0 b1", "2.0.0 b2", "2.0.0 b3", "2.0.0 b4", "2.0.0 b5", "2.0.0 b6"], "fixed": "newer than 1.6.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. UPGRADE to newer than 1.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade checkmk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade checkmk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-23548"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/15691"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/15691"}], "cwe": ["CWE-80", "CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33748, "pinned": false}, {"id": "CVE-2026-33457", "publisher": "Checkmk GmbH", "title": "Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an auth", "summary": "Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0029, "kev": false, "added": "2026-04-10", "pub": "2026-04-10T09:16:24.630", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.3.0", "2.3.0 b1", "2.3.0 b2", "2.3.0 b3", "2.3.0 b4", "2.3.0 b5", "2.3.0 b6", "2.3.0 p1"], "fixed": null, "safe": "before 2.3.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.3.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.3.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33457"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17990"}], "cwe": ["CWE-140"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20453, "pinned": false}, {"id": "CVE-2026-48058", "publisher": "GitHub, Inc.", "title": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network", "summary": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/web/session.go and internal/web/oidc.go set HttpOnly and SameSite=Lax on every cookie but never Secure. A single plaintext request to the origin (operator on a LAN, mistyped URL, HTTP\u2192HTTPS not strictly enforced, reverse proxy misconfiguration) discloses the session. This issue has been patched in version 0.3.2.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:34.747", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48058"}], "cwe": ["CWE-614"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23648, "pinned": false}, {"id": "CVE-2026-14515", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-sit", "summary": "IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T21:17:25.923", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.31", ">= 9.0.0.0 and < 9.0.5.29"], "fixed": "8.5.5.31, 9.0.5.29", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.31 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14515"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281641"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21745, "pinned": false}, {"id": "CVE-2026-54663", "publisher": "GitHub, Inc.", "title": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications", "summary": "swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http or https target without private IP, redirect, DNS rebinding, or same-origin validation, allowing an attacker-controlled OpenAPI spec to make the generator issue requests to internal or link-lo", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0032, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T15:16:25.713", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54663"}], "cwe": ["CWE-20", "CWE-441", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23811, "pinned": false}, {"id": "CVE-2026-17789", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 al", "summary": "Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.257", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17789"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18831, "pinned": false}, {"id": "CVE-2026-66316", "publisher": "Microsoft Corporation", "title": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing", "summary": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00212, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.060", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66316"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66316"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.10896, "pinned": false}, {"id": "CVE-2026-66317", "publisher": "Microsoft Corporation", "title": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tamperin", "summary": "Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00212, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:17:39.183", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.59"], "fixed": "151.0.4129.59", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.59 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66317"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66317"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.10896, "pinned": false}, {"id": "CVE-2026-25288", "publisher": "Qualcomm, Inc.", "title": "Transient DOS when processing a short target wake time channel usage response frame with insufficient packet s", "summary": "Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:24.693", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "orne firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "palawan25 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "pandeiro firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qln1083bd firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qln1086bd firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qmb715 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25288"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04986, "pinned": false}, {"id": "CVE-2026-74890", "publisher": "VulnCheck", "title": "openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that di", "summary": "openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST_CURRENT_TEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticated ciphertext and bypass integrity protection on encrypted data.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T11:16:43.960", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "openssl encrypt", "vendor": "jahlives", "type": "app", "affected": ["< 1.4.0"], "fixed": "1.4.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show openssl-encrypt"}, {"label": "2. UPGRADE to 1.4.0", "cmd": "pip install --upgrade \"openssl-encrypt>=1.4.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74890"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-rvc2-5jxq-gpcj"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.11061, "pinned": false}, {"id": "CVE-2026-76226", "publisher": "VulnCheck", "title": "Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module ", "summary": "Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk managers when using lockFileMaintenance. Attackers can execute arbitrary code by providing malicious dependencies that are referenced in bazel mod deps calls, such as within ctx.execute statements.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T14:17:49.157", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76226"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20925, "pinned": false}, {"id": "CVE-2025-10021", "publisher": "Open Design Alliance", "title": "A Use of Uninitialized Variable vulnerability exists in Open Design\u00a0Alliance Drawings SDK static versions (mt)", "summary": "A Use of Uninitialized Variable vulnerability exists in Open Design\u00a0Alliance Drawings SDK static versions (mt) before 2026.12. Static object\u00a0`COdaMfcAppApp theApp` may access `OdString::kEmpty` before its\u00a0initialization. Due to undefined initialization order of static objects across translation units (Static Initialization Order Fiasco), the application accesses uninitialized memory. This results in application crash on startup, causing denial of", "cvss": 7.0, "sev": "HIGH", "epss": 0.00153, "kev": false, "added": "2025-12-22", "pub": "2025-12-22T16:15:43.437", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10021"}], "cwe": ["CWE-457"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04094, "pinned": false}, {"id": "CVE-2026-49773", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-06-15", "pub": "2026-06-15T21:17:22.173", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49773"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12372, "pinned": false}, {"id": "CVE-2026-59102", "publisher": "VulnCheck", "title": "Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers", "summary": "Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by setting a full name containing an HTML payload and triggering an Actions run. When the DEFAULT_SHOW_FULL_NAME option is enabled, the run description is assembled server-side with the user's display name interpolated into an HTML string via a translation function that does not es", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-07-02", "pub": "2026-07-02T20:17:08.683", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59102"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27045, "pinned": false}, {"id": "CVE-2026-60033", "publisher": "Joomla! Project", "title": "Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Joomla extensio", "summary": "Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00388, "kev": false, "added": "2026-07-20", "pub": "2026-07-20T19:17:27.780", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60033"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31721, "pinned": false}, {"id": "CVE-2026-11391", "publisher": "Tanium", "title": "Tanium addressed a SQL injection vulnerability in Patch.", "summary": "Tanium addressed a SQL injection vulnerability in Patch.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T20:17:22.573", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11391"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16232, "pinned": false}, {"id": "CVE-2026-63239", "publisher": "CSA", "title": "A hard-coded AWS IAM credentials vulnerability\nin Koollab LMS allowed\nan attacker to access shared multi-tenan", "summary": "A hard-coded AWS IAM credentials vulnerability\nin Koollab LMS allowed\nan attacker to access shared multi-tenant S3 buckets and SQS queues, exposing\nsensitive data and enabling malicious content injection, job manipulation, or\nemail interception.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.343", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63239"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.10277, "pinned": false}, {"id": "CVE-2026-18197", "publisher": "Tenable Network Security, Inc.", "title": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Lib", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS).\n\nThis issue affects Link Library: before 7.9.4.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00276, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T08:16:30.520", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "link library", "vendor": "ylefebvre", "type": "app", "affected": ["< 7.9.4"], "fixed": "7.9.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy link-library || rpm -q link-library || link-library --version"}, {"label": "2. UPGRADE to 7.9.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade link-library"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade link-library"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18197"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19052, "pinned": false}, {"id": "CVE-2026-33385", "publisher": "CERT.PL", "title": "A Blind SQL injection vulnerability has been identified in Quick.CMS", "summary": "A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks.\n\nThe vendor states that this administration panel already allows for significant modification capabilities. The SQL injection vulnerability primarily enables bypassing front-end validation controls and potential database destru", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:18:08.400", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33385"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3387, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in Quick.CMS software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-33385/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-66490", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2", "summary": "Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:34.373", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "gridbox", "vendor": "balbooa", "type": "app", "affected": ["< 2.20.2"], "fixed": "2.20.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridbox || rpm -q gridbox || gridbox --version"}, {"label": "2. UPGRADE to 2.20.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridbox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridbox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66490"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17528, "pinned": false}, {"id": "CVE-2026-17787", "publisher": "Chrome", "title": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.057", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17787"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14011, "pinned": false}, {"id": "CVE-2026-17821", "publisher": "Chrome", "title": "Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who ", "summary": "Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.663", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17821"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12691, "pinned": false}, {"id": "CVE-2026-17822", "publisher": "Chrome", "title": "Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI ", "summary": "Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17822"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13104, "pinned": false}, {"id": "CVE-2026-17823", "publisher": "Chrome", "title": "Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.857", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17823"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1401, "pinned": false}, {"id": "CVE-2026-17841", "publisher": "Chrome", "title": "Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI ", "summary": "Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.723", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17841"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13105, "pinned": false}, {"id": "CVE-2026-17842", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.837", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17842"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14011, "pinned": false}, {"id": "CVE-2026-17846", "publisher": "Chrome", "title": "Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote atta", "summary": "Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.247", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17846"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14012, "pinned": false}, {"id": "CVE-2026-17850", "publisher": "Chrome", "title": "Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.667", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17850"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14011, "pinned": false}, {"id": "CVE-2026-17852", "publisher": "Chrome", "title": "Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.873", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17852"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14009, "pinned": false}, {"id": "CVE-2026-17854", "publisher": "Chrome", "title": "Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.110", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17854"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14008, "pinned": false}, {"id": "CVE-2026-17882", "publisher": "Chrome", "title": "Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user t", "summary": "Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.140", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17882"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12692, "pinned": false}, {"id": "CVE-2026-17883", "publisher": "Chrome", "title": "Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.237", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17883"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14009, "pinned": false}, {"id": "CVE-2026-17350", "publisher": "PostgreSQL", "title": "The per-tool permission system (custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3) did n", "summary": "The per-tool permission system (custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3) did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator (permissions_required) was applied only to a single \"front door\" route per tool. Every other backend route and Socket.IO handler in that tool's workflow relied solely on pga_logi", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:16:59.617", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "pgadmin 4", "vendor": "pgadmin", "type": "app", "affected": [">= 9.3 and < 9.17"], "fixed": "9.17", "safe": "before 9.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pgadmin-4 || rpm -q pgadmin-4 || pgadmin-4 --version"}, {"label": "2. UPGRADE to 9.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pgadmin-4"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pgadmin-4"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.3 (Debian / Ubuntu)", "cmd": "apt-cache madison pgadmin-4\nsudo apt install pgadmin-4=<VERSION_BEFORE_9.3>\nsudo apt-mark hold pgadmin-4"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pgadmin-4\nsudo dnf downgrade pgadmin-4-<VERSION_BEFORE_9.3>\nsudo dnf versionlock add pgadmin-4"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17350"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/461c3afba92baad37c70a6fbd52d205d13a9de53"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/64a9cdbd6a240a962144f84418beaf9e66419779"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/ba1984718ad703011740ad48cb9b82402b89cc2c"}, {"t": "Patch", "u": "https://github.com/pgadmin-org/pgadmin4/commit/d36bd8dc96812c716664feac533d240544e70adc"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/pgadmin-org/pgadmin4/issues/10190"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30356, "pinned": false}, {"id": "CVE-2026-18806", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "External control of file name or path vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute", "summary": "External control of file name or path vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.\n\nThis issue affects pardus-image-writer: before 0.9.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00148, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T13:17:36.540", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18806"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03722, "pinned": false}, {"id": "CVE-2025-40830", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)", "summary": "A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does not have proper authorization checks for the file_transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any file on server or sensor.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:46.677", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "sinec security monitor", "vendor": "siemens", "type": "app", "affected": ["< 4.10.0"], "fixed": "4.10.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-security-monitor || rpm -q sinec-security-monitor || sinec-security-monitor --version"}, {"label": "2. UPGRADE to 4.10.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-security-monitor"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-security-monitor"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40830"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-882673.html"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04451, "pinned": false}, {"id": "CVE-2025-67539", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-T", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through < 2.6.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:29.047", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67539"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08236, "pinned": false}, {"id": "CVE-2026-54800", "publisher": "Siemens AG", "title": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE", "summary": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-07-09", "pub": "2026-07-09T15:16:36.707", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54800"}], "cwe": ["CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12988, "pinned": false}, {"id": "CVE-2026-61901", "publisher": "Joomla! Project", "title": "Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension Hikashop is vulnera", "summary": "Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-07-20", "pub": "2026-07-20T19:17:28.383", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61901"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14235, "pinned": false}, {"id": "CVE-2026-65946", "publisher": "Joomla! Project", "title": "Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0", "summary": "Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T13:19:11.293", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ro csvi", "vendor": "rolandd", "type": "app", "affected": ["< 9.11.0"], "fixed": "9.11.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ro-csvi || rpm -q ro-csvi || ro-csvi --version"}, {"label": "2. UPGRADE to 9.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ro-csvi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ro-csvi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65946"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15885, "pinned": false}, {"id": "CVE-2026-66400", "publisher": "VulnCheck", "title": "Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStor", "summary": "Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStorage.php where the findTriplet() method fails to properly validate Remember Me token timestamps. Attackers with a captured Remember Me cookie can authenticate indefinitely instead of the configured timeout period, as the expiry check compares an array to a scalar value which always evaluates incorrectly in PHP.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00239, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T14:16:34.017", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66400"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.14205, "pinned": false}, {"id": "CVE-2026-17780", "publisher": "Chrome", "title": "Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote att", "summary": "Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00222, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.307", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17780"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12168, "pinned": false}, {"id": "CVE-2026-15227", "publisher": "Checkmk GmbH", "title": "Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user", "summary": "Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the \"Edit foreign Reports\" permission to modify reports owned by other users.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T13:17:19.593", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15227"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27519, "pinned": false}, {"id": "CVE-2026-28145", "publisher": "Patchstack", "title": "Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipula", "summary": "Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State.\n\nThis issue affects MasterStudy LMS: from n/a through 3.7.39.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T14:16:49.967", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28145"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.04533, "pinned": false}, {"id": "CVE-2026-62324", "publisher": "GitHub, Inc.", "title": "Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor", "summary": "Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascript: href values before checking the scheme, allowing case variants, control-byte prefixes, and embedded tabs or newlines to bypass filtering and execute attacker-controlled script when a victim clicks a stored link rendered by an application. This issue is fixed in vers", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T20:16:53.197", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62324"}], "cwe": ["CWE-79", "CWE-83"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23029, "pinned": false}, {"id": "CVE-2026-14337", "publisher": "Pegasystems Inc.", "title": "Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerabilit", "summary": "Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T14:16:30.470", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14337"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35017, "pinned": false}, {"id": "CVE-2026-71041", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart).   The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T21:18:03.877", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "agile product lifecycle management", "vendor": "oracle", "type": "app", "affected": ["9.3.6"], "fixed": null, "safe": "before 9.3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-product-lifecycle-management || rpm -q agile-product-lifecycle-management || agile-product-lifecycle-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-product-lifecycle-management\nsudo apt install agile-product-lifecycle-management=<VERSION_BEFORE_9.3.6>\nsudo apt-mark hold agile-product-lifecycle-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-product-lifecycle-management\nsudo dnf downgrade agile-product-lifecycle-management-<VERSION_BEFORE_9.3.6>\nsudo dnf versionlock add agile-product-lifecycle-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71041"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02375, "pinned": false}, {"id": "CVE-2026-57263", "publisher": "Siemens AG", "title": "A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9)", "summary": "A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00111, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:18:59.607", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57263"}], "cwe": ["CWE-759"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01264, "pinned": false}, {"id": "CVE-2025-52546", "publisher": "Armis", "title": "E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenti", "summary": "E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web page.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:37.057", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-52546"}, {"t": "Mitigation, Third Party Advisory", "u": "https://www.armis.com/research/frostbyte10/"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09761, "pinned": false}, {"id": "CVE-2025-40834", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1)", "summary": "A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2025-11-17", "pub": "2025-11-17T12:15:44.290", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40834"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15889, "pinned": false}, {"id": "CVE-2026-55403", "publisher": "GitHub, Inc.", "title": "datamodel-code-generator generates Python data models from schema definitions", "summary": "datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.", "cvss": 3.7, "sev": "LOW", "epss": 0.00336, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T22:17:48.840", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55403"}], "cwe": ["CWE-200", "CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25797, "pinned": false}, {"id": "CVE-2026-63235", "publisher": "CSA", "title": "An improper access control vulnerability in Koollab LMS\nallowed an\nunauthenticated attacker to forcibly termin", "summary": "An improper access control vulnerability in Koollab LMS\nallowed an\nunauthenticated attacker to forcibly terminate the session of any user given\ntheir email address via the login kickout endpoint, resulting in a denial of\nservice.", "cvss": 3.7, "sev": "LOW", "epss": 0.00312, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.923", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63235"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22893, "pinned": false}, {"id": "CVE-2026-56390", "publisher": "CERT.PL", "title": "GNU Bison improperly handles grammar\u2011defined output paths", "summary": "GNU Bison improperly handles grammar\u2011defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller\u2011supplied output options. \nWhen processing attacker-supplied grammar, this behavior allows directing generated files to arbitrary writable locations on the filesystem, potentially overwriting existing files accessible to the Bison process.\n\nMaintainers of t", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:49.910", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "bison", "vendor": "gnu", "type": "app", "affected": ["3.8.2"], "fixed": null, "safe": "before 3.8.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bison || rpm -q bison || bison --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.8.2 (Debian / Ubuntu)", "cmd": "apt-cache madison bison\nsudo apt install bison=<VERSION_BEFORE_3.8.2>\nsudo apt-mark hold bison"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bison\nsudo dnf downgrade bison-<VERSION_BEFORE_3.8.2>\nsudo dnf versionlock add bison"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56390"}, {"t": "Patch", "u": "https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=8d101c19d4d9aaedf83a448c925513742d4efcf0"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06778, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU Bison software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56389/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-17770", "publisher": "Chrome", "title": "Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had c", "summary": "Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.220", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17770"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16228, "pinned": false}, {"id": "CVE-2026-17797", "publisher": "Chrome", "title": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to injec", "summary": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.107", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17797"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11941, "pinned": false}, {"id": "CVE-2026-17818", "publisher": "Chrome", "title": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to i", "summary": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.363", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17818"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1194, "pinned": false}, {"id": "CVE-2026-17827", "publisher": "Chrome", "title": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to injec", "summary": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.267", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17827"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1194, "pinned": false}, {"id": "CVE-2026-17845", "publisher": "Chrome", "title": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to injec", "summary": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.150", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17845"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1194, "pinned": false}, {"id": "CVE-2026-17853", "publisher": "Chrome", "title": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who", "summary": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.980", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17853"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11938, "pinned": false}, {"id": "CVE-2026-17878", "publisher": "Chrome", "title": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to injec", "summary": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.743", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17878"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11938, "pinned": false}, {"id": "CVE-2026-56568", "publisher": "HCL Software", "title": "HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabiliti", "summary": "HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and authentication status", "cvss": 3.7, "sev": "LOW", "epss": 0.00332, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:07.410", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["4.4.0"], "fixed": null, "safe": "before 4.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56568"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.2525, "pinned": false}, {"id": "CVE-2026-54785", "publisher": "GitHub, Inc.", "title": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI", "summary": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making thi", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00191, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:25.133", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54785"}], "cwe": ["CWE-22", "CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08289, "pinned": false}, {"id": "CVE-2026-58041", "publisher": "HackerOne", "title": "A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore", "summary": "A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3_reset() directly, bypassing the iterator invalidation mechanism introduced for StatementSync in recent releases\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T01:16:19.987", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58041"}], "cwe": ["CWE-367"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20164, "pinned": false}, {"id": "CVE-2026-18721", "publisher": "VulDB", "title": "A vulnerability has been found in kalcaddle kodbox 1.67 Build 02", "summary": "A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00425, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T04:16:32.043", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18721"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35735, "pinned": false}, {"id": "CVE-2026-24076", "publisher": "Qualcomm, Inc.", "title": "Memory Corruption when processing registry values with incorrect types using a direct query method.", "summary": "Memory Corruption when processing registry values with incorrect types using a direct query method.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00107, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:22.920", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aqt1000 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "cologne firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6200 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6700 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6800 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6900 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24076"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01116, "pinned": false}, {"id": "CVE-2026-24077", "publisher": "Qualcomm, Inc.", "title": "Information Disclosure when processing wireless network channel switch information with improperly formatted l", "summary": "Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:23.050", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "aqt1000 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ar8035 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6620 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6640 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6200 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "wcd9395 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24077"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-191"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05533, "pinned": false}, {"id": "CVE-2026-24078", "publisher": "Qualcomm, Inc.", "title": "Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signali", "summary": "Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:23.237", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "5g fixed wireless access platform firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ar8035 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6620 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "csra6640 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fastconnect 6200 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "qcs4490 firmware", "vendor": "qualcomm", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24078"}, {"t": "Vendor Advisory", "u": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"}], "cwe": ["CWE-359"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05533, "pinned": false}, {"id": "CVE-2026-69108", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1)", "summary": "A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:01.883", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69108"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06205, "pinned": false}, {"id": "CVE-2025-67562", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows E", "summary": "Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Caption Hover Pro: from n/a through < 20.0.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:32.693", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67562"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18254, "pinned": false}, {"id": "CVE-2026-63237", "publisher": "CSA", "title": "A TOTP two-factor authentication bypass vulnerability in\nKoollab LMS allowed an\nattacker to supply a client-co", "summary": "A TOTP two-factor authentication bypass vulnerability in\nKoollab LMS allowed an\nattacker to supply a client-controlled seed to generate a matching one-time\npassword and bypass the second authentication factor, potentially enabling\nunauthorised access to administrator accounts.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.133", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63237"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06796, "pinned": false}, {"id": "CVE-2026-17771", "publisher": "Chrome", "title": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-orig", "summary": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00389, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17771"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.31824, "pinned": false}, {"id": "CVE-2026-17779", "publisher": "Chrome", "title": "Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attack", "summary": "Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00257, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.200", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17779"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16395, "pinned": false}, {"id": "CVE-2026-17785", "publisher": "Chrome", "title": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-ori", "summary": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00389, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.840", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17785"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.31824, "pinned": false}, {"id": "CVE-2026-17790", "publisher": "Chrome", "title": "Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obt", "summary": "Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.367", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17790"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30043, "pinned": false}, {"id": "CVE-2026-17806", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.053", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17806"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09822, "pinned": false}, {"id": "CVE-2026-17809", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.380", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17809"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09822, "pinned": false}, {"id": "CVE-2026-17812", "publisher": "Chrome", "title": "Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote at", "summary": "Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.730", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17812"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16119, "pinned": false}, {"id": "CVE-2026-17866", "publisher": "Chrome", "title": "Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had com", "summary": "Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00208, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.500", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17866"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.10367, "pinned": false}, {"id": "CVE-2026-17874", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.330", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17874"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16117, "pinned": false}, {"id": "CVE-2026-17890", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.990", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17890"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09821, "pinned": false}, {"id": "CVE-2026-56570", "publisher": "HCL Software", "title": "HCL iControl was affected by Auto complete Enabled vulnerabilities", "summary": "HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.", "cvss": 3.7, "sev": "LOW", "epss": 0.00296, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:07.637", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["4.4.0"], "fixed": null, "safe": "before 4.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56570"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21185, "pinned": false}, {"id": "CVE-2026-56571", "publisher": "HCL Software", "title": "HCL iControl was affected by Improper Error Handling vulnerabilities", "summary": "HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated.", "cvss": 3.7, "sev": "LOW", "epss": 0.00288, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:07.753", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["4.4.0"], "fixed": null, "safe": "before 4.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56571"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20224, "pinned": false}, {"id": "CVE-2026-58044", "publisher": "HackerOne", "title": "A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that ", "summary": "A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused backend connection.\r\n\r\nNode.js can omit headers beyond `maxHeadersCount` / `maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinct`, while still using those omitted headers internally for HTTP message fram", "cvss": 3.7, "sev": "LOW", "epss": 0.00271, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T01:16:20.247", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58044"}], "cwe": ["CWE-444"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18298, "pinned": false}, {"id": "CVE-2026-58045", "publisher": "HackerOne", "title": "A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchrono", "summary": "A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected.\r\n\r\nRepeated exploitation of this condition can result in a denial of service.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T01:16:20.380", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58045"}], "cwe": ["CWE-400"], "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05638, "pinned": false}, {"id": "CVE-2026-67196", "publisher": "VulnCheck", "title": "Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attac", "summary": "Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attackers to inject arbitrary HTML and JavaScript by writing table cell values containing unescaped HTML markup, which are interpolated directly into innerHTML during CSV serialization rendering. Attackers can craft table rows with payloads such as unquoted attribute injections containing event handler attributes that bypass RFC 4180 quoting, ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T15:16:40.283", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67196"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16137, "pinned": false}, {"id": "CVE-2023-27462", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)", "summary": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for.", "cvss": 3.1, "sev": "LOW", "epss": 0.00524, "kev": false, "added": "2023-03-14", "pub": "2023-03-14T10:15:29.677", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "ruggedcom crossbow", "vendor": "siemens", "type": "app", "affected": ["< 5.3"], "fixed": "5.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ruggedcom-crossbow || rpm -q ruggedcom-crossbow || ruggedcom-crossbow --version"}, {"label": "2. UPGRADE to 5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ruggedcom-crossbow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ruggedcom-crossbow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27462"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.4363, "pinned": false}, {"id": "CVE-2026-63236", "publisher": "CSA", "title": "An improper access control vulnerability in\nKoollab LMS allowed an\nunauthenticated attacker to read another us", "summary": "An improper access control vulnerability in\nKoollab LMS allowed an\nunauthenticated attacker to read another user's name, internal identifier,\nscores, lesson status, lesson position, and cached lesson state via the SCORM\nAPI endpoint.", "cvss": 3.7, "sev": "LOW", "epss": 0.00262, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.027", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63236"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.17072, "pinned": false}, {"id": "CVE-2026-17776", "publisher": "Chrome", "title": "Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromise", "summary": "Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00192, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.880", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17776"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08425, "pinned": false}, {"id": "CVE-2026-17795", "publisher": "Chrome", "title": "Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.893", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17795"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26495, "pinned": false}, {"id": "CVE-2026-17799", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a ", "summary": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. (Chromium security severity: Medium)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0021, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.307", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17799"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.10647, "pinned": false}, {"id": "CVE-2026-14540", "publisher": "Google Inc.", "title": "A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Go", "summary": "A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T02:16:29.060", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "mcp toolbox for databases", "vendor": "google", "type": "app", "affected": [">= 0.3.0 and < 1.5.0"], "fixed": "1.5.0", "safe": "before 0.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mcp-toolbox-for-databases || rpm -q mcp-toolbox-for-databases || mcp-toolbox-for-databases --version"}, {"label": "2. UPGRADE to 1.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mcp-toolbox-for-databases"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mcp-toolbox-for-databases"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mcp-toolbox-for-databases\nsudo apt install mcp-toolbox-for-databases=<VERSION_BEFORE_0.3.0>\nsudo apt-mark hold mcp-toolbox-for-databases"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mcp-toolbox-for-databases\nsudo dnf downgrade mcp-toolbox-for-databases-<VERSION_BEFORE_0.3.0>\nsudo dnf versionlock add mcp-toolbox-for-databases"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14540"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/googleapis/mcp-toolbox/pull/3448"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02564, "pinned": false}, {"id": "CVE-2026-67350", "publisher": "VulnCheck", "title": "Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attac", "summary": "Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y. Attackers can craft trusted-looking URLs leveraging the legitimate blog domain to conduct phishing, deliver malware, or bypass URL reputation filters.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00348, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T15:18:01.103", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67350"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27193, "pinned": false}, {"id": "CVE-2026-34495", "publisher": "Johnson Controls", "title": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson ", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS.\n\nThis issue affects FM Systems Employee: before 2025.3.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:14.310", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fms employee", "vendor": "johnsoncontrols", "type": "app", "affected": ["<= 2025.3.1"], "fixed": "newer than 2025.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fms-employee || rpm -q fms-employee || fms-employee --version"}, {"label": "2. UPGRADE to newer than 2025.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fms-employee"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fms-employee"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34495"}, {"t": "Vendor Advisory", "u": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13545, "pinned": false}, {"id": "CVE-2026-34497", "publisher": "Johnson Controls", "title": "Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Control", "summary": "Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS).\n\nThis issue affects FM Systems Employee: before 2025.3.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:14.457", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "fms employee", "vendor": "johnsoncontrols", "type": "app", "affected": ["<= 2025.3.1"], "fixed": "newer than 2025.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fms-employee || rpm -q fms-employee || fms-employee --version"}, {"label": "2. UPGRADE to newer than 2025.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fms-employee"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fms-employee"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34497"}, {"t": "Vendor Advisory", "u": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"}], "cwe": ["CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13545, "pinned": false}, {"id": "CVE-2026-14192", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin So", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:31.810", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14192"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12587, "pinned": false}, {"id": "CVE-2026-10032", "publisher": "Google Inc.", "title": "The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without valida", "summary": "The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T16:16:20.983", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "a2ui\\/web core", "vendor": "google", "type": "app", "affected": [">= 0.9.0 and < 0.10.2"], "fixed": "0.10.2", "safe": "before 0.9.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls a2uiweb-core"}, {"label": "2. UPGRADE to 0.10.2", "cmd": "npm install a2uiweb-core@\">=0.10.2\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.9.0", "cmd": "npm view a2uiweb-core versions\nnpm install a2uiweb-core@\"<0.9.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10032"}, {"t": "Vendor Advisory", "u": "https://github.com/a2ui-project/a2ui/security/advisories/GHSA-72qq-p3r5-f7wq"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0204, "pinned": false}, {"id": "CVE-2026-76376", "publisher": "Cisco Systems, Inc.", "title": "In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run act", "summary": "In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an act", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00188, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:23.577", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76376"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.07975, "pinned": false}, {"id": "CVE-2023-29532", "publisher": "Mozilla Corporation", "title": "A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing t", "summary": "A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server.\n\n*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnera", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2023-06-19", "pub": "2023-06-19T10:15:09.430", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 112.0"], "fixed": "112.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 112.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "firefox esr", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-esr || rpm -q firefox-esr || firefox-esr --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-esr"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 102.10"], "fixed": "102.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 102.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-29532"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-13/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-14/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2023-15/"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07717, "pinned": false}, {"id": "CVE-2026-12565", "publisher": "Black Lantern Security", "title": "The unarchive internal module's archive extraction commands perform no code-level validation on extracted file", "summary": "The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools (e.g. GNU tar) which varies by platform. While CVE-2025-10284 addressed git-specific RCE vectors, the underlying archive extraction path traversal was never fixed. On systems with GNU tar < 1.34 (Ubuntu 20.04, Debian Buster, CentOS 7, many Docker base images), a malicious archive ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00208, "kev": false, "added": "2026-06-17", "pub": "2026-06-17T23:17:02.970", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12565"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10401, "pinned": false}, {"id": "CVE-2026-17872", "publisher": "Chrome", "title": "Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attack", "summary": "Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0008, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.123", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17872"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.00157, "pinned": false}, {"id": "CVE-2026-25552", "publisher": "VulnCheck", "title": "Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to ", "summary": "Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain using the $proxy_add_x_forwarded_for directive to present an arbitrary IP address, circumventing Ghost's rate-limiting mechanisms on self-hosted instances", "cvss": 3.7, "sev": "LOW", "epss": 0.00225, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T19:17:08.663", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25552"}], "cwe": ["CWE-348"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12513, "pinned": false}, {"id": "CVE-2026-11835", "publisher": "Caliptra", "title": "Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (", "summary": "Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (UpdateResetFlow::run()) in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configured SS_EXTERNAL_STAGING_AREA_BASE_ADDR, enabling firmware to be modified between verification and loading into ICCM. Attestation continues to report", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.0013, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T00:16:40.047", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11835"}], "cwe": ["CWE-20", "CWE-367"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02412, "pinned": false}, {"id": "CVE-2026-14219", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultanc", "summary": "URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T10:19:32.173", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14219"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10275, "pinned": false}, {"id": "CVE-2026-47768", "publisher": "GitHub, Inc.", "title": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network", "summary": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version 0.3.2.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:34.567", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47768"}], "cwe": ["CWE-598"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04203, "pinned": false}, {"id": "CVE-2026-63240", "publisher": "CSA", "title": "An information disclosure vulnerability in Koollab LMS allowed an authenticated learner\nto obtain correct quiz", "summary": "An information disclosure vulnerability in Koollab LMS allowed an authenticated learner\nto obtain correct quiz answers from the course status endpoint without\ncompleting the assessment legitimately, compromising the integrity of\nassessments.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.460", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63240"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20982, "pinned": false}, {"id": "CVE-2026-50642", "publisher": "CERT.PL", "title": "diff\u2011so\u2011fancy does not properly sanitize non\u2011SGR terminal control sequences before outputting diff data", "summary": "diff\u2011so\u2011fancy does not properly sanitize non\u2011SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return (\\r) and escape sequences (e.g., OSC, CSI), to pass through unsanitized.\n\nAn attacker can embed malicious control sequences in filenames, diff metadata, or file content that are rendered directly in the terminal during diff viewing", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T11:16:49.617", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50642"}], "cwe": ["CWE-116"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12919, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in diff-so-fancy software", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-50642/", "date": "2026-07-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-17808", "publisher": "Chrome", "title": "Uninitialized Use in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to lea", "summary": "Uninitialized Use in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.273", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17808"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19688, "pinned": false}, {"id": "CVE-2026-17810", "publisher": "Chrome", "title": "Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-orig", "summary": "Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:44.493", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17810"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19687, "pinned": false}, {"id": "CVE-2026-17858", "publisher": "Chrome", "title": "Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to lea", "summary": "Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.553", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17858"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19685, "pinned": false}, {"id": "CVE-2026-17889", "publisher": "Chrome", "title": "Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-ori", "summary": "Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.877", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17889"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19686, "pinned": false}, {"id": "CVE-2026-28144", "publisher": "Patchstack", "title": "Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedd", "summary": "Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data.\n\nThis issue affects WP Maps: from n/a through 4.9.6.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T14:16:49.800", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28144"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20979, "pinned": false}, {"id": "CVE-2026-52857", "publisher": "GitHub, Inc.", "title": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel", "summary": "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is fixed in version 1.13.0.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:06.490", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52857"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04809, "pinned": false}, {"id": "CVE-2023-28829", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15", "summary": "A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used p", "cvss": 3.9, "sev": "LOW", "epss": 0.00291, "kev": false, "added": "2023-06-13", "pub": "2023-06-13T09:15:16.707", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "simatic net pc software", "vendor": "siemens", "type": "app", "affected": ["14.0", "15.0"], "fixed": null, "safe": "before 14.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-net-pc-software || rpm -q simatic-net-pc-software || simatic-net-pc-software --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-net-pc-software\nsudo apt install simatic-net-pc-software=<VERSION_BEFORE_14.0>\nsudo apt-mark hold simatic-net-pc-software"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-net-pc-software\nsudo dnf downgrade simatic-net-pc-software-<VERSION_BEFORE_14.0>\nsudo dnf versionlock add simatic-net-pc-software"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "simatic pcs 7", "vendor": "siemens", "type": "app", "affected": ["8.2", "9.0", "9.1"], "fixed": null, "safe": "before 8.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-pcs-7 || rpm -q simatic-pcs-7 || simatic-pcs-7 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-pcs-7\nsudo apt install simatic-pcs-7=<VERSION_BEFORE_8.2>\nsudo apt-mark hold simatic-pcs-7"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-pcs-7\nsudo dnf downgrade simatic-pcs-7-<VERSION_BEFORE_8.2>\nsudo dnf versionlock add simatic-pcs-7"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "simatic wincc", "vendor": "siemens", "type": "app", "affected": ["< 8.0"], "fixed": "8.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-wincc || rpm -q simatic-wincc || simatic-wincc --version"}, {"label": "2. UPGRADE to 8.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade simatic-wincc"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade simatic-wincc"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "sinaut st7sc", "vendor": "siemens", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinaut-st7sc || rpm -q sinaut-st7sc || sinaut-st7sc --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-28829"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-508677.pdf"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-508677.pdf"}], "cwe": ["CWE-477"], "vector": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "A", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2053, "pinned": false}, {"id": "CVE-2026-63242", "publisher": "CSA", "title": "A business logic vulnerability in Koollab LMS\nallowed an\nauthenticated learner to set their lesson completion ", "summary": "A business logic vulnerability in Koollab LMS\nallowed an\nauthenticated learner to set their lesson completion status to completed via\nthe SCORM commit endpoint without viewing the lesson material, compromising\ntraining and completion records.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.680", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63242"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16052, "pinned": false}, {"id": "CVE-2026-17767", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allow", "summary": "Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:39.880", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17767"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16636, "pinned": false}, {"id": "CVE-2026-17769", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote at", "summary": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.103", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17769"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16635, "pinned": false}, {"id": "CVE-2026-17772", "publisher": "Chrome", "title": "Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an ou", "summary": "Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.443", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17772"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16636, "pinned": false}, {"id": "CVE-2026-17773", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote at", "summary": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.557", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17773"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16637, "pinned": false}, {"id": "CVE-2026-17782", "publisher": "Chrome", "title": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack", "summary": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.510", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17782"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1483, "pinned": false}, {"id": "CVE-2026-17794", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowe", "summary": "Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.783", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17794"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1482, "pinned": false}, {"id": "CVE-2026-17802", "publisher": "Chrome", "title": "Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote at", "summary": "Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.633", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17802"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16635, "pinned": false}, {"id": "CVE-2026-17851", "publisher": "Chrome", "title": "Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.770", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17851"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16638, "pinned": false}, {"id": "CVE-2026-17859", "publisher": "Chrome", "title": "Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.663", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17859"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1664, "pinned": false}, {"id": "CVE-2026-56567", "publisher": "HCL Software", "title": "HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities", "summary": "HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00141, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:07.290", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["4.3.0"], "fixed": null, "safe": "before 4.3.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_4.3.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_4.3.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56567"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395"}], "cwe": ["CWE-15"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03135, "pinned": false}, {"id": "CVE-2026-34490", "publisher": "Johnson Controls", "title": "Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allow", "summary": "Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data.\n\nThis issue affects XAAP Application: before 1.53.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00103, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T18:17:14.150", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "xaap", "vendor": "johnsoncontrols", "type": "app", "affected": ["< 1.53"], "fixed": "1.53", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy xaap || rpm -q xaap || xaap --version"}, {"label": "2. UPGRADE to 1.53 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade xaap"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade xaap"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34490"}, {"t": "Vendor Advisory, Mitigation", "u": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.00923, "pinned": false}, {"id": "CVE-2026-17765", "publisher": "Chrome", "title": "Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker w", "summary": "Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:39.660", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17765"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11085, "pinned": false}, {"id": "CVE-2026-17775", "publisher": "Chrome", "title": "Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attac", "summary": "Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.777", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17775"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11084, "pinned": false}, {"id": "CVE-2026-17777", "publisher": "Chrome", "title": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:40.980", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17777"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11084, "pinned": false}, {"id": "CVE-2026-17783", "publisher": "Chrome", "title": "Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to le", "summary": "Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.617", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17783"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11085, "pinned": false}, {"id": "CVE-2026-17788", "publisher": "Chrome", "title": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to lea", "summary": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:42.160", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17788"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11086, "pinned": false}, {"id": "CVE-2026-17798", "publisher": "Chrome", "title": "Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak", "summary": "Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:43.210", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17798"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11079, "pinned": false}, {"id": "CVE-2026-17815", "publisher": "Chrome", "title": "Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.043", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17815"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11079, "pinned": false}, {"id": "CVE-2026-17817", "publisher": "Chrome", "title": "Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attac", "summary": "Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.257", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17817"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11079, "pinned": false}, {"id": "CVE-2026-17820", "publisher": "Chrome", "title": "Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:45.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17820"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11082, "pinned": false}, {"id": "CVE-2026-17829", "publisher": "Chrome", "title": "Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.470", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17829"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11079, "pinned": false}, {"id": "CVE-2026-17833", "publisher": "Chrome", "title": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.887", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17833"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11082, "pinned": false}, {"id": "CVE-2026-17843", "publisher": "Chrome", "title": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak ", "summary": "Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:47.940", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17843"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11083, "pinned": false}, {"id": "CVE-2026-17849", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via malicious network traffic. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.567", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17849"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12597, "pinned": false}, {"id": "CVE-2026-17857", "publisher": "Chrome", "title": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to l", "summary": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.450", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17857"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1108, "pinned": false}, {"id": "CVE-2026-17871", "publisher": "Chrome", "title": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh", "summary": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.030", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17871"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11081, "pinned": false}, {"id": "CVE-2026-17876", "publisher": "Chrome", "title": "Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.540", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17876"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11082, "pinned": false}, {"id": "CVE-2026-17879", "publisher": "Chrome", "title": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.840", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17879"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11081, "pinned": false}, {"id": "CVE-2026-17880", "publisher": "Chrome", "title": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:51.940", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17880"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11085, "pinned": false}, {"id": "CVE-2026-17885", "publisher": "Chrome", "title": "Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to lea", "summary": "Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:52.440", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17885"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11078, "pinned": false}, {"id": "CVE-2026-76383", "publisher": "Cisco Systems, Inc.", "title": "In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role", "summary": "In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's token_serial parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:24.467", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76383"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10993, "pinned": false}, {"id": "CVE-2026-17781", "publisher": "Chrome", "title": "Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who con", "summary": "Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:41.407", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17781"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08212, "pinned": false}, {"id": "CVE-2026-76384", "publisher": "Cisco Systems, Inc.", "title": "In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with ", "summary": "In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking either the detonate file or detonate url action, because the action's archive_password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter a", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00188, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T22:17:24.587", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76384"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07974, "pinned": false}, {"id": "CVE-2026-17844", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker", "summary": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:48.047", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17844"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04496, "pinned": false}, {"id": "CVE-2026-17870", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker", "summary": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:50.920", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17870"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04497, "pinned": false}, {"id": "CVE-2026-4932", "publisher": "IBM Corporation", "title": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker wi", "summary": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T19:17:36.287", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "power system s1122 \\(9824-22a\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1124 \\(9824-42a\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1122s \\(9824-22b\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1114 \\(9824-41b\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system l1122 \\(9856-22h\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system l1124 \\(9856-42h\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4932"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280632"}], "cwe": ["CWE-331"], "vector": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01321, "pinned": false}, {"id": "CVE-2026-56569", "publisher": "HCL Software", "title": "HCL iControl was affected by Sensitive Data Exposure vulnerabilities", "summary": "HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T16:17:07.523", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["4.3.0"], "fixed": null, "safe": "before 4.3.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_4.3.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_4.3.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56569"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.034, "pinned": false}, {"id": "CVE-2023-30985", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (", "summary": "A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)", "cvss": 3.3, "sev": "LOW", "epss": 0.00201, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:18.267", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "solid edge se2023", "vendor": "siemens", "type": "app", "affected": ["all versions", "update_0001"], "fixed": null, "safe": "before update_0001", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2023 || rpm -q solid-edge-se2023 || solid-edge-se2023 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before update_0001 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2023\nsudo apt install solid-edge-se2023=<VERSION_BEFORE_update_0001>\nsudo apt-mark hold solid-edge-se2023"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2023\nsudo dnf downgrade solid-edge-se2023-<VERSION_BEFORE_update_0001>\nsudo dnf versionlock add solid-edge-se2023"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-30985"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09488, "pinned": false}, {"id": "CVE-2026-63241", "publisher": "CSA", "title": "An insecure direct object reference\nvulnerability in Koollab LMS allowed an authenticated user to query the co", "summary": "An insecure direct object reference\nvulnerability in Koollab LMS allowed an authenticated user to query the course completion progress\nof any other user without authorisation, disclosing private learning progress\ninformation.", "cvss": 3.1, "sev": "LOW", "epss": 0.00221, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:43.567", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63241"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11946, "pinned": false}, {"id": "CVE-2023-27408", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1)", "summary": "A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.", "cvss": 3.3, "sev": "LOW", "epss": 0.00169, "kev": false, "added": "2023-05-09", "pub": "2023-05-09T13:15:16.727", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "scalance lpe9403 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.1"], "fixed": "2.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-27408"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf"}], "cwe": ["CWE-378"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05928, "pinned": false}, {"id": "CVE-2023-31135", "publisher": "GitHub, Inc.", "title": "Dgraph is an open source distributed GraphQL database", "summary": "Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being encrypted. This is problematic because two log lines will often have the same length, so due to these collisions we are reusing the same nonce many times. A", "cvss": 3.3, "sev": "LOW", "epss": 0.00153, "kev": false, "added": "2023-05-17", "pub": "2023-05-17T18:15:09.437", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "dgraph", "vendor": "dgraph", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dgraph || rpm -q dgraph || dgraph --version"}, {"label": "2. UPGRADE to 23.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dgraph"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dgraph"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-31135"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/dgraph-io/dgraph/pull/8323"}, {"t": "Vendor Advisory", "u": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/dgraph-io/dgraph/pull/8323"}, {"t": "Vendor Advisory", "u": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47"}], "cwe": ["CWE-326"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04115, "pinned": false}, {"id": "CVE-2026-17826", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 3.1, "sev": "LOW", "epss": 0.00184, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:46.157", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17826"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07623, "pinned": false}, {"id": "CVE-2026-58039", "publisher": "HackerOne", "title": "A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --a", "summary": "A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths.\n\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\n\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.", "cvss": 3.3, "sev": "LOW", "epss": 0.00155, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T01:16:31.530", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58039"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04269, "pinned": false}, {"id": "CVE-2026-66884", "publisher": "EEF", "title": "Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCa", "summary": "Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete an authorization flow the victim never initiated.\n\nThis vulnerability is associated with program file lib/oidcc/plug/authorization_callback.ex and program routine Oidcc.Plug.AuthorizationCallback.call/2.\n\nA callback request that carries no Oidcc.Plug.Authorize session i", "cvss": 2.1, "sev": "LOW", "epss": 0.00306, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T12:16:36.373", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66884"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22185, "pinned": false}, {"id": "CVE-2026-63228", "publisher": "CSA", "title": "An unrestricted image upload vulnerability in\nKoollab LMS allowed\nan authenticated attacker to upload maliciou", "summary": "An unrestricted image upload vulnerability in\nKoollab LMS allowed\nan authenticated attacker to upload malicious content disguised as an image\nfile via the feedback mail registration endpoint, potentially enabling further\nattacks on the server.", "cvss": 2.6, "sev": "LOW", "epss": 0.00205, "kev": false, "added": "2026-07-29", "pub": "2026-07-29T07:16:42.160", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63228"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10019, "pinned": false}, {"id": "CVE-2026-17766", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 all", "summary": "Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 3.3, "sev": "LOW", "epss": 0.00125, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:39.767", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17766"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02037, "pinned": false}, {"id": "CVE-2026-17860", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowe", "summary": "Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)", "cvss": 3.3, "sev": "LOW", "epss": 0.00116, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:49.777", "modified": "2026-10-23T23:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17860"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01497, "pinned": false}, {"id": "CVE-2026-54787", "publisher": "GitHub, Inc.", "title": "sigstore-go is a Go library for Sigstore signing and verification", "summary": "sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired key material to sign accepted bundles. This issue is fixed in version 1.2.1.", "cvss": 3.1, "sev": "LOW", "epss": 0.00134, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T23:17:25.287", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54787"}], "cwe": ["CWE-324"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02611, "pinned": false}, {"id": "CVE-2026-65636", "publisher": "EEF", "title": "Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attack", "summary": "Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single # prefix without validating it or escaping line breaks. Because a YAML comment is terminated by a line break, the first carriage return or line feed in t", "cvss": 2.1, "sev": "LOW", "epss": 0.00197, "kev": false, "added": "2026-07-31", "pub": "2026-07-31T14:16:51.240", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65636"}], "cwe": ["CWE-93"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08888, "pinned": false}, {"id": "CVE-2026-54619", "publisher": "GitHub, Inc.", "title": "sqlite3 provides Ruby bindings for the SQLite3 embedded database", "summary": "sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.", "cvss": 2.0, "sev": "LOW", "epss": 0.00142, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:52.650", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54619"}], "cwe": ["CWE-416"], "vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03169, "pinned": false}, {"id": "CVE-2026-54620", "publisher": "GitHub, Inc.", "title": "sqlite3 provides Ruby bindings for the SQLite3 embedded database", "summary": "sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.", "cvss": 2.0, "sev": "LOW", "epss": 0.00142, "kev": false, "added": "2026-07-28", "pub": "2026-07-28T17:16:52.790", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54620"}], "cwe": ["CWE-416"], "vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03169, "pinned": false}, {"id": "CVE-2026-64565", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix heap-buffer-overflow", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()\n\nThe `ims_pcu_process_data()` processes incoming URB data byte by byte.\nHowever, it fails to check if the `read_pos` index exceeds\nIMS_PCU_BUF_SIZE.\n\nIf a malicious USB device sends a packet larger than IMS_PCU_BUF_SIZE,\n`read_pos` will increment indefinitely. Moreover, since `read_pos` is\nlocated immediately af", "cvss": "n/a", "sev": "HIGH", "epss": 0.00184, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T07:16:31.477", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64565"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.07599, "pinned": false}, {"id": "CVE-2026-74672", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmalloc: acquire init_mm lock on huge ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF\n\nPatch series \"mm: fix UAF caused by race between ptdump and vmap pgtable\nfreeing\", v6.\n\nKernel page table walkers fall into two broad categories - those ranges\nwhere no exclusion is required via walk_kernel_page_table_range_lockless()\nand those where exclusion is required via walk_kernel_page_table_range()\nor wal", "cvss": "n/a", "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T16:16:41.200", "modified": "2026-10-23T23:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74672"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.06348, "pinned": false}, {"id": "CVE-2026-96643", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpo", "cvss": 7.1, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:20:32.797", "modified": "2026-10-23T22:17:01.590", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96643"}], "cwe": ["CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25364, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-g4qv-2jxx-769h", "note": "vulnerable: >= 11.0.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-96637", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multipl", "cvss": 7.1, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:20:31.927", "modified": "2026-10-23T22:17:01.413", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96637"}], "cwe": ["CWE-400", "CWE-409"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25364, "vendors": [{"os": "Python (pip)", "pkg": "pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"pillow>=13.0.0\"\npip show pillow", "url": "https://github.com/advisories/GHSA-g842-9rc4-69pw", "note": "vulnerable: < 13.0.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79976", "publisher": "Zephyr Project", "title": "The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-regis", "summary": "The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus controller first writes a register number and then writes or reads payload bytes. The selected register (b->reg_addr) and the data-phase flag (b->rxtx) were never cleared when the controller issued an I2C STOP, so after a completed transfer the target still had a data register selected while the packet buffer that ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00207, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:04.060", "modified": "2026-10-23T22:17:01.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79976"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10209, "pinned": false}, {"id": "CVE-2026-78119", "publisher": "Zephyr Project", "title": "The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/esp", "summary": "The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c), taking the 12-bit length field directly out of the request header in the FLASHRXBUF FIFO. For write and RPMC OP1 requests it copied DIV_ROUND_UP(len, 4) words into struct espi_taf_pckt.src, a fixed 16-word (64-byte) member of a static structure, without ever comparing the length against that buffer or against the negotiated eSP", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00111, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:03.920", "modified": "2026-10-23T22:17:00.597", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78119"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01276, "pinned": false}, {"id": "CVE-2026-78118", "publisher": "Zephyr Project", "title": "The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP s", "summary": "The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it was called from several places without holding the scheduler spinlock _sched_spinlock that serializes wait-queue mutation. The consequential call site is z_timer_expiration_handler() in kernel/timer.c, which held only the timer subsystem lock timer_lock while reading timer->wait_q and then unpending, setting the return value of,", "cvss": 7.0, "sev": "HIGH", "epss": 0.00083, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:03.787", "modified": "2026-10-23T22:17:00.450", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78118"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00223, "pinned": false}, {"id": "CVE-2026-78117", "publisher": "Zephyr Project", "title": "The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing H", "summary": "The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cy_stc_ble_hci_tx_packet_info_t hci_tx_pkt. psoc6_bless_send() cleared and populated that descriptor's packetType, dataLength and data fields before acquiring psoc6_bless_operation_sem, so the driver's serialising semaphore protected only the call into Cy_BLE_SoftHciSendAppPkt() and no", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:03.653", "modified": "2026-10-23T22:17:00.333", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78117"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02006, "pinned": false}, {"id": "CVE-2026-78116", "publisher": "Zephyr Project", "title": "The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evalua", "summary": "The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/afbr_s50/afbr_s50.c), a non-STATUS_OK return from Argus_EvaluateData() calls handle_error_on_result(), which finalises the request with rtio_iodev_sqe_err(), but execution then fell through to the tail of the function and finalised the very same struct rtio_iodev_sqe a seco", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:03.517", "modified": "2026-10-23T22:17:00.220", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78116"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05968, "pinned": false}, {"id": "CVE-2026-75507", "publisher": "GitHub, Inc.", "title": "GraphQL-core is a Python port of the GraphQL.js reference implementation", "summary": "GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation phase. The prior named-fragment memoization does not cover this path, so nested repeated inline fragments can drive quadratic and worst-case O(n\u00b2\u00b7m\u00b2) C", "cvss": 7.5, "sev": "HIGH", "epss": 0.00556, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T17:16:59.757", "modified": "2026-10-23T22:17:00.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75507"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45661, "vendors": [{"os": "Python (pip)", "pkg": "graphql-core", "status": "fixed", "fixed": "3.2.12", "cmd": "pip install --upgrade \"graphql-core>=3.2.12\"\npip show graphql-core", "url": "https://github.com/advisories/GHSA-vj8h-fx38-h3vc", "note": "vulnerable: >= 3.0.0, < 3.2.12"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "graphql-core", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "graphql-core", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-19947", "publisher": "Zephyr Project", "title": "The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_g", "summary": "The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and devmux_select_set(). When CONFIG_USERSPACE is enabled, their user-mode verifiers z_vrfy_devmux_select_get() and z_vrfy_devmux_select_set() forwarded directly to the kernel implementations without performing any kernel-object validation \u2014 no k_object_access_check() and no driver object check. Compounding this, DEVICE_DT_INST_DEFIN", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00097, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:02.787", "modified": "2026-10-23T22:16:59.977", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19947"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00695, "pinned": false}, {"id": "CVE-2026-19676", "publisher": "Zephyr Project", "title": "The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handle", "summary": "The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the caller-supplied struct peci_msg with k_usermode_from_copy(). That copy validates the outer structure only; the buf pointers and len values inside the embedded struct peci_buf members tx_buffer and rx_buffer remained fully caller-controlled and were passed unchecked to the driv", "cvss": 7.8, "sev": "HIGH", "epss": 0.00114, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:02.650", "modified": "2026-10-23T22:16:59.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19676"}], "cwe": ["CWE-822"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01438, "pinned": false}, {"id": "CVE-2026-18748", "publisher": "Zephyr Project", "title": "The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte", "summary": "The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP peer sent a codec IE longer than 8 bytes, a2dp_process_config_ind() in subsys/bluetooth/host/classic/a2dp.c copied only the first 8 bytes but assigned the full, attacker-chosen length to len, and then persisted that inconsistent structure into the application's struct bt_a2dp_", "cvss": 3.5, "sev": "LOW", "epss": 0.00158, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:02.503", "modified": "2026-10-23T22:16:59.753", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18748"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04568, "pinned": false}, {"id": "CVE-2026-115938", "publisher": "Hackrate", "title": "Craft CMS allows any authenticated control panel user to submit an element-search condition whose element sele", "summary": "Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft\u2019s allowed\u00a0column\u00a0filter delegates property lookup to Yii\u00a0ArrayHelper, outside Twig\u2019s\u00a0SecurityPolicy. Repeated single-segment lookups therefore bypass the sandbox\u2019s empty property/method allowlists.\n\n\n\nThe vulnerable condition value is ultimately cast to an integer. That does not", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:59.597", "modified": "2026-10-23T22:16:59.597", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115938"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115937", "publisher": "Hackrate", "title": "The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that th", "summary": "The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together:\n\n  *  commerceTransactionHash\u00a0\u2014 selects which Craft Commerce transaction is completed\n  *  id\u00a0\u2014 selects which Mollie payment is queried for its status\n\n\n\n\nAn unauthenticated attacker holding any paid Mollie payment ID from the merchant\u2019s account can pair it with any transaction hash.\n\n\n\nCommerce queries Mollie, sees\u00a0st", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:59.453", "modified": "2026-10-23T22:16:59.453", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115937"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115935", "publisher": "Hackrate", "title": "The\u00a0app/process-api-response-headers\u00a0action accepts fake Craft API response headers from any authenticated con", "summary": "The\u00a0app/process-api-response-headers\u00a0action accepts fake Craft API response headers from any authenticated control panel user.\n\n\n\nA non-admin user with only\u00a0accessCp\u00a0can place newline characters in\u00a0X-Craft-Plugin-Licenses. Craft passes this value to its\u00a0.env\u00a0writer without removing the newlines.\n\n\n\nThis lets the user insert a new attacker-known\u00a0CRAFT_SECURITY_KEY\u00a0into\u00a0.env. After Craft loads that key, the user can forge a signed login redirect co", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:59.290", "modified": "2026-10-23T22:16:59.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115935"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115897", "publisher": "GitHub, Inc.", "title": "Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and ", "summary": "Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix. Because each function body is escaped independently, a delimiter supplied by surrounding serialized output can terminate an HTML script element, and a lat", "cvss": 2.1, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:59.153", "modified": "2026-10-23T22:16:59.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115897"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115895", "publisher": "GitHub, Inc.", "title": "Happy DOM is a JavaScript implementation of a web browser without its graphical user interface", "summary": "Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it is a JavaScript binding identifier before inserting it into a generated destructuring binding. With enableJavaScriptEvaluation enabled, attacker-controlled HTML or module source can use an invalid alias that be", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.987", "modified": "2026-10-23T22:16:58.987", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115895"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115893", "publisher": "GitHub, Inc.", "title": "Wasmtime is a runtime for WebAssembly", "summary": "Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary other code at a user-controlled offset, allowing a user-controlled Wasm module to escape the sandbox on aarch64 engines using the default Cranelift backe", "cvss": 9.9, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.820", "modified": "2026-10-23T22:16:58.947", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115893"}], "cwe": ["CWE-691"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115892", "publisher": "GitHub, Inc.", "title": "Wasmtime is a runtime for WebAssembly", "summary": "Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns through StreamAny, FutureAny, Val::Stream, Val::Future, or an equivalent typed reader. A malicious guest that controls exported function types or returned values can cause the host to pass the type-erased value ", "cvss": 5.7, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.633", "modified": "2026-10-23T22:16:58.777", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115892"}], "cwe": ["CWE-248", "CWE-843"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115889", "publisher": "GitHub, Inc.", "title": "Wasmtime is a runtime for WebAssembly", "summary": "Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with many SSA values. The overflow can make Cranelift reference incorrect IR values, causing arbitrary miscompilation, type confusion, and other attacker-controlled effects that may escape the Wasm ", "cvss": 9.9, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.400", "modified": "2026-10-23T22:16:58.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115889"}], "cwe": ["CWE-197", "CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115887", "publisher": "GitHub, Inc.", "title": "GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas", "summary": "GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneNumber value contains a run of digits followed by a character that makes the match fail. GraphQL evaluates parseLiteral during document validation and parseValue during variable coercion befor", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.253", "modified": "2026-10-23T22:16:58.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115887"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115886", "publisher": "GitHub, Inc.", "title": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning model", "summary": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party scorer data that Scorer.model_validate_json resolves using a module-path allowlist without constraining the selected class or its constructor arguments.", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:58.110", "modified": "2026-10-23T22:16:58.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115886"}], "cwe": ["CWE-470", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115885", "publisher": "GitHub, Inc.", "title": "The LangGraph CLI is the official command-line interface for LangGraph", "summary": "The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who can read resulting CI logs or terminal recordings before the token's maximum 12-hour expiration can pull deployment images or push images to that deploymen", "cvss": 4.1, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:57.970", "modified": "2026-10-23T22:16:57.970", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115885"}], "cwe": ["CWE-532"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115883", "publisher": "GitHub, Inc.", "title": "LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and ", "summary": "LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with \".\".join(namespace), while BaseStore validates labels only for put and aput. Unvalidated dotted labels passed through get, search, delete, list_names", "cvss": 6.0, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:57.820", "modified": "2026-10-23T22:16:57.820", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115883"}], "cwe": ["CWE-20", "CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115801", "publisher": "VulDB", "title": "A security flaw has been discovered in Kakao khaiii up to 0.4", "summary": "A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor explains: \"khaiii treats the ", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T22:16:57.613", "modified": "2026-10-23T22:16:57.613", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115801"}], "cwe": ["CWE-119", "CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115247", "publisher": "VulDB", "title": "A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1", "summary": "A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument pat_pswd/doc_pswd leads to missing encryption of sensitive data. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00107, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:38.447", "modified": "2026-10-23T22:16:57.480", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115247"}], "cwe": ["CWE-310", "CWE-311"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01098, "pinned": false}, {"id": "CVE-2026-114576", "publisher": "VulDB", "title": "A vulnerability has been found in Linksys RE6250 1.0.04.001", "summary": "A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.", "cvss": 3.7, "sev": "LOW", "epss": 0.0041, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:55.440", "modified": "2026-10-23T22:16:57.337", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114576"}], "cwe": ["CWE-310", "CWE-330"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34114, "pinned": false}, {"id": "CVE-2026-114508", "publisher": "GitHub, Inc.", "title": "Laravel is a web application framework", "summary": "Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T22:16:49.553", "modified": "2026-10-23T22:16:57.220", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114508"}], "cwe": ["CWE-470"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22265, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114441", "publisher": "VulDB", "title": "A weakness has been identified in oretnom23 php-travel-agency-system", "summary": "A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/full_name/visa_no/hiden/title/description/page_id/user causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous update", "cvss": 7.3, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T23:17:25.927", "modified": "2026-10-23T22:16:57.083", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114441"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26621, "pinned": false}, {"id": "CVE-2026-114384", "publisher": "VulDB", "title": "A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0", "summary": "A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T22:16:49.240", "modified": "2026-10-23T22:16:56.947", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114384"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16906, "pinned": false}, {"id": "CVE-2026-114381", "publisher": "VulDB", "title": "A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0", "summary": "A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T22:16:48.747", "modified": "2026-10-23T22:16:56.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114381"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16906, "pinned": false}, {"id": "CVE-2026-114378", "publisher": "VulDB", "title": "A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0", "summary": "A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:17:57.747", "modified": "2026-10-23T22:16:56.673", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114378"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10549, "pinned": false}, {"id": "CVE-2026-114375", "publisher": "VulDB", "title": "A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1", "summary": "A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of the argument currentPath/newName results in path traversal. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.9.2 is able to address this issue.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00308, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:26.100", "modified": "2026-10-23T22:16:56.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114375"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2244, "pinned": false}, {"id": "CVE-2026-114266", "publisher": "VulDB", "title": "A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0", "summary": "A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulation of the argument admin_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00201, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:00.317", "modified": "2026-10-23T22:16:56.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114266"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09488, "pinned": false}, {"id": "CVE-2026-114141", "publisher": "GitHub, Inc.", "title": "toml-node is a TOML parser for Node.js and the browser", "summary": "toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct [[name]] paths are not pruned, so a document with many such headers causes quadratic synchronous work and can block the Node.js event loop, denying service to other operations in the process", "cvss": 8.7, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:17:56.667", "modified": "2026-10-23T22:16:56.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114141"}], "cwe": ["CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20602, "vendors": [{"os": "npm", "pkg": "toml", "status": "fixed", "fixed": "5.0.1", "cmd": "npm install toml@\">=5.0.1\"\nnpm ls toml", "url": "https://github.com/advisories/GHSA-4qx8-w7c3-pj3p", "note": "vulnerable: <= 5.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "cockpit-image-builder", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-112381", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via ha", "summary": "Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports.\n\n\n\nThis issue affects Apache Traffic Server: 9.2.15, 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issu", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:23.733", "modified": "2026-10-23T22:16:56.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112381"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.16244, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111817", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.con", "summary": "Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.config.http.drop_chunked_trailers) until the connection times out, because it waits for the trailer bytes it has already dropped. Trailer dropping is on by default in 10.x. In 8.1.11 and 9.2.x it is off by default, and those versions are affected only if it is enabled.\n\n\n\nThis issue affects Apache Traffic Server: 8.1.11, from 9.2.5 through 9", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00262, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:23.467", "modified": "2026-10-23T22:16:56.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111817"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.17108, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111816", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, beca", "summary": "Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection path. A response that two peers can read differently is then stored and served, allowing cache poisoning and response-framing desync.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\n", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00237, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:59.330", "modified": "2026-10-23T22:16:55.903", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111816"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13887, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111810", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @", "summary": "Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the proxy write far more log data than the request contains.\n\n\n\nThis issue affects Apache Traffic Server: 9.2.15, 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:22.780", "modified": "2026-10-23T22:16:55.780", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111810"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.17135, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111808", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DA", "summary": "Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:22.427", "modified": "2026-10-23T22:16:55.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111808"}], "cwe": ["CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24223, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111805", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2 Content-L", "summary": "Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2 Content-Length value.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:22.257", "modified": "2026-10-23T22:16:55.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111805"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24223, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111804", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and for", "summary": "Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API.\n\n\n\nThis issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 10.1.5 or 10.2.1, which fix the issue.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:59.007", "modified": "2026-10-23T22:16:55.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111804"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.12963, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-109299", "publisher": "VulnCheck", "title": "Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users", "summary": "Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update endpoints, blocking the shared event loop for seconds per request.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:23.540", "modified": "2026-10-23T22:16:55.073", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109299"}], "cwe": ["CWE-400", "CWE-834"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30362, "pinned": false}, {"id": "CVE-2026-109298", "publisher": "VulnCheck", "title": "Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tool", "summary": "Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grep_knowledge_files with short nested-repetition patterns, blocking the event loop and exhausting worker memory.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00393, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:23.390", "modified": "2026-10-23T22:16:54.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109298"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32233, "pinned": false}, {"id": "CVE-2026-109297", "publisher": "VulnCheck", "title": "Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule v", "summary": "Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:23.240", "modified": "2026-10-23T22:16:54.797", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109297"}], "cwe": ["CWE-400", "CWE-436"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22287, "pinned": false}, {"id": "CVE-2026-109296", "publisher": "VulnCheck", "title": "Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to rea", "summary": "Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00275, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:23.097", "modified": "2026-10-23T22:16:54.650", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109296"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18955, "pinned": false}, {"id": "CVE-2026-109295", "publisher": "VulnCheck", "title": "Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows", "summary": "Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:22.950", "modified": "2026-10-23T22:16:54.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109295"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22289, "pinned": false}, {"id": "CVE-2026-109294", "publisher": "VulnCheck", "title": "Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows a", "summary": "Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:22.800", "modified": "2026-10-23T22:16:54.333", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109294"}], "cwe": ["CWE-400", "CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22289, "pinned": false}, {"id": "CVE-2026-109290", "publisher": "VulnCheck", "title": "Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelt", "summary": "Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing administrator's session token from local storage and take over the instance.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:22.210", "modified": "2026-10-23T22:16:53.993", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109290"}], "cwe": ["CWE-79", "CWE-1021"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.16219, "pinned": false}, {"id": "CVE-2026-109287", "publisher": "VulnCheck", "title": "Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does ", "summary": "Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00222, "kev": false, "added": "2026-10-12", "pub": "2026-10-12T17:17:21.763", "modified": "2026-10-23T22:16:53.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109287"}], "cwe": ["CWE-639", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12156, "pinned": false}, {"id": "CVE-2026-108358", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, XmlScanner::scan in src/PhpSpreadsheet/Reader/Security/XmlScanner.php uses a DOCTYPE detection pattern that accounts for NUL-byte interleaving but not ISO-2022 escape sequences in XLSX XML parts. The escape sequences prevent the scanner from matching the declaration, and XML charset normalization then removes the esc", "cvss": 8.8, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:26.553", "modified": "2026-10-23T22:16:53.307", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108358"}], "cwe": ["CWE-611", "CWE-776"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31421, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-108357", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. From 3.3.0 until 3.10.8 and 5.10.0, Reader\\Xml passes stored SpreadsheetML XML through XmlScanner::scan in Xml::canRead and Xml::trySimpleXMLLoadStringPrivate, while Xml::unentity decodes numeric entities only after each DOCTYPE pattern check. A double-encoded less-than character is reduced by the first callback to another encoded character and by the second callback ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00285, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:26.377", "modified": "2026-10-23T22:16:53.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108357"}], "cwe": ["CWE-611", "CWE-776"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19995, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105945", "publisher": "Apache Software Foundation", "title": "The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the brok", "summary": "The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and namespace, while the storage location of a package is derived from all of these components. The version component of a package name was not validated, so it ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00493, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:57.660", "modified": "2026-10-23T22:16:53.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105945"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.41441, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105944", "publisher": "Apache Software Foundation", "title": "Apache Pulsar Manager is a web console for administering Apache Pulsar clusters", "summary": "Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured with an HTTP authentication credential, such as a token, that it uses to call the Pulsar admin API on behalf of its users. Pulsar Manager has the following security issues:\n\n- The operation for creating the initial administrator (superuser) account is available without authentication, and it remains ava", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00703, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:57.437", "modified": "2026-10-23T22:16:52.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105944"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52767, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-105942", "publisher": "Apache Software Foundation", "title": "When a configured proxy role sends a request to the broker on behalf of another user (the original principal),", "summary": "When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its own permissions. Two flaws weakened this check.\n\nFirst, the original principal was authorized with the proxy's authentication data instead of its own. On", "cvss": 7.7, "sev": "HIGH", "epss": 0.0039, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:57.203", "modified": "2026-10-23T22:16:52.683", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105942"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31978, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105938", "publisher": "Apache Software Foundation", "title": "Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription ", "summary": "Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a subscription name to start with the role name, or by granting permission on a subscription to specific roles. Topic-level subscription operations, such as consuming, skipping messages, resetting a cursor or deleting a subscription, apply these subscription policies. Several admin REST API operations t", "cvss": 2.3, "sev": "LOW", "epss": 0.00512, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:56.970", "modified": "2026-10-23T22:16:52.497", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105938"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42812, "pinned": false}, {"id": "CVE-2026-105937", "publisher": "Apache Software Foundation", "title": "Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that top", "summary": "Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is selected by setting the reserved topic property PULSAR.SHADOW_SOURCE. The admin REST API accepts this property when creating a non-partitioned or partitioned topic and when updating the properties of an existing topic. On these paths the broker authorizes the caller only against the topic being cre", "cvss": 8.7, "sev": "HIGH", "epss": 0.00235, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:56.730", "modified": "2026-10-23T22:16:52.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105937"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13666, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105936", "publisher": "Apache Software Foundation", "title": "The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors in", "summary": "The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint (/admin/v2/worker/connectors) and the deprecated functions connectors endpoint (/admin/v2/functions/connectors and /admin/v3/functions/connectors). When authorization is enabled, the worker connectors endpoint requires super-user access. The functions connectors endpoint, ser", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00408, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:56.540", "modified": "2026-10-23T22:16:52.147", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105936"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33925, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105935", "publisher": "Apache Software Foundation", "title": "The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-s", "summary": "The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured broker-client credentials rather than the credentials of the API caller.\n\nWhen authorization is enabled, in Apache Pulsar 2.4.0 and later versions, the trig", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:56.320", "modified": "2026-10-23T22:16:51.977", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105935"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.32828, "pinned": false}, {"id": "CVE-2026-105934", "publisher": "Apache Software Foundation", "title": "The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/", "summary": "The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent/{tenant}/{namespace}/{topic}/truncate). Truncating a topic moves all subscription cursors of the topic to the end of the topic and deletes the topic's inactive ledgers. Truncating a non-partitioned topic, or a single partition addressed by its partition name, correctly requires the tenant admin role or the superuser role. When ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00482, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:56.103", "modified": "2026-10-23T22:16:51.803", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105934"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40647, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2024-58396", "publisher": "VulnCheck", "title": "YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated", "summary": "YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with ../ sequences in fileId to retrieve system files like /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-01-13.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:06.203", "modified": "2026-10-23T22:16:51.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-58396"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31867, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2022-51025", "publisher": "VulnCheck", "title": "Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticate", "summary": "Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=db_backup and ../ sequences in name to read files like /etc/passwd, and a hardcoded systemi account makes authentication effectively trivial. Exploitation evidence was first observed by the Shadowserver Founda", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:05.593", "modified": "2026-10-23T22:16:51.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51025"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30072, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2022-51021", "publisher": "VulnCheck", "title": "NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability", "summary": "NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supplying an array-form 'id' parameter to /wp-json/notificationx/v1/notification/{id}. Attackers can pass id[1] with crafted SQL, such as time-based SLEEP payloads, along with an api_key derived from md5(home_url()), which flows unsanitized into Database::get_where_query to e", "cvss": 8.2, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:04.990", "modified": "2026-10-23T22:16:51.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51021"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30541, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2021-48014", "publisher": "VulnCheck", "title": "FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operatio", "summary": "FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a __CONTENT__ payload to write a JSP webshell and achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-1", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01669, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:04.390", "modified": "2026-10-23T22:16:51.227", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48014"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.76617, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2019-25778", "publisher": "VulnCheck", "title": "SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to man", "summary": "SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter. Attackers can send GET requests to /comment/api/index.php with crafted rlist[] values using backtick-quoted variables and extractvalue to extract database information via error messages. Exploitation evidence was first observed by the Shadowserver Foundation on", "cvss": 8.2, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:03.777", "modified": "2026-10-23T22:16:51.077", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2019-25778"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3054, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2017-20289", "publisher": "VulnCheck", "title": "Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability t", "summary": "Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in the 'step' parameter, optionally with a null byte, to include local files and execute PHP code. Exploitation evidence was first observed by the Shadowse", "cvss": 7.5, "sev": "HIGH", "epss": 0.00762, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:03.063", "modified": "2026-10-23T22:16:50.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2017-20289"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54894, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-18577", "publisher": "N-able", "title": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "summary": "An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1", "cvss": 8.1, "sev": "HIGH", "epss": 0.14622, "kev": true, "added": "2026-08-02", "pub": "2026-08-02T23:16:26.210", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["< 2026.3", "2026.3"], "fixed": "2026.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to 2026.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18577"}, {"t": "Patch, Release Notes", "u": "https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm"}, {"t": "Vendor Advisory", "u": "https://www.n-able.com/blog/n-central-security-update-august-2-2026"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-08-06", "kev_added": "2026-08-03", "ransom": false, "priority": 86, "tier": "P0", "why": ["High severity", "EPSS top 3%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96656, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-18577 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-18577", "stars": 0}, {"kind": "nuclei", "name": "N-able N-central < 2026.3.1.10 - Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18577.yaml"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18556", "publisher": "N-able", "title": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "summary": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.", "cvss": 7.4, "sev": "HIGH", "epss": 0.07882, "kev": true, "added": "2026-08-01", "pub": "2026-08-01T20:16:37.157", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["<= 2026.1"], "fixed": "newer than 2026.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to newer than 2026.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18556"}, {"t": "Vendor Advisory", "u": "https://uptime.n-able.com/"}, {"t": "Vendor Advisory", "u": "https://www.n-able.com/blog/n-central-security-update-august-2-2026"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-08-07", "kev_added": "2026-08-04", "ransom": false, "priority": 83, "tier": "P0", "why": ["High severity", "EPSS top 5%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.94705, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "CreamyG31337/ncentral-compromise-ioc-triage (0 stars)", "url": "https://github.com/CreamyG31337/ncentral-compromise-ioc-triage", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67208", "publisher": "VulnCheck", "title": "Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attacke", "summary": "Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint, authenticate with default credentials, and leverage the H2 CREATE ALIAS Runtime.exec() technique to execute arbitrary commands, resulting in root-level code ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.04265, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:14.323", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67208"}], "cwe": ["CWE-306", "CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "EPSS top 9%: very likely to be exploited", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.91044, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/somta/Juggle/issues/86", "url": "https://github.com/somta/Juggle/issues/86"}, {"kind": "nuclei", "name": "Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-67208.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-6424", "publisher": "Mozilla Corporation", "title": "A use-after-free in FontFaceSet resulted in a potentially exploitable crash", "summary": "A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0439, "kev": false, "added": "2025-06-24", "pub": "2025-06-24T13:15:23.273", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.25.0", "< 140.0", ">= 116.0 and < 128.12.0"], "fixed": "115.25.0, 128.12.0, 140.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.25.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-6424"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-52/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 65, "tier": "P1", "why": ["Critical severity", "EPSS top 9%: very likely to be exploited", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.91276, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "128.12.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"128.12.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "128.12.0esr-1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"128.12.0esr-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:128.12.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:128.12.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:128.12.0esr-1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:128.12.0esr-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "fixed", "fixed": "firefox-128.12.0-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:10073\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-128.12.0-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:10195\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-128.12.0-1.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:10181\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "fixed", "fixed": "firefox-128.12.0-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:10074\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-128.12.0-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:10246\nrpm -q thunderbird", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1055", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-6424.html", "note": "ALAS2023-2025-1055"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "bugzilla.mozilla.org/show_bug.cgi?id=1966423", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1966423"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-52680", "publisher": "Apache Software Foundation", "title": "Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a", "summary": "Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to write controlled content outside the intended upload directory, subject to filesystem permissions.\n\n\nThis issue affects Apache Kyuubi: from 1.7.0 through ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0111, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:14.040", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "kyuubi", "vendor": "apache", "type": "app", "affected": [">= 1.7.0 and < 1.12.0"], "fixed": "1.12.0", "safe": "before 1.7.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kyuubi || rpm -q kyuubi || kyuubi --version"}, {"label": "2. UPGRADE to 1.12.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kyuubi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kyuubi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison kyuubi\nsudo apt install kyuubi=<VERSION_BEFORE_1.7.0>\nsudo apt-mark hold kyuubi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list kyuubi\nsudo dnf downgrade kyuubi-<VERSION_BEFORE_1.7.0>\nsudo dnf versionlock add kyuubi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52680"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/b0qx2v8k5v4rrqsh53pb146t7so0lmrk"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.65661, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "0xdak/CVE-2026-52680_exploit (0 stars)", "url": "https://github.com/0xdak/CVE-2026-52680_exploit", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-38709", "publisher": "MITRE", "title": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,", "summary": "TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the net.set_wan interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02753, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:54.970", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38709"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.86127, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66803", "publisher": "Microsoft Corporation", "title": "Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.", "summary": "Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00901, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:12.743", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "azure cosmos db", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-cosmos-db || rpm -q azure-cosmos-db || azure-cosmos-db --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66803"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66803"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5934, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18588", "publisher": "VulDB", "title": "A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628", "summary": "A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01096, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T07:16:43.047", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18588"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65304, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-34282", "publisher": "VulnCheck", "title": "ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Ima", "summary": "ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01818, "kev": false, "added": "2025-10-17", "pub": "2025-10-17T19:15:37.340", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "thingsboard", "vendor": "thingsboard", "type": "app", "affected": ["< 4.2.1"], "fixed": "4.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thingsboard || rpm -q thingsboard || thingsboard --version"}, {"label": "2. UPGRADE to 4.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thingsboard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thingsboard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34282"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.78575, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "mathitam/thingsboard-ssrf-cve-2025-34282 (0 stars)", "url": "https://github.com/mathitam/thingsboard-ssrf-cve-2025-34282", "stars": 0}, {"kind": "edb", "name": "ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)", "url": "https://www.exploit-db.com/exploits/52551"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-11700", "publisher": "N-able", "title": "N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information ", "summary": "N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure", "cvss": 7.5, "sev": "HIGH", "epss": 0.31682, "kev": false, "added": "2025-11-12", "pub": "2025-11-12T16:15:35.487", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["< 2025.4"], "fixed": "2025.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to 2025.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11700"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["High severity", "EPSS top 2%: very likely to be exploited", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98299, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "msf", "name": "N-able N-Central Authentication Bypass and XXE Scanner", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nable_ncentral_auth_bypass_xxe.rb"}, {"kind": "nuclei", "name": "N-central - XML External Entities Injection", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11700.yaml"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68502", "publisher": "GitHub, Inc.", "title": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework", "summary": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShell.do_cmd and subprocess.call(command, shell=True), allowing unauthenticated remote code execution in the C2 process. This issue is fixed in 0.2.154.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00973, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:13.317", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68502"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61686, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/grisuno/LazyOwn/releases/tag/release/0.2.154", "url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154"}, {"kind": "writeup", "name": "github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28812", "publisher": "Apache Software Foundation", "title": "UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to es", "summary": "UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.\nUsers are recommended to upgrade to version 2.12.4 or newer which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0069, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:10.967", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jspwiki", "vendor": "apache", "type": "app", "affected": ["< 2.12.4"], "fixed": "2.12.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jspwiki || rpm -q jspwiki || jspwiki --version"}, {"label": "2. UPGRADE to 2.12.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jspwiki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jspwiki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28812"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2p"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5225, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-9316", "publisher": "N-able", "title": "N-central < 2025.4 can generate sessionIDs for unauthenticated users\n\n\n\n\n\nThis issue affects N-central: before", "summary": "N-central < 2025.4 can generate sessionIDs for unauthenticated users\n\n\n\n\n\nThis issue affects N-central: before 2025.4.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.37387, "kev": false, "added": "2025-11-12", "pub": "2025-11-12T16:15:37.623", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-9316"}], "cwe": ["CWE-1284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P1", "why": ["EPSS top 1%: very likely to be exploited", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98531, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "horizon3ai/n-able_n-central_xxe_file_read (3 stars)", "url": "https://github.com/horizon3ai/n-able_n-central_xxe_file_read", "stars": 3}, {"kind": "poc", "name": "zyyyys123/CVE-2025-9316_CVE-2025-11700 (0 stars)", "url": "https://github.com/zyyyys123/CVE-2025-9316_CVE-2025-11700", "stars": 0}, {"kind": "msf", "name": "N-able N-Central Authentication Bypass and XXE Scanner", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nable_ncentral_auth_bypass_xxe.rb"}, {"kind": "nuclei", "name": "N-central - Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9316.yaml"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18589", "publisher": "VulDB", "title": "A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628", "summary": "A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed versi", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01096, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T07:16:43.260", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18589"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65302, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68503", "publisher": "GitHub, Inc.", "title": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework", "summary": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payload_schema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachable attacker who knows the defaults to authenticate to the C2 dashboard with operator-level access. This issue is fixed in 0.2.154.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00754, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:13.460", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68503"}], "cwe": ["CWE-1392"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54605, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/grisuno/LazyOwn/releases/tag/release/0.2.154", "url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154"}, {"kind": "writeup", "name": "github.com/grisuno/LazyOwn/security/advisories/GHSA-38jf-j9x7-jf6f", "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-38jf-j9x7-jf6f"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66756", "publisher": "Apache Software Foundation", "title": "Improper Protection of Alternate Path vulnerability in Apache Tika.\n\nThis issue affects Apache Tika: from 4.0.", "summary": "Improper Protection of Alternate Path vulnerability in Apache Tika.\n\nThis issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1.\n\nUsers are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00746, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:13.877", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "tika", "vendor": "apache", "type": "app", "affected": ["4.0.0 alpha1", "4.0.0 beta1-rc1"], "fixed": null, "safe": "before 4.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tika || rpm -q tika || tika --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison tika\nsudo apt install tika=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold tika"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tika\nsudo dnf downgrade tika-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add tika"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66756"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ynjg5lxwhqpc83pczf5y5561o2l4o568"}], "cwe": ["CWE-424"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54331, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}, {"os": "Ubuntu 20.04", "pkg": "tika", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "tika", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "tika", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48449", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi", "summary": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00859, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:24.957", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48449"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-114.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58091, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28323", "publisher": "SolarWinds", "title": "SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability", "summary": "SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01026, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:10.710", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "web help desk", "vendor": "solarwinds", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy web-help-desk || rpm -q web-help-desk || web-help-desk --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade web-help-desk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade web-help-desk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28323"}, {"t": "Release Notes, Vendor Advisory", "u": "https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm"}, {"t": "Vendor Advisory", "u": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28323"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.63307, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73343", "publisher": "Patchstack", "title": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "summary": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.0086, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:02.943", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73343"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58109, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-66915", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could ", "summary": "Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00823, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T10:17:33.310", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66915"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56949, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "mysites.guru/blog/fabrik-unauthenticated-rce-calc-element/", "url": "https://mysites.guru/blog/fabrik-unauthenticated-rce-calc-element/"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67282", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated", "summary": "Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.0078, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T09:17:30.590", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67282"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55462, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12940", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1\u00a0 are vulnerable to unauthenticated remote code execution via environment", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1\u00a0 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_ENV_VARS blocklist fails to include SHELLOPTS , BASHOPTS , and PS4 environment variables.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00943, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:28.040", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12940"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279995"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60682, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "BiiTts/CVE-2026-12940-Langflow-Unauth-RCE (4 stars)", "url": "https://github.com/BiiTts/CVE-2026-12940-Langflow-Unauth-RCE", "stars": 4}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12118", "publisher": "IBM Corporation", "title": "IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute ar", "summary": "IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00849, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:04.483", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "webmethods integration", "vendor": "ibm", "type": "app", "affected": ["10.11", "10.15"], "fixed": null, "safe": "before 10.11", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webmethods-integration || rpm -q webmethods-integration || webmethods-integration --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 10.11 (Debian / Ubuntu)", "cmd": "apt-cache madison webmethods-integration\nsudo apt install webmethods-integration=<VERSION_BEFORE_10.11>\nsudo apt-mark hold webmethods-integration"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webmethods-integration\nsudo dnf downgrade webmethods-integration-<VERSION_BEFORE_10.11>\nsudo dnf versionlock add webmethods-integration"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12118"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7278857"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57731, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "uday952/CVE-2026-12118-POC- (0 stars)", "url": "https://github.com/uday952/CVE-2026-12118-POC-", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67594", "publisher": "VulnCheck", "title": "Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated re", "summary": "Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers can invoke approximately 50 unprotected API endpoints to enumerate and provision servers, reset root passwords, read and write arbitrary files on the host,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00846, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:15.173", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67594"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57647, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-49710", "publisher": "Mozilla Corporation", "title": "An integer overflow was present in `OrderedHashTable` used by the JavaScript engine", "summary": "An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00744, "kev": false, "added": "2025-06-11", "pub": "2025-06-11T12:15:27.083", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 139.0.4"], "fixed": "139.0.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 139.0.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-49710"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-47/"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54266, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-49901", "publisher": "Patchstack", "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory q", "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00731, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:36.243", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-49901"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53793, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "Nxploited/CVE-2025-49901 (0 stars)", "url": "https://github.com/Nxploited/CVE-2025-49901", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-15435", "publisher": "IBM Corporation", "title": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote att", "summary": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00734, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:26.757", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "app connect enterprise", "vendor": "ibm", "type": "app", "affected": [">= 12.0.1.0 and < 12.0.12.28", ">= 13.0.1.0 and < 13.0.8.0"], "fixed": "12.0.12.28, 13.0.8.0", "safe": "before 12.0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy app-connect-enterprise || rpm -q app-connect-enterprise || app-connect-enterprise --version"}, {"label": "2. UPGRADE to 12.0.12.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade app-connect-enterprise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade app-connect-enterprise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison app-connect-enterprise\nsudo apt install app-connect-enterprise=<VERSION_BEFORE_12.0.1.0>\nsudo apt-mark hold app-connect-enterprise"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list app-connect-enterprise\nsudo dnf downgrade app-connect-enterprise-<VERSION_BEFORE_12.0.1.0>\nsudo dnf versionlock add app-connect-enterprise"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15435"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281896"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53894, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65321", "publisher": "VulnCheck", "title": "PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to injec", "summary": "PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied i", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00767, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T15:16:33.957", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65321"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55074, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "rahulreddykarne/CVE-2026-65321-pyathena (0 stars)", "url": "https://github.com/rahulreddykarne/CVE-2026-65321-pyathena", "stars": 0}, {"kind": "writeup", "name": "rahulkarne.com/#/cve/CVE-2026-65321", "url": "https://rahulkarne.com/#/cve/CVE-2026-65321"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-33591", "publisher": "ENISA", "title": "A vulnerability in Wapt Server before version 2.6.1.17813 allows a\u00a0 remote unauthenticated attacker to bypass\n", "summary": "A vulnerability in Wapt Server before version 2.6.1.17813 allows a\u00a0 remote unauthenticated attacker to bypass\nsecurity restriction using a specially crafted packet and retrieve a valid\nsession token for the targeted account.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00714, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T10:16:28.610", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33591"}], "cwe": ["CWE-288"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53185, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-0-16856-2026-06-09", "url": "https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-0-16856-2026-06-09"}, {"kind": "writeup", "name": "www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-1-17813-2026-06-09", "url": "https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-1-17813-2026-06-09"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18598", "publisher": "VulDB", "title": "A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulne", "cvss": 8.8, "sev": "HIGH", "epss": 0.03212, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T13:17:13.140", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18598"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.881, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/logread_get_system_log_rpc_rce", "url": "https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/logread_get_system_log_rpc_rce/CVE.md"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-76604", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2", "summary": "Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00696, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.440", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76604"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52477, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-76605", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.", "summary": "Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00696, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.563", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76605"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52476, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17544", "publisher": "PHP Group", "title": "Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PH", "summary": "Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00418, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:17:27.347", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.4.0 and < 8.4.24", ">= 8.5.0 and < 8.5.9"], "fixed": "8.4.24, 8.5.9", "safe": "before 8.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.4.24 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.4.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.4.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17544"}, {"t": "Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35032, "pinned": false, "pocs": [{"kind": "poc", "name": "Boreas37/CVE-2026-17544-PoC (6 stars)", "url": "https://github.com/Boreas37/CVE-2026-17544-PoC", "stars": 6}, {"kind": "poc", "name": "r2qa/CVE-2026-17544 (0 stars)", "url": "https://github.com/r2qa/CVE-2026-17544", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.24-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.24-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "fixed", "fixed": "php8.4-8.4.24-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:56969\nrpm -q php8.4", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:7.4/php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php85", "status": "fixed", "fixed": "php85-8.5.12-r0", "cmd": "apk add --upgrade php85\napk info -v php85", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.24-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2042", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-17544.html", "note": "ALAS2023-2026-2042"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2025-11367", "publisher": "N-able", "title": "The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization", "summary": "The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00627, "kev": false, "added": "2025-11-12", "pub": "2025-11-12T16:15:35.353", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["< 2025.4"], "fixed": "2025.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to 2025.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11367"}, {"t": "Vendor Advisory", "u": "https://me.n-able.com/s/security-advisory/aArVy0000000rfRKAQ/cve202511367-ncentral-windows-software-probe-remote-code-execution"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49423, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-8457", "publisher": "Wordfence", "title": "The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up ", "summary": "The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Apple id_token and decoding only its base64 payload without verifying the JWT signature against Apple's public keys or validating the issuer, audience, or expiry claims, combined with the security nonce required to invoke the login flow being publicly ex", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00704, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T00:16:23.047", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8457"}], "cwe": ["CWE-289"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52778, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-62025", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch:", "summary": "Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00581, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:16:03.913", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62025"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47019, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-11366", "publisher": "N-able", "title": "N-central < 2025.4 is vulnerable to authentication bypass via path traversal", "summary": "N-central < 2025.4 is vulnerable to authentication bypass via path traversal", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00604, "kev": false, "added": "2025-11-12", "pub": "2025-11-12T16:15:35.197", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["< 2025.4"], "fixed": "2025.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to 2025.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11366"}, {"t": "Vendor Advisory", "u": "https://me.n-able.com/s/security-advisory/aArVy0000000rcDKAQ/cve202511366-ncentral-authentication-bypass-via-path-traversal"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48241, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-50229", "publisher": "MITRE", "title": "Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.", "summary": "Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00359, "kev": false, "added": "2026-04-23", "pub": "2026-04-23T16:16:23.593", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jizhicms", "vendor": "jizhicms", "type": "app", "affected": ["2.5.4"], "fixed": null, "safe": "before 2.5.4", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jizhicms || rpm -q jizhicms || jizhicms --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.5.4 (Debian / Ubuntu)", "cmd": "apt-cache madison jizhicms\nsudo apt install jizhicms=<VERSION_BEFORE_2.5.4>\nsudo apt-mark hold jizhicms"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jizhicms\nsudo dnf downgrade jizhicms-<VERSION_BEFORE_2.5.4>\nsudo dnf versionlock add jizhicms"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-50229"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28466, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67341", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION stat", "summary": "ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can execute arbitrary JavaScript code by submitting DEFINE FUNCTION statements, bypassing security controls intended to restrict scripting to administrators.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00543, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.273", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67341"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44854, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67342", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series", "summary": "ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling affected endpoints with arbitrary database parameters.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00543, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.417", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67342"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44853, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18599", "publisher": "VulDB", "title": "A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record_size causes command injection. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 8.0, "sev": "HIGH", "epss": 0.04444, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T13:17:13.337", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18599"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "EPSS top 9%: very likely to be exploited", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.91375, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/logread_set_config_rpc_rce/CVE", "url": "https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/logread_set_config_rpc_rce/CVE.md"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2025-40795", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions", "summary": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service conditi", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00721, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T09:15:37.343", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic pcs neo", "vendor": "siemens", "type": "app", "affected": ["4.1", "5.0"], "fixed": null, "safe": "before 4.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-pcs-neo || rpm -q simatic-pcs-neo || simatic-pcs-neo --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-pcs-neo\nsudo apt install simatic-pcs-neo=<VERSION_BEFORE_4.1>\nsudo apt-mark hold simatic-pcs-neo"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-pcs-neo\nsudo dnf downgrade simatic-pcs-neo-<VERSION_BEFORE_4.1>\nsudo dnf versionlock add simatic-pcs-neo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "user management component", "vendor": "siemens", "type": "app", "affected": ["< 2.15.1.3"], "fixed": "2.15.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy user-management-component || rpm -q user-management-component || user-management-component --version"}, {"label": "2. UPGRADE to 2.15.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade user-management-component"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade user-management-component"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40795"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-722410.html"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53429, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-36045", "publisher": "MITRE", "title": "picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shel", "summary": "picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command execution using a denylist of 8 regular expressions, but the denylist is incomplete.", "cvss": 7.3, "sev": "HIGH", "epss": 0.01768, "kev": false, "added": "2026-05-27", "pub": "2026-05-27T14:16:45.287", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-36045"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.77955, "pinned": false, "pocs": [{"kind": "writeup", "name": "gist.github.com/NucleiAv/41899be6266a9813840301577792ed68", "url": "https://gist.github.com/NucleiAv/41899be6266a9813840301577792ed68"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/sipeed/picoclaw", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-cv2p-68f4-f4pw", "note": "vulnerable: <= 0.1.2"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53431", "publisher": "EEF", "title": "Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained ", "summary": "Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previously valid JWT client assertion to authenticate as the issuing OAuth client after the assertion has expired.\n\nBoruta accepts JWT-based client authentication (client_secret_jwt and private_key_jwt token endpoint authentication methods) but never enforces that the assertion's exp claim is in the future. The pre-check helper Boruta.O", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00701, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:33.567", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53431"}], "cwe": ["CWE-294"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5271, "pinned": false, "pocs": [{"kind": "writeup", "name": "cna.erlef.org/cves/CVE-2026-53431.html", "url": "https://cna.erlef.org/cves/CVE-2026-53431.html"}, {"kind": "writeup", "name": "github.com/malach-it/boruta_auth/security/advisories/GHSA-xjv8-vmh5-xhf6", "url": "https://github.com/malach-it/boruta_auth/security/advisories/GHSA-xjv8-vmh5-xhf6"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-2346", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc", "summary": "Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack.\n\nThis issue affects Mobile App: through 12.05.2026.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00512, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T13:17:39.513", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-2346"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42844, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66587", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.", "summary": "Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00497, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T12:16:52.837", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66587"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41738, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18245", "publisher": "AMZN", "title": "Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote", "summary": "Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318.\n\n\n\nTo remediate this issue, users should upg", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00987, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:26.610", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "amplify codegen ui", "vendor": "amazon", "type": "app", "affected": ["< 2.20.6"], "fixed": "2.20.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls amplify-codegen-ui"}, {"label": "2. UPGRADE to 2.20.6", "cmd": "npm install amplify-codegen-ui@\">=2.20.6\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18245"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-066-aws/"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-74xx-rjgf-m69j"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6212, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-4978", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vis", "summary": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.\n\nThis issue affects Traffic Analysis System: from 30 before 34.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00468, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:12.933", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4978"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39594, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2025-34522", "publisher": "VulnCheck", "title": "A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protecti", "summary": "A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending specially crafted input to the target system. Improper bounds checking allows an attacker to overwrite heap memory, potentially leading to application crashes or remote code execution. Exploitation occurs in the context of the affected process and does not require user", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00556, "kev": false, "added": "2025-08-27", "pub": "2025-08-27T22:15:58.040", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "udp", "vendor": "arcserve", "type": "app", "affected": ["< 7.0", ">= 8.0 and < 10.2", "7.0", "7.0 update_1", "7.0 update_2"], "fixed": "7.0, 10.2", "safe": "before 7.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy udp || rpm -q udp || udp --version"}, {"label": "2. UPGRADE to 7.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade udp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade udp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison udp\nsudo apt install udp=<VERSION_BEFORE_7.0>\nsudo apt-mark hold udp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list udp\nsudo dnf downgrade udp-<VERSION_BEFORE_7.0>\nsudo dnf versionlock add udp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34522"}, {"t": "Vendor Advisory", "u": "https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45627, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-11709", "publisher": "Mozilla Corporation", "title": "A compromised web process was able to trigger out of bounds reads and writes in a more privileged process usin", "summary": "A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00422, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.093", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.29.0", "< 144.0", ">= 116.0 and < 140.4.0"], "fixed": "115.29.0, 140.4.0, 144.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.29.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 144.0"], "fixed": "144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 144.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11709"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-82/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35487, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18154\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18320\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-4.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19278\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18285\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18983\nrpm -q thunderbird", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1246", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11709.html", "note": "ALAS2023-2025-1246"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2025-3052", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11709.html", "note": "ALAS2-2025-3052"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2025-11710", "publisher": "Mozilla Corporation", "title": "A compromised web process using malicious IPC messages could have caused the privileged browser process to rev", "summary": "A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00422, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.203", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.29.0", "< 144.0", ">= 116.0 and < 140.4.0"], "fixed": "115.29.0, 140.4.0, 144.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.29.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11710"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-82/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35487, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "firefox-esr", "status": "fixed", "fixed": "140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-esr\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' firefox-esr)\" ge \"140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "fixed", "fixed": "1:140.4.0esr-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' thunderbird)\" ge \"1:140.4.0esr-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18154\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18320\nrpm -q thunderbird", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-4.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19278\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "fixed", "fixed": "firefox-140.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18285\nrpm -q firefox", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "fixed", "fixed": "thunderbird-140.4.0-2.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:18983\nrpm -q thunderbird", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1246", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11710.html", "note": "ALAS2023-2025-1246"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2025-3052", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-11710.html", "note": "ALAS2-2025-3052"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76607", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.", "summary": "Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.797", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76607"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33703, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-77995", "publisher": "Joomla! Project", "title": "Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Singl", "summary": "Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On \u2013 OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00406, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T14:17:03.403", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77995"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3371, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2025-6519", "publisher": "Armis", "title": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated passw", "summary": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:38.607", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-6519"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2025-40765", "publisher": "Siemens AG", "title": "A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3)", "summary": "A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00534, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:38.127", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "telecontrol server basic", "vendor": "siemens", "type": "app", "affected": ["3.1.2.2"], "fixed": null, "safe": "before 3.1.2.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy telecontrol-server-basic || rpm -q telecontrol-server-basic || telecontrol-server-basic --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.1.2.2 (Debian / Ubuntu)", "cmd": "apt-cache madison telecontrol-server-basic\nsudo apt install telecontrol-server-basic=<VERSION_BEFORE_3.1.2.2>\nsudo apt-mark hold telecontrol-server-basic"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list telecontrol-server-basic\nsudo dnf downgrade telecontrol-server-basic-<VERSION_BEFORE_3.1.2.2>\nsudo dnf versionlock add telecontrol-server-basic"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40765"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-062309.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44303, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2025-40771", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMA", "summary": "A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAI", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00528, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:38.297", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40771"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43866, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2025-61581", "publisher": "Apache Software Foundation", "title": "** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Cont", "summary": "** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control.\n\nThis issue affects Apache Traffic Control: all versions.\n\nPeople with access to the management interface of the Traffic Router component could specify malicious patterns and cause unavailability.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or re", "cvss": 7.5, "sev": "HIGH", "epss": 0.00736, "kev": false, "added": "2025-10-16", "pub": "2025-10-16T09:15:35.670", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "traffic control", "vendor": "apache", "type": "app", "affected": ["<= 8.0.2"], "fixed": "newer than 8.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-control || rpm -q traffic-control || traffic-control --version"}, {"label": "2. UPGRADE to newer than 8.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-control"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-control"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-61581"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/mx2jxgnlop2f4vbqnvmrldh4pqmobxvp"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53991, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/apache/trafficcontrol/v8", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-9m49-p2j3-c6xm", "note": "vulnerable: <= 8.0.2"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2025-58963", "publisher": "Patchstack", "title": "Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Sh", "summary": "Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00489, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:52.830", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58963"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41172, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54363", "publisher": "VulnCheck", "title": "CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attac", "summary": "CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for AccessTicket.Encrypt() and AccessTicket.Decrypt() across all installations. Attackers can use the hardcoded key to craft valid x-glad-auth headers and call privileged API endpoints such as acquiretenantbackuptoken to obtain a domain adminis", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00686, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T13:16:51.223", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54363"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28811", "publisher": "Apache Software Foundation", "title": "Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3.\nUsers are recommended to upgr", "summary": "Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3.\nUsers are recommended to upgrade to version 2.12.4, which fixes this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00789, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:10.850", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jspwiki", "vendor": "apache", "type": "app", "affected": ["< 2.12.4"], "fixed": "2.12.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jspwiki || rpm -q jspwiki || jspwiki --version"}, {"label": "2. UPGRADE to 2.12.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jspwiki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jspwiki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28811"}, {"t": "Vendor Advisory", "u": "https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28811"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/2dm414zzjo3pvhjz6mvqy3b5yhvnkcg5"}], "cwe": ["CWE-1295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55801, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66418", "publisher": "VulnCheck", "title": "OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated rem", "summary": "OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed login POST request, which is recorded verbatim in the audit log. When an administrator opens the notification panel, the unescaped log entry is rendered via innerHTML with a permissive Content-Security-Policy allowing inline event handl", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00633, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:12.490", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "openclaw agent dashboard", "vendor": "tugcantopaloglu", "type": "app", "affected": ["<= 3.0.0"], "fixed": "newer than 3.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openclaw-agent-dashboard || rpm -q openclaw-agent-dashboard || openclaw-agent-dashboard --version"}, {"label": "2. UPGRADE to newer than 3.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openclaw-agent-dashboard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openclaw-agent-dashboard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418"}, {"t": "Exploit, Mitigation", "u": "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover"}, {"t": "Exploit, Mitigation", "u": "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.4971, "pinned": false, "pocs": [{"kind": "poc", "name": "theopaid/CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field (1 stars)", "url": "https://github.com/theopaid/CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field", "stars": 1}, {"kind": "writeup", "name": "github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-A", "url": "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2025-66844", "publisher": "MITRE", "title": "In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page c", "summary": "In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00291, "kev": false, "added": "2025-12-15", "pub": "2025-12-15T16:15:53.497", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "grav", "vendor": "getgrav", "type": "app", "affected": ["< 1.7.49.5"], "fixed": "1.7.49.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy grav || rpm -q grav || grav --version"}, {"label": "2. UPGRADE to 1.7.49.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade grav"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade grav"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-66844"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2052, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-729w-j79f-2c34", "note": "vulnerable: <= 1.7.49.5"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54722", "publisher": "GitHub, Inc.", "title": "DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks", "summary": "DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP validation and cause a client using the original URL to reach an internal service. This issue is fixed in version 1.0.4.", "cvss": 8.7, "sev": "HIGH", "epss": 0.0057, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:33.180", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54722"}], "cwe": ["CWE-76"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46465, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/HackingRepo/dssrf-js/issues/97", "url": "https://github.com/HackingRepo/dssrf-js/issues/97"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "dssrf", "status": "fixed", "fixed": "1.0.4", "cmd": "npm install dssrf@\">=1.0.4\"\nnpm ls dssrf", "url": "https://github.com/advisories/GHSA-cg4g-m8jx-vjv2", "note": "vulnerable: <= 1.0.3"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74253", "publisher": "Joomla! Project", "title": "Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer ", "summary": "Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla\u2019s final rendered HTML without reliably determining where that code originated.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00323, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:14.780", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74253"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24134, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28814", "publisher": "Apache Software Foundation", "title": "Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker t", "summary": "Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables.\nUsers are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00657, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:11.183", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jspwiki", "vendor": "apache", "type": "app", "affected": ["< 2.12.4"], "fixed": "2.12.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jspwiki || rpm -q jspwiki || jspwiki --version"}, {"label": "2. UPGRADE to 2.12.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jspwiki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jspwiki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28814"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/8vv0311bvrrqxsyn913pcwf7pctyk52w"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50842, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66755", "publisher": "Apache Software Foundation", "title": "Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1", "summary": "Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their contents emitted into the extracted text output, via a \"Study Assay File Name\" value in the ISA-Tab investigation file that traverses outside the dataset ", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:13.717", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "tika", "vendor": "apache", "type": "app", "affected": [">= 1.8 and < 3.3.2", "4.0.0 alpha1", "4.0.0 beta1-rc1"], "fixed": "3.3.2", "safe": "before 1.8", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tika || rpm -q tika || tika --version"}, {"label": "2. UPGRADE to 3.3.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tika"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tika"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.8 (Debian / Ubuntu)", "cmd": "apt-cache madison tika\nsudo apt install tika=<VERSION_BEFORE_1.8>\nsudo apt-mark hold tika"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tika\nsudo dnf downgrade tika-<VERSION_BEFORE_1.8>\nsudo dnf versionlock add tika"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66755"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/0hcctcp9s5lxgq2ookp4o6chltk99f8r"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.496, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47754", "publisher": "GitHub, Inc.", "title": "Metacat is data repository software that helps researchers preserve, share, and discover data", "summary": "Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal in the `archiveEntryName` parameter of the `action=read` endpoint that is part of the original 1.x Metacat API. `ArchiveHandler.readArchiveEntry()` concatenates the user-supplied parameter into a filesystem path without validation, and the surrounding `hasReadPerm", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00475, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T16:19:47.797", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47754"}], "cwe": ["CWE-22", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40132, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-67285", "publisher": "Joomla! Project", "title": "Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.", "summary": "Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00506, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T14:18:33.423", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67285"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42325, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-74254", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder ", "summary": "Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00386, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:14.903", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74254"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31452, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-22620", "publisher": "Eaton", "title": "Improper input validation in the authentication component of\u00a0Eaton's Tripp Lite series\u00a0PADM firmware could all", "summary": "Improper input validation in the authentication component of\u00a0Eaton's Tripp Lite series\u00a0PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00655, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T11:16:27.130", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-22620"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5079, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-77992", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUp", "summary": "Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.00444, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:23.293", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77992"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37586, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18363", "publisher": "Spanish National Cybersecurity Institute, S.A. (INCIBE)", "title": "A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior", "summary": "A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period has expired. Consequently, the expiry check is only performed if the timestamp lookup fails, allowing tokens with an existing timestamp to bypass the inten", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00478, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T11:16:26.220", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18363"}], "cwe": ["CWE-640"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40306, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-14522", "publisher": "IBM Corporation", "title": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote att", "summary": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01016, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:25.693", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "app connect enterprise", "vendor": "ibm", "type": "app", "affected": [">= 12.0.1.0 and < 12.0.12.28", ">= 13.0.1.0 and < 13.0.8.0"], "fixed": "12.0.12.28, 13.0.8.0", "safe": "before 12.0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy app-connect-enterprise || rpm -q app-connect-enterprise || app-connect-enterprise --version"}, {"label": "2. UPGRADE to 12.0.12.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade app-connect-enterprise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade app-connect-enterprise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison app-connect-enterprise\nsudo apt install app-connect-enterprise=<VERSION_BEFORE_12.0.1.0>\nsudo apt-mark hold app-connect-enterprise"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list app-connect-enterprise\nsudo dnf downgrade app-connect-enterprise-<VERSION_BEFORE_12.0.1.0>\nsudo dnf versionlock add app-connect-enterprise"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14522"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281897"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.63003, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-44617", "publisher": "Apache Software Foundation", "title": "LDAP filter injection vulnerability in Apache Zeppelin", "summary": "LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00838, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:12.373", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "zeppelin", "vendor": "apache", "type": "app", "affected": [">= 0.11.1 and < 0.12.1"], "fixed": "0.12.1", "safe": "before 0.11.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zeppelin || rpm -q zeppelin || zeppelin --version"}, {"label": "2. UPGRADE to 0.12.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zeppelin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zeppelin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.11.1 (Debian / Ubuntu)", "cmd": "apt-cache madison zeppelin\nsudo apt install zeppelin=<VERSION_BEFORE_0.11.1>\nsudo apt-mark hold zeppelin"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list zeppelin\nsudo dnf downgrade zeppelin-<VERSION_BEFORE_0.11.1>\nsudo dnf versionlock add zeppelin"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44617"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/zeppelin/pull/5226"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zv"}], "cwe": ["CWE-90"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.57394, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/apache/zeppelin/pull/5226", "url": "https://github.com/apache/zeppelin/pull/5226"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-12946", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, du", "summary": "IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00632, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:16:52.293", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.1"], "fixed": "1.10.1", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12946"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7278928"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.49649, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69079", "publisher": "CIRCL", "title": "CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_tim", "summary": "CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range.\n\nA remote, unauthenticated attacker could submit an excessively large value for this parameter, causing the application to retrieve and process activity data over an arbitrarily large period. This could consume excess", "cvss": 8.7, "sev": "HIGH", "epss": 0.00544, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T10:16:33.407", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69079"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44939, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73339", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.", "summary": "Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:02.480", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73339"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33141, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-74015", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Readabler < 2.0.18 versions.", "summary": "Unauthenticated SQL Injection in Readabler < 2.0.18 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:09.833", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74015"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33122, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-34181", "publisher": "VulnCheck", "title": "NetSupport Manager\u00a0< 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gate", "summary": "NetSupport Manager\u00a0< 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server. This can be leveraged to place attacker-controlled DLLs or executables in privileged paths and achieve remote code execution in the context of the Net", "cvss": 8.7, "sev": "HIGH", "epss": 0.01036, "kev": false, "added": "2025-12-15", "pub": "2025-12-15T15:15:49.863", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34181"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.63613, "pinned": false, "pocs": [{"kind": "writeup", "name": "ret2.me/post/2025-12-04-exploiting-netsupport-gateway/", "url": "https://ret2.me/post/2025-12-04-exploiting-netsupport-gateway/"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48448", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:24.810", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48448"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-114.html"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58046", "publisher": "HackerOne", "title": "Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform ", "summary": "Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00575, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.430", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58046"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.46762, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17543", "publisher": "PHP Group", "title": "Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP ", "summary": "Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions\u00a0from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0033, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:17:27.120", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.33", ">= 8.3.0 and < 8.3.33", ">= 8.4.0 and < 8.4.24", ">= 8.5.0 and < 8.5.9"], "fixed": "8.2.33, 8.3.33, 8.4.24, 8.5.9", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.33 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17543"}, {"t": "Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24927, "pinned": false, "pocs": [{"kind": "poc", "name": "Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout (1 stars)", "url": "https://github.com/Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout", "stars": 1}, {"kind": "poc", "name": "pratham220/CVE-2026-17543-PHP-Exposure-Validator (0 stars)", "url": "https://github.com/pratham220/CVE-2026-17543-PHP-Exposure-Validator", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.33-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.33-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.24-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.24-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "fixed", "fixed": "php8.4-8.4.24-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:56969\nrpm -q php8.4", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "fixed", "fixed": "php-8.3.33-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:62614\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "php", "status": "fixed", "fixed": "php-8.0.30-8.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:61259\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.33-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2044", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-17543.html", "note": "ALAS2023-2026-2044"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67346", "publisher": "VulnCheck", "title": "Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is", "summary": "Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve to private, loopback, or metadata addresses to reach internal services and exfiltrate credentials.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00506, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:35.953", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67346"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4232, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/kyegomez/swarms/issues/1714", "url": "https://github.com/kyegomez/swarms/issues/1714"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-13435", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sa", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0053, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:06.840", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13435"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279987"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43987, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54894", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unboun", "summary": "Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input.\n\nGuardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :\"guardian_<input>\", and the derived helpers claims_key/1, resource_key/1, and token_key/1 c", "cvss": 7.5, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T19:16:41.977", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "guardian", "vendor": "ueberauth", "type": "app", "affected": ["< 2.4.1"], "fixed": "2.4.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy guardian || rpm -q guardian || guardian --version"}, {"label": "2. UPGRADE to 2.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade guardian"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade guardian"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54894"}, {"t": "Patch", "u": "https://github.com/ueberauth/guardian/commit/2952657e42e6341a67e6aaad09d8f0b40ae917cb"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-xqch-c77q-rgh5"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-xqch-c77q-rgh5"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40191, "pinned": false, "pocs": [{"kind": "writeup", "name": "cna.erlef.org/cves/CVE-2026-54894.html", "url": "https://cna.erlef.org/cves/CVE-2026-54894.html"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55733", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unboun", "summary": "Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input.\n\nGuardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_a", "cvss": 7.5, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T19:16:42.157", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "guardian", "vendor": "ueberauth", "type": "app", "affected": [">= 2.0.0 and < 2.4.1"], "fixed": "2.4.1", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy guardian || rpm -q guardian || guardian --version"}, {"label": "2. UPGRADE to 2.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade guardian"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade guardian"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison guardian\nsudo apt install guardian=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold guardian"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list guardian\nsudo dnf downgrade guardian-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add guardian"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55733"}, {"t": "Patch", "u": "https://github.com/ueberauth/guardian/commit/9cd268557846aa4c3ad53566c08f2c190ee5513f"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-fjr5-7xrc-hmpj"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-fjr5-7xrc-hmpj"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40192, "pinned": false, "pocs": [{"kind": "writeup", "name": "cna.erlef.org/cves/CVE-2026-55733.html", "url": "https://cna.erlef.org/cves/CVE-2026-55733.html"}, {"kind": "writeup", "name": "github.com/ueberauth/guardian/security/advisories/GHSA-fjr5-7xrc-hmpj", "url": "https://github.com/ueberauth/guardian/security/advisories/GHSA-fjr5-7xrc-hmpj"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55734", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion.\n\nThis vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/", "cvss": 7.5, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T19:16:42.333", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "guardian", "vendor": "ueberauth", "type": "app", "affected": [">= 2.0.0 and < 2.4.1"], "fixed": "2.4.1", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy guardian || rpm -q guardian || guardian --version"}, {"label": "2. UPGRADE to 2.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade guardian"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade guardian"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison guardian\nsudo apt install guardian=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold guardian"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list guardian\nsudo dnf downgrade guardian-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add guardian"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55734"}, {"t": "Patch", "u": "https://github.com/ueberauth/guardian/commit/8d4efbfc352d30f5fcfc75a4d69a795b0e472724"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-9qx2-v587-q3gg"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-9qx2-v587-q3gg"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40191, "pinned": false, "pocs": [{"kind": "writeup", "name": "cna.erlef.org/cves/CVE-2026-55734.html", "url": "https://cna.erlef.org/cves/CVE-2026-55734.html"}, {"kind": "writeup", "name": "github.com/ueberauth/guardian/security/advisories/GHSA-9qx2-v587-q3gg", "url": "https://github.com/ueberauth/guardian/security/advisories/GHSA-9qx2-v587-q3gg"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55735", "publisher": "EEF", "title": "Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to r", "summary": "Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token.\n\nGuardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementa", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T19:16:42.510", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "guardian", "vendor": "ueberauth", "type": "app", "affected": [">= 1.0.0 and < 2.4.1"], "fixed": "2.4.1", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy guardian || rpm -q guardian || guardian --version"}, {"label": "2. UPGRADE to 2.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade guardian"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade guardian"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison guardian\nsudo apt install guardian=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold guardian"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list guardian\nsudo dnf downgrade guardian-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add guardian"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55735"}, {"t": "Patch", "u": "https://github.com/ueberauth/guardian/commit/2bd7a8c29770d423d855c0a4965caa6c3e486901"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-7975-hp3r-5qhv"}, {"t": "Exploit, Patch", "u": "https://github.com/ueberauth/guardian/security/advisories/GHSA-7975-hp3r-5qhv"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38947, "pinned": false, "pocs": [{"kind": "writeup", "name": "cna.erlef.org/cves/CVE-2026-55735.html", "url": "https://cna.erlef.org/cves/CVE-2026-55735.html"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18587", "publisher": "VulDB", "title": "A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628", "summary": "A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. It is advisable to upgrade the affected component. ", "cvss": 7.5, "sev": "HIGH", "epss": 0.01975, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T07:16:42.813", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18587"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.80338, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76571", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik <", "summary": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.0042, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.383", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76571"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35237, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2025-58214", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.This issue affects Indutri: from n/a through < 1.3.0.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0059, "kev": false, "added": "2025-09-05", "pub": "2025-09-05T17:15:39.087", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58214"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.4753, "pinned": false}, {"id": "CVE-2025-11573", "publisher": "AMZN", "title": "An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial", "summary": "An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input.\n\nTo mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not receive further updates.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2025-10-09", "pub": "2025-10-09T18:15:49.543", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11573"}], "cwe": ["CWE-1286"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.36791, "pinned": false}, {"id": "CVE-2025-48089", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.0036, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:15:52.270", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-48089"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28642, "pinned": false}, {"id": "CVE-2025-40949", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All version", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00674, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:43.360", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40949"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-081142.html"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.51607, "pinned": false}, {"id": "CVE-2026-46746", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)", "summary": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injection of shell command payloads via crafted directory names. These payloads are stored and executed when directory listings are retrieved. This could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system w", "cvss": 8.8, "sev": "HIGH", "epss": 0.00794, "kev": false, "added": "2026-06-09", "pub": "2026-06-09T10:16:44.000", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinec ins", "vendor": "siemens", "type": "app", "affected": ["<= 1.0", "1.0 sp1", "1.0 sp2", "1.0 sp2_update_1", "1.0 sp2_update_2", "1.0 sp2_update_3", "1.0 sp2_update_4", "1.0 sp2_update_5"], "fixed": "newer than 1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-ins || rpm -q sinec-ins || sinec-ins --version"}, {"label": "2. UPGRADE to newer than 1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-ins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-ins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46746"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-860189.html"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55947, "pinned": false}, {"id": "CVE-2026-65635", "publisher": "EEF", "title": "Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) all", "summary": "Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients with administrative privileges through the dynamic client registration entry point. Boruta.Openid.register_client/3 forwards caller-supplied registration parameters to the administrative client creation path without a public/admin field-level allowlist, so an unauthenticated registrant can ", "cvss": 8.3, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:35.017", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65635"}], "cwe": ["CWE-653"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43601, "pinned": false}, {"id": "CVE-2026-18140", "publisher": "AMZN", "title": "Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which ", "summary": "Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via stack exhaustion) via a single small HTTP request containing deeply nested JSON to a smithy-rs generated server.\n\n\n\nTo remediate this issue, users should upgrade to aws-smi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:26.457", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "aws-smithy-json", "vendor": "amazon", "type": "app", "affected": ["< 0.62.7"], "fixed": "0.62.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aws-smithy-json || rpm -q aws-smithy-json || aws-smithy-json --version"}, {"label": "2. UPGRADE to 0.62.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aws-smithy-json"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aws-smithy-json"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.36254, "pinned": false}, {"id": "CVE-2026-55768", "publisher": "GitHub, Inc.", "title": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or thr", "summary": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18-exabyte allocation request that terminates the pr", "cvss": 8.7, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:17:57.193", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55768"}], "cwe": ["CWE-681", "CWE-789"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39901, "pinned": false}, {"id": "CVE-2026-76597", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in F", "summary": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.620", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76597"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37314, "pinned": false}, {"id": "CVE-2026-76598", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik ", "summary": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00465, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.733", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76598"}], "cwe": ["CWE-22", "CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3933, "pinned": false}, {"id": "CVE-2026-76602", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order para", "summary": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00386, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.200", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76602"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31453, "pinned": false}, {"id": "CVE-2026-69109", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3)", "summary": "A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00623, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:02.030", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69109"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4923, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-10533", "publisher": "Mozilla Corporation", "title": "Integer overflow in the SVG component", "summary": "Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00754, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:47.553", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.28.0", "< 143.0", ">= 116.0 and < 140.3"], "fixed": "115.28.0, 140.3, 143.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.28.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", ">= 141.0 and < 143.0"], "fixed": "140.3.0, 143.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10533"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-74/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54599, "pinned": false}, {"id": "CVE-2025-58955", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through < 2.6.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00519, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:52.287", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58955"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43299, "pinned": false}, {"id": "CVE-2025-58958", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through < 1.8.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:52.413", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "smilepure", "vendor": "thememove", "type": "app", "affected": ["< 1.8.5"], "fixed": "1.8.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy smilepure || rpm -q smilepure || smilepure --version"}, {"label": "2. UPGRADE to 1.8.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade smilepure"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade smilepure"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58958"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44324, "pinned": false}, {"id": "CVE-2025-58967", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through < 2.4.4.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:53.090", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "businext", "vendor": "thememove", "type": "app", "affected": ["< 2.4.4"], "fixed": "2.4.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy businext || rpm -q businext || businext --version"}, {"label": "2. UPGRADE to 2.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade businext"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade businext"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58967"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44323, "pinned": false}, {"id": "CVE-2025-59550", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Xcare xcare allows PHP Local File Inclusion.This issue affects Xcare: from n/a through < 6.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00519, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:53.850", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59550"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43299, "pinned": false}, {"id": "CVE-2025-59555", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Medizin medizin allows PHP Local File Inclusion.This issue affects Medizin: from n/a through < 1.9.7.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:53.977", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "medizin", "vendor": "thememove", "type": "app", "affected": ["< 1.9.7"], "fixed": "1.9.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy medizin || rpm -q medizin || medizin --version"}, {"label": "2. UPGRADE to 1.9.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade medizin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade medizin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59555"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44324, "pinned": false}, {"id": "CVE-2025-59558", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through < 2.1.6.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:55.127", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "billey", "vendor": "thememove", "type": "app", "affected": ["< 2.1.6"], "fixed": "2.1.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy billey || rpm -q billey || billey --version"}, {"label": "2. UPGRADE to 2.1.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade billey"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade billey"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59558"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44323, "pinned": false}, {"id": "CVE-2025-59564", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP Local File Inclusion.This issue affects EduMall: from n/a through < 4.4.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:55.297", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "edumall", "vendor": "thememove", "type": "app", "affected": ["< 4.4.5"], "fixed": "4.4.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edumall || rpm -q edumall || edumall --version"}, {"label": "2. UPGRADE to 4.4.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edumall"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edumall"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59564"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44324, "pinned": false}, {"id": "CVE-2025-62047", "publisher": "Patchstack", "title": "Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issu", "summary": "Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00448, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:11.303", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62047"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.37976, "pinned": false}, {"id": "CVE-2025-34179", "publisher": "VulnCheck", "title": "NetSupport Manager <\u00a014.12.0001\u00a0contains an unauthenticated SQL injection vulnerability in its Connectivity Se", "summary": "NetSupport Manager <\u00a014.12.0001\u00a0contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the LinkName/URI value, a remote attacker can control the FileName field used by the server to read and return files from disk, resulting in arbitrary local file discl", "cvss": 8.7, "sev": "HIGH", "epss": 0.00404, "kev": false, "added": "2025-12-15", "pub": "2025-12-15T15:15:49.573", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34179"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3348, "pinned": false}, {"id": "CVE-2026-18353", "publisher": "Eclipse Foundation", "title": "PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against a", "summary": "PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against an issuer allowlist using Python's `urlparse` before performing OIDC discovery with `requests`. Because `urlparse` and `requests`/`urllib3` parse an authority string containing a backslash (e.g. `https://attacker-host\\@ci.eclipse.org/`) into *different* hostnames, an attacker can craft an issuer that passes the allowlist check yet drives `", "cvss": 8.8, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T08:16:28.887", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18353"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.337, "pinned": false}, {"id": "CVE-2026-54368", "publisher": "VulnCheck", "title": "CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() t", "summary": "CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea()", "cvss": 8.8, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T13:16:51.910", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54368"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.52844, "pinned": false}, {"id": "CVE-2026-56428", "publisher": "Robert Bosch GmbH", "title": "The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an ", "summary": "The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00484, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:16:59.780", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56428"}], "cwe": ["CWE-286"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40745, "pinned": false}, {"id": "CVE-2026-60074", "publisher": "CPANSec", "title": "Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the n", "summary": "Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check.\n\nThe parse regexes capture year, month and day with the `\\d` shorthand, which on a character string matches the whole Unicode decimal digit property `\\p{Nd}` and not just `[0-9]`. Date::Manip::Base::check then validates the captured fields with numeric comparisons alone (`$y<1 || $y>9999`, `$m<1 || $m>12`, `$d", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:17:02.587", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60074"}], "cwe": ["CWE-1289"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49567, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3856 (important): perl-Date-Manip", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3856.html", "date": "2026-08-17"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-14519", "publisher": "IBM Corporation", "title": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote att", "summary": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00623, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:25.547", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "app connect enterprise", "vendor": "ibm", "type": "app", "affected": [">= 12.0.1.0 and < 12.0.12.28", ">= 13.0.1.0 and < 13.0.8.0"], "fixed": "12.0.12.28, 13.0.8.0", "safe": "before 12.0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy app-connect-enterprise || rpm -q app-connect-enterprise || app-connect-enterprise --version"}, {"label": "2. UPGRADE to 12.0.12.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade app-connect-enterprise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade app-connect-enterprise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison app-connect-enterprise\nsudo apt install app-connect-enterprise=<VERSION_BEFORE_12.0.1.0>\nsudo apt-mark hold app-connect-enterprise"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list app-connect-enterprise\nsudo dnf downgrade app-connect-enterprise-<VERSION_BEFORE_12.0.1.0>\nsudo dnf versionlock add app-connect-enterprise"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14519"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281897"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49232, "pinned": false}, {"id": "CVE-2026-12942", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot \" sequences ( /.. /) to view arbitrary files on the system.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00623, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:05.297", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12942"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279993"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49231, "pinned": false}, {"id": "CVE-2026-68500", "publisher": "GitHub, Inc.", "title": "Sylius Mollie Plugin provides Mollie payment integration for Sylius applications", "summary": "Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /{_locale}/update-payment payment webhook accepts attacker-controlled id and orderId parameters but does not verify that the Mollie payment belongs to the referenced Sylius order, allowing an unauthenticated attacker with any valid paid Mollie payment ID to mark a victim order as paid without transferring", "cvss": 7.5, "sev": "HIGH", "epss": 0.00681, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:13.007", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68500"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.51912, "pinned": false}, {"id": "CVE-2026-63559", "publisher": "ICS-CERT", "title": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote att", "summary": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to read \nout-of-bounds heap memory, potentially disclosing sensitive information.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00697, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:55.717", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63559"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52518, "pinned": false}, {"id": "CVE-2026-20479", "publisher": "MediaTek, Inc.", "title": "In Modem, there is a possible out of bounds read due to a missing bounds check", "summary": "In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.980", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt2735 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6833 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6853 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6855 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6873 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6875 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20479"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52872, "pinned": false}, {"id": "CVE-2026-21548", "publisher": "Unisoc", "title": "In nr modem, there is a possible improper input validation", "summary": "In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.393", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21548"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52873, "pinned": false}, {"id": "CVE-2026-21549", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.537", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21549"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52873, "pinned": false}, {"id": "CVE-2026-21550", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.663", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21550"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52873, "pinned": false}, {"id": "CVE-2026-21551", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.787", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21551"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52873, "pinned": false}, {"id": "CVE-2026-21552", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.903", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21552"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52872, "pinned": false}, {"id": "CVE-2026-21553", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:20.020", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21553"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52872, "pinned": false}, {"id": "CVE-2026-21554", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:20.130", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21554"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52872, "pinned": false}, {"id": "CVE-2026-21555", "publisher": "Unisoc", "title": "In modem, there is a possible improper input validation", "summary": "In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00706, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:20.257", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21555"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52874, "pinned": false}, {"id": "CVE-2026-69078", "publisher": "CIRCL", "title": "CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generati", "summary": "CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality.\n\nUser-controlled CTI content, including conversion names, descriptions, and comments, is converted from Markdown to HTML and rendered as a PDF using WeasyPrint. Before the patch, the renderer used WeasyPrint\u2019s default URL-fetching behavior without restricting the protocols or destinations that could be referenced by the ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T10:16:33.243", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69078"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33703, "pinned": false}, {"id": "CVE-2026-76596", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The lis", "summary": "Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table", "cvss": 8.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.500", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76596"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3371, "pinned": false}, {"id": "CVE-2026-76599", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < ", "summary": "Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings of arbitrary database tables including columns.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.857", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76599"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33709, "pinned": false}, {"id": "CVE-2025-58628", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshy", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affects Miraculous: from n/a through < 2.0.9.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00309, "kev": false, "added": "2025-09-05", "pub": "2025-09-05T17:15:39.383", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58628"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22532, "pinned": false}, {"id": "CVE-2025-48090", "publisher": "Patchstack", "title": "Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP ", "summary": "Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:15:52.423", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-48090"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37509, "pinned": false}, {"id": "CVE-2026-17894", "publisher": "Chrome", "title": "Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentia", "summary": "Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.423", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17894"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26846, "pinned": false}, {"id": "CVE-2026-12722", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Manageme", "summary": "Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass.\n\nThis issue affects FTC E-Commerce Management Panel: before 1.0.2.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00438, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:16:45.740", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12722"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37077, "pinned": false}, {"id": "CVE-2026-16308", "publisher": "IBM Corporation", "title": "IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could al", "summary": "IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header bytes.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:26.910", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16308"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.45185, "pinned": false}, {"id": "CVE-2026-18064", "publisher": "ICS-CERT", "title": "An incomplete fix for CVE-2026-15352 in the NASA core Flight System \n(cFS) Health and Safety (HS) application ", "summary": "An incomplete fix for CVE-2026-15352 in the NASA core Flight System \n(cFS) Health and Safety (HS) application leaves a separate NULL pointer \ndereference reachable in versions through 7.0.1. An attacker who can \ntrigger the affected command under specific conditions could cause the \nHS application to crash, resulting in a denial-of-service condition and \nprocessor reset.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:54.790", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18064"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48518, "pinned": false}, {"id": "CVE-2026-67363", "publisher": "Joomla! Project", "title": "Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeChar", "summary": "Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge total from a client-controlled request parameter and forward it to the payment gateway without recomputing it from the form's configured product prices. Neither endpoint enforces authentication or CSRF checks. An unauthenticated attacker can purchase any priced item for an arbitrary amount ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-08-19", "pub": "2026-08-19T13:17:50.820", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67363"}], "cwe": ["CWE-472", "CWE-602"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.45608, "pinned": false}, {"id": "CVE-2026-28151", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Tonda < 2.6 versions.", "summary": "Unauthenticated Local File Inclusion in Tonda < 2.6 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T12:16:50.083", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28151"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39491, "pinned": false}, {"id": "CVE-2026-28152", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.", "summary": "Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T12:16:50.220", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28152"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39491, "pinned": false}, {"id": "CVE-2026-73181", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.", "summary": "Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:01.790", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73181"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42133, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-40796", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions", "summary": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00502, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T09:15:37.650", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic pcs neo", "vendor": "siemens", "type": "app", "affected": ["4.1", "5.0"], "fixed": null, "safe": "before 4.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-pcs-neo || rpm -q simatic-pcs-neo || simatic-pcs-neo --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-pcs-neo\nsudo apt install simatic-pcs-neo=<VERSION_BEFORE_4.1>\nsudo apt-mark hold simatic-pcs-neo"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-pcs-neo\nsudo dnf downgrade simatic-pcs-neo-<VERSION_BEFORE_4.1>\nsudo dnf versionlock add simatic-pcs-neo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "user management component", "vendor": "siemens", "type": "app", "affected": ["< 2.15.1.3"], "fixed": "2.15.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy user-management-component || rpm -q user-management-component || user-management-component --version"}, {"label": "2. UPGRADE to 2.15.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade user-management-component"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade user-management-component"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40796"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-722410.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42118, "pinned": false}, {"id": "CVE-2025-40797", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions", "summary": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00541, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T09:15:37.900", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic pcs neo", "vendor": "siemens", "type": "app", "affected": ["4.1", "5.0"], "fixed": null, "safe": "before 4.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-pcs-neo || rpm -q simatic-pcs-neo || simatic-pcs-neo --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-pcs-neo\nsudo apt install simatic-pcs-neo=<VERSION_BEFORE_4.1>\nsudo apt-mark hold simatic-pcs-neo"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-pcs-neo\nsudo dnf downgrade simatic-pcs-neo-<VERSION_BEFORE_4.1>\nsudo dnf versionlock add simatic-pcs-neo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "user management component", "vendor": "siemens", "type": "app", "affected": ["< 2.15.1.3"], "fixed": "2.15.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy user-management-component || rpm -q user-management-component || user-management-component --version"}, {"label": "2. UPGRADE to 2.15.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade user-management-component"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade user-management-component"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40797"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-722410.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44698, "pinned": false}, {"id": "CVE-2025-40798", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions", "summary": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00541, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T09:15:38.160", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic pcs neo", "vendor": "siemens", "type": "app", "affected": ["4.1", "5.0"], "fixed": null, "safe": "before 4.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-pcs-neo || rpm -q simatic-pcs-neo || simatic-pcs-neo --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-pcs-neo\nsudo apt install simatic-pcs-neo=<VERSION_BEFORE_4.1>\nsudo apt-mark hold simatic-pcs-neo"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-pcs-neo\nsudo dnf downgrade simatic-pcs-neo-<VERSION_BEFORE_4.1>\nsudo dnf versionlock add simatic-pcs-neo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "user management component", "vendor": "siemens", "type": "app", "affected": ["< 2.15.1.3"], "fixed": "2.15.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy user-management-component || rpm -q user-management-component || user-management-component --version"}, {"label": "2. UPGRADE to 2.15.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade user-management-component"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade user-management-component"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40798"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-722410.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44698, "pinned": false}, {"id": "CVE-2025-62053", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through < 4.2.0.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:11.733", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62053"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3617, "pinned": false}, {"id": "CVE-2025-62055", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through < 1.3.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:11.880", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62055"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3617, "pinned": false}, {"id": "CVE-2026-38426", "publisher": "MITRE", "title": "Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arb", "summary": "Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.", "cvss": 7.3, "sev": "HIGH", "epss": 0.0055, "kev": false, "added": "2026-05-27", "pub": "2026-05-27T14:16:45.880", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38426"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.45242, "pinned": false}, {"id": "CVE-2026-22622", "publisher": "Eaton", "title": "Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmwar", "summary": "Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T11:16:27.397", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-22622"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45213, "pinned": false}, {"id": "CVE-2026-67351", "publisher": "VulnCheck", "title": "Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation ", "summary": "Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use the same user record. An authenticated Editor can create a username collision with an Administrator account and obtain administrative privileges by logging in with their own password while the session loads the Administrator's account data.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:17:04.503", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67351"}], "cwe": ["CWE-304"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45577, "pinned": false}, {"id": "CVE-2026-11897", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, cau", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00533, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:24.143", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.8"], "fixed": "26.0.0.8", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11897"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280695"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44206, "pinned": false}, {"id": "CVE-2026-62663", "publisher": "GitHub, Inc.", "title": "Banks generates meaningful LLM prompts using a simple template language", "summary": "Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untrusted user input as file paths via Path(value) and pass them directly to open(file_path, \"rb\") without any path sanitization, canonicalization, or directory restriction. An attacker who controls template variables passed to a banks Prompt can use path traversal (../) to rea", "cvss": 7.5, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:33.900", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62663"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42135, "pinned": false}, {"id": "CVE-2026-11536", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP", "summary": "IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00583, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:16:52.140", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5.0.0 and < 8.5.5.29", ">= 9.0.0.0 and < 9.0.5.28"], "fixed": "8.5.5.29, 9.0.5.28", "safe": "before 8.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5.0.0>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5.0.0>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11536"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7277544"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.47174, "pinned": false}, {"id": "CVE-2026-62246", "publisher": "GitHub, Inc.", "title": "Kamaji is the Hosted Control Plane Manager for Kubernetes", "summary": "Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername(), allowing distinct tenants with colliding normalized identifiers to share control-plane state and read, modify, or destroy another tenant's Kubernetes data. This issue i", "cvss": 8.5, "sev": "HIGH", "epss": 0.00363, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:55.300", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62246"}], "cwe": ["CWE-284", "CWE-653"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.2893, "pinned": false}, {"id": "CVE-2026-63035", "publisher": "ICS-CERT", "title": "A heap use-after-free vulnerability in the TransferSubscriptions service\n in open62541 may allow an authentica", "summary": "A heap use-after-free vulnerability in the TransferSubscriptions service\n in open62541 may allow an authenticated attacker to cause a denial of \nservice or potentially execute arbitrary code.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00755, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:52.070", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63035"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.54656, "pinned": false}, {"id": "CVE-2026-10848", "publisher": "Zephyr Project", "title": "The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/o", "summary": "The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '\"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent", "cvss": 7.0, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T17:16:58.163", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 4.3.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 4.3.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10848"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/e500f7b81b5b8a867e28b2f4e59512cbfdd5ae75"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jgqq-7mjj-w642"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jgqq-7mjj-w642"}], "cwe": ["CWE-125", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30409, "pinned": false}, {"id": "CVE-2026-59644", "publisher": "bcorg", "title": "In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sende", "summary": "In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00493, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T01:16:44.467", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "bc-java", "vendor": "bouncycastle", "type": "app", "affected": ["< 1.85"], "fixed": "1.85", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bc-java || rpm -q bc-java || bc-java --version"}, {"label": "2. UPGRADE to 1.85 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bc-java"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bc-java"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59644"}, {"t": "Patch", "u": "https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f"}], "cwe": ["CWE-834"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41479, "pinned": false}, {"id": "CVE-2026-18590", "publisher": "VulDB", "title": "A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628", "summary": "A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file adm.cgi of the component Admin Password Handler. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner a", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.01817, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:18.613", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18590"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": [], "fix": false, "watched": false, "epss_pct": 0.78556, "pinned": false}, {"id": "CVE-2026-8793", "publisher": "PaperCut", "title": "PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component", "summary": "PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00683, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:21.097", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8793"}], "cwe": ["CWE-307"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.51982, "pinned": false}, {"id": "CVE-2026-8794", "publisher": "PaperCut", "title": "PaperCut NG/MF contains an observable timing discrepancy in its authentication component", "summary": "PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00676, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:21.273", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8794"}], "cwe": ["CWE-208"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.51708, "pinned": false}, {"id": "CVE-2025-39664", "publisher": "Checkmk GmbH", "title": "Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) a", "summary": "Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00693, "kev": false, "added": "2025-10-09", "pub": "2025-10-09T15:16:06.363", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": [">= 2.1.0 and < 2.2.0", "2.2.0 p1", "2.2.0 p10", "2.2.0 p11", "2.2.0 p12", "2.2.0 p13", "2.2.0 p14", "2.2.0 p16"], "fixed": "2.2.0", "safe": "before 2.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. UPGRADE to 2.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade checkmk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade checkmk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.1.0>\nsudo apt-mark hold checkmk"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.1.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-39664"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17984"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.52393, "pinned": false}, {"id": "CVE-2025-40937", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)", "summary": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments.\r\nThis could allow an authenticated attacker to execute arbitrary code with limited privileges.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00586, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:47.260", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 4.0.1"], "fixed": "4.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40937"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4733, "pinned": false}, {"id": "CVE-2025-40938", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)", "summary": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device\u2019s confidentiality, integrity, and availability.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:47.443", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 4.0.1"], "fixed": "4.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40938"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30462, "pinned": false}, {"id": "CVE-2025-66769", "publisher": "MITRE", "title": "A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Servi", "summary": "A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00442, "kev": false, "added": "2026-04-13", "pub": "2026-04-13T16:16:24.620", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "nitro pdf pro", "vendor": "gonitro", "type": "app", "affected": ["14.41.1.4"], "fixed": null, "safe": "before 14.41.1.4", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nitro-pdf-pro || rpm -q nitro-pdf-pro || nitro-pdf-pro --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.41.1.4 (Debian / Ubuntu)", "cmd": "apt-cache madison nitro-pdf-pro\nsudo apt install nitro-pdf-pro=<VERSION_BEFORE_14.41.1.4>\nsudo apt-mark hold nitro-pdf-pro"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nitro-pdf-pro\nsudo dnf downgrade nitro-pdf-pro-<VERSION_BEFORE_14.41.1.4>\nsudo dnf versionlock add nitro-pdf-pro"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-66769"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37388, "pinned": false}, {"id": "CVE-2026-67248", "publisher": "ASUSTOR, Inc.", "title": "A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM", "summary": "A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial of service of the affected CGI process. Further impact may be possible depending on exploitability and runtime protections.\nAffected products and version", "cvss": 8.8, "sev": "HIGH", "epss": 0.00487, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T05:16:39.157", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67248"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=69"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41033, "pinned": false}, {"id": "CVE-2026-22621", "publisher": "Eaton", "title": "Improper input validation in one of the session management interface of Eaton's Tripp Lite Series\u00a0PADM firmwar", "summary": "Improper input validation in one of the session management interface of Eaton's Tripp Lite Series\u00a0PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00582, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T11:16:27.280", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-22621"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.4713, "pinned": false}, {"id": "CVE-2026-18378", "publisher": "Red Hat, Inc.", "title": "A flaw was found in koku-metrics-operator", "summary": "A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00465, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:17:27.553", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "cost management metrics operator", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cost-management-metrics-operator || rpm -q cost-management-metrics-operator || cost-management-metrics-operator --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18378"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-18378"}, {"t": "Issue Tracking, Mitigation", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2509249"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.39345, "pinned": false}, {"id": "CVE-2026-54367", "publisher": "VulnCheck", "title": "CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers ", "summary": "CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the static shared encryption key to forge identifiers for any user GUID, including the system-wide cluster settings account, enabling enumeration of hosted t", "cvss": 8.6, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T13:16:51.770", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54367"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.2422, "pinned": false}, {"id": "CVE-2026-54885", "publisher": "EEF", "title": "Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cau", "summary": "Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound HTTP requests to attacker-chosen URIs, including internal services and cloud metadata endpoints.\n\nThree code paths fetch remote URIs supplied by the requester without sufficient validation of the target. Boruta.Oauth.Request.Base.fetch_unsigned_request/1 in lib/boruta/oauth/reques", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00612, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:34.050", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54885"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48684, "pinned": false}, {"id": "CVE-2026-44616", "publisher": "Apache Software Foundation", "title": "LDAP injection vulnerability in Apache Zeppelin", "summary": "LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0and potentially expose directory information. The role-lookup path was also affected after successful LDAP authentication. This issue affects Apache Zeppelin versions 0.6.0 through 0.12.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00758, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:12.257", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "zeppelin", "vendor": "apache", "type": "app", "affected": [">= 0.6.0 and < 0.12.1"], "fixed": "0.12.1", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zeppelin || rpm -q zeppelin || zeppelin --version"}, {"label": "2. UPGRADE to 0.12.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zeppelin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zeppelin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison zeppelin\nsudo apt install zeppelin=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold zeppelin"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list zeppelin\nsudo dnf downgrade zeppelin-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add zeppelin"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44616"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/zeppelin/pull/5226"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/p6llqpvcszpg1wc8kx5ncfkdbms3g0rn"}], "cwe": ["CWE-90"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54733, "pinned": false}, {"id": "CVE-2026-67343", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint, ", "summary": "ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint, allowing authenticated users to retrieve the arcadedb.ha.clusterToken value in cleartext. Attackers can use the leaked token with X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User headers to impersonate root and execute administrative actions including user creation, database operations, and server shutdown.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.563", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67343"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.42533, "pinned": false}, {"id": "CVE-2026-66917", "publisher": "Joomla! Project", "title": "Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged c", "summary": "Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T12:16:25.680", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66917"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43244, "pinned": false}, {"id": "CVE-2025-34155", "publisher": "VulnCheck", "title": "Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionali", "summary": "Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can facilitate user enumeration and increase the likelihood of targeted brute-force or credential-stuffing attacks.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00526, "kev": false, "added": "2025-10-23", "pub": "2025-10-23T17:15:36.720", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34155"}], "cwe": ["CWE-204"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43785, "pinned": false}, {"id": "CVE-2025-62035", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through <", "summary": "Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00449, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:09.780", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62035"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.38012, "pinned": false}, {"id": "CVE-2024-32011", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)", "summary": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:35.623", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-32011"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35068, "pinned": false}, {"id": "CVE-2026-17922", "publisher": "Chrome", "title": "Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker t", "summary": "Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.407", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17922"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36822, "pinned": false}, {"id": "CVE-2026-17924", "publisher": "Chrome", "title": "Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised th", "summary": "Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.607", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17924"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26843, "pinned": false}, {"id": "CVE-2026-17935", "publisher": "Chrome", "title": "Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar", "summary": "Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00453, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.753", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17935"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38406, "pinned": false}, {"id": "CVE-2026-17940", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.79", "summary": "Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.273", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17940"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26845, "pinned": false}, {"id": "CVE-2026-17947", "publisher": "Chrome", "title": "Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially ", "summary": "Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.003", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17947"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26845, "pinned": false}, {"id": "CVE-2026-17987", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a ", "summary": "Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00319, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.317", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17987"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.23614, "pinned": false}, {"id": "CVE-2026-17989", "publisher": "Chrome", "title": "Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co", "summary": "Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.533", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17989"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38197, "pinned": false}, {"id": "CVE-2026-17990", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00319, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.647", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17990"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.23613, "pinned": false}, {"id": "CVE-2026-17991", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote atta", "summary": "Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.757", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17991"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26847, "pinned": false}, {"id": "CVE-2026-18002", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a re", "summary": "Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.893", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18002"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26847, "pinned": false}, {"id": "CVE-2026-18015", "publisher": "Chrome", "title": "Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.297", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18015"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26847, "pinned": false}, {"id": "CVE-2026-59952", "publisher": "GitHub, Inc.", "title": "Valibot helps validate data using a schema", "summary": "Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its flatten() helper when validation issues contain attacker-controlled object keys such as toString, valueOf, or hasOwnProperty. The issue is reachable through normal record() validation. record() intentionally filters __proto__, prototype, and constructor, but it still accepts other own keys that collide with inherited Object.prototype properties. I", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.840", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59952"}], "cwe": ["CWE-755"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43609, "pinned": false}, {"id": "CVE-2026-18382", "publisher": "Red Hat, Inc.", "title": "A flaw was found in koku-metrics-operator", "summary": "A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO client_id and client_secret to this user-controlled URL, allowing the attacker to obtain the credentials.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:17:27.827", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "cost management metrics operator", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cost-management-metrics-operator || rpm -q cost-management-metrics-operator || cost-management-metrics-operator --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18382"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-18382"}, {"t": "Issue Tracking, Mitigation", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2509253"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.4363, "pinned": false}, {"id": "CVE-2026-11707", "publisher": "IBM Corporation", "title": "IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cro", "summary": "IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00384, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:24.010", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5 and < 8.5.5.30", ">= 9.0 and < 9.0.5.29"], "fixed": "8.5.5.30, 9.0.5.29", "safe": "before 8.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.30 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "tivoli system automation application manager", "vendor": "ibm", "type": "app", "affected": [">= 4.1.0 and <= 4.1.0.7"], "fixed": "newer than 4.1.0.7", "safe": "before 4.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tivoli-system-automation-application-manager || rpm -q tivoli-system-automation-application-manager || tivoli-system-automation-application-manager --version"}, {"label": "2. UPGRADE to newer than 4.1.0.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tivoli-system-automation-application-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tivoli-system-automation-application-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison tivoli-system-automation-application-manager\nsudo apt install tivoli-system-automation-application-manager=<VERSION_BEFORE_4.1.0>\nsudo apt-mark hold tivoli-system-automation-application-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tivoli-system-automation-application-manager\nsudo dnf downgrade tivoli-system-automation-application-manager-<VERSION_BEFORE_4.1.0>\nsudo dnf versionlock add tivoli-system-automation-application-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11707"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281073"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.31299, "pinned": false}, {"id": "CVE-2026-67345", "publisher": "VulnCheck", "title": "MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability", "summary": "MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches() that allows remote attackers to hijack OAuth 2.0 authorization codes by supplying a crafted redirect_uri whose hostname suffix matches a registered URI without proper dot-boundary anchoring. Attackers who control a domain ending with the registered redirect URI hostname can social-engineer victims", "cvss": 8.1, "sev": "HIGH", "epss": 0.00565, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:35.583", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67345"}], "cwe": ["CWE-183"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46202, "pinned": false}, {"id": "CVE-2026-23985", "publisher": "Apache Software Foundation", "title": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through ", "summary": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py component, specifically within the SQL_REGEX used for parsing SQL statements in the sqlparse library integration.\nThe affected regular expression contains overlapping disjunctions that share a common outer quantifier. An authenticated attacker can exploit this by sending a maliciousl", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:10.577", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "superset", "vendor": "apache", "type": "app", "affected": [">= 1.5.0 and < 6.0.0"], "fixed": "6.0.0", "safe": "before 1.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy superset || rpm -q superset || superset --version"}, {"label": "2. UPGRADE to 6.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade superset"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade superset"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison superset\nsudo apt install superset=<VERSION_BEFORE_1.5.0>\nsudo apt-mark hold superset"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list superset\nsudo dnf downgrade superset-<VERSION_BEFORE_1.5.0>\nsudo dnf versionlock add superset"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-23985"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/fdy7tx7glv90ypd7qnm1g1pt7nn336qx"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50668, "pinned": false}, {"id": "CVE-2026-28813", "publisher": "Apache Software Foundation", "title": "Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities.\nUsers are ", "summary": "Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities.\nUsers are recommended to upgrade to version 2.12.4, which fixes this issue.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:11.070", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jspwiki", "vendor": "apache", "type": "app", "affected": ["< 2.12.4"], "fixed": "2.12.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jspwiki || rpm -q jspwiki || jspwiki --version"}, {"label": "2. UPGRADE to 2.12.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jspwiki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jspwiki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28813"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.18223, "pinned": false}, {"id": "CVE-2026-59881", "publisher": "GitHub, Inc.", "title": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python", "summary": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:18:33.597", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59881"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43602, "pinned": false}, {"id": "CVE-2026-68501", "publisher": "GitHub, Inc.", "title": "Sylius Mollie Plugin provides Mollie payment integration for Sylius applications", "summary": "Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's GET /{_locale}/thank-you PageRedirectController::thankYouAction and GET /{_locale}/get-code QrCodeAction::fetchQrCodeFromOrder endpoints look up sequential orderId values without ownership or session checks, exposing order tokenValue values that can be used with GET /{_locale}/register-after-checkout/{tokenVal", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00599, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:13.180", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68501"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48037, "pinned": false}, {"id": "CVE-2026-67340", "publisher": "VulnCheck", "title": "ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Ja", "summary": "ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to the allowed packages. An authenticated user with UPDATE_SCHEMA permission can create a JavaScript trigger that invokes java.lang.Runtime.getRuntime().exec() (or ProcessBuilder), achieving OS command execution when the trigger fires.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00918, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.127", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67340"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.59872, "pinned": false}, {"id": "CVE-2026-67356", "publisher": "VulnCheck", "title": "ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.AL", "summary": "ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity().createUser() without permission checks. Attackers with UPDATE_SCHEMA permission can create triggers that execute JavaScript to create server-wide admin users, escalating privileges beyond their authorization level.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00442, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:53.363", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67356"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37413, "pinned": false}, {"id": "CVE-2026-3245", "publisher": "Canon Inc.", "title": "A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code exe", "summary": "A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00711, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T00:16:29.280", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-3245"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.53061, "pinned": false}, {"id": "CVE-2026-69082", "publisher": "CIRCL", "title": "CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functio", "summary": "CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<id> endpoint accepted HTTP GET requests for an operation that modified application state.\n\nAn unauthenticated remote attacker could construct a malicious link or embed a request targeting this endpoint and induce an authenticated CTI-Transmute administrator to visit the attacker-controlled content. If the admi", "cvss": 8.8, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T10:16:33.540", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69082"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18154, "pinned": false}, {"id": "CVE-2026-76611", "publisher": "Joomla! Project", "title": "Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo <", "summary": "Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00496, "kev": false, "added": "2026-08-21", "pub": "2026-08-21T13:18:19.850", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76611"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41671, "pinned": false}, {"id": "CVE-2026-66585", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.", "summary": "Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T12:16:52.693", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66585"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34802, "pinned": false}, {"id": "CVE-2025-59580", "publisher": "Patchstack", "title": "Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Es", "summary": "Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through < 2.1.7.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00391, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:56.287", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59580"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32036, "pinned": false}, {"id": "CVE-2025-58629", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Config", "summary": "Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:15:59.717", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58629"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30977, "pinned": false}, {"id": "CVE-2026-17918", "publisher": "Chrome", "title": "Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary ", "summary": "Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.980", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17918"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34549, "pinned": false}, {"id": "CVE-2026-17956", "publisher": "Chrome", "title": "Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker t", "summary": "Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.040", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17956"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32859, "pinned": false}, {"id": "CVE-2026-17969", "publisher": "Chrome", "title": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.417", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17969"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32858, "pinned": false}, {"id": "CVE-2026-18012", "publisher": "Chrome", "title": "Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrar", "summary": "Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.967", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18012"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30967, "pinned": false}, {"id": "CVE-2026-18017", "publisher": "Chrome", "title": "Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary ", "summary": "Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.500", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18017"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34546, "pinned": false}, {"id": "CVE-2026-18381", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the koku-metrics-operator for Red Hat OpenShift", "summary": "A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this user-controlled URL, allowing the attacker to obtain the token.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00378, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:17:27.693", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "cost management metrics operator", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cost-management-metrics-operator || rpm -q cost-management-metrics-operator || cost-management-metrics-operator --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18381"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-18381"}, {"t": "Issue Tracking, Mitigation", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2509251"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.30599, "pinned": false}, {"id": "CVE-2026-54365", "publisher": "VulnCheck", "title": "CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allo", "summary": "CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious StorageConfigure parameter to the jsonimportuserbyupn, jsonimportuserbyupnex, or japiimportuserbyupn endpoints to trigger InternalImportAdUserByUPN(), causing Gla", "cvss": 7.5, "sev": "HIGH", "epss": 0.00372, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T13:16:51.503", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54365"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29933, "pinned": false}, {"id": "CVE-2026-57859", "publisher": "VulnCheck", "title": "e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler tha", "summary": "e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the user_prefs column. The e_array::unserialize() function in e107_handlers/core_functions.php performs only a prefix check for the string 'array' before passing the stored value to eval(), causing automatic PHP execut", "cvss": 7.5, "sev": "HIGH", "epss": 0.00658, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:16:59.923", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57859"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.50911, "pinned": false}, {"id": "CVE-2026-60075", "publisher": "CPANSec", "title": "Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored t", "summary": "Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time.\n\n_parse_time removes a time from anywhere in the string with the unanchored substitution `s/$timerx/ /`, where $timerx is an auto-generated alternation of time patterns reached through a leading `(?:$atrx|^|\\s+)`. The engine therefore retries the match at every position of an interior whitespace run: at ea", "cvss": 7.5, "sev": "HIGH", "epss": 0.00373, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:17:02.710", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60075"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3003, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3856 (important): perl-Date-Manip", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3856.html", "date": "2026-08-17"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-12947", "publisher": "IBM Corporation", "title": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensi", "summary": "IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00395, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:24.427", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "app connect enterprise", "vendor": "ibm", "type": "app", "affected": [">= 12.0.1.0 and < 12.0.12.28", ">= 13.0.1.0 and < 13.0.8.0"], "fixed": "12.0.12.28, 13.0.8.0", "safe": "before 12.0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy app-connect-enterprise || rpm -q app-connect-enterprise || app-connect-enterprise --version"}, {"label": "2. UPGRADE to 12.0.12.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade app-connect-enterprise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade app-connect-enterprise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison app-connect-enterprise\nsudo apt install app-connect-enterprise=<VERSION_BEFORE_12.0.1.0>\nsudo apt-mark hold app-connect-enterprise"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list app-connect-enterprise\nsudo dnf downgrade app-connect-enterprise-<VERSION_BEFORE_12.0.1.0>\nsudo dnf versionlock add app-connect-enterprise"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12947"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280894"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3253, "pinned": false}, {"id": "CVE-2026-48910", "publisher": "Apache Software Foundation", "title": "A carefully crafted editing request could trigger an XSS vulnerability \non Apache JSPWiki when parsing errors ", "summary": "A carefully crafted editing request could trigger an XSS vulnerability \non Apache JSPWiki when parsing errors on the markdown renderer, which \ncould allow the attacker to execute javascript in the victim's browser \nand get some sensitive information about the victim.\n\n\nThis issue affects Apache JSPWiki: through 2.12.3.\n\nUsers are recommended to upgrade to version 2.12.4, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0056, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:12.637", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "jspwiki", "vendor": "apache", "type": "app", "affected": ["< 2.12.4"], "fixed": "2.12.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jspwiki || rpm -q jspwiki || jspwiki --version"}, {"label": "2. UPGRADE to 2.12.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jspwiki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jspwiki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48910"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/yvbdjnocw5qq3xkbjs9h77ghlg0bsw2c"}], "cwe": ["CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45863, "pinned": false}, {"id": "CVE-2026-65834", "publisher": "GitHub, Inc.", "title": "Capsule is a multi-tenancy and policy-based framework for Kubernetes", "summary": "Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster Admin to store a malformed regex that later reached regexp.MustCompile in pkg/api/forbidden_list.go through internal/webhook/node/user_metadata.go and cra", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00467, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:13.107", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65834"}], "cwe": ["CWE-20", "CWE-248"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.3947, "pinned": false}, {"id": "CVE-2026-76612", "publisher": "Joomla! Project", "title": "Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User", "summary": "Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-08-21", "pub": "2026-08-21T13:18:19.990", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76612"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.36916, "pinned": false}, {"id": "CVE-2026-77027", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied", "summary": "Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:23.150", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77027"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.36914, "pinned": false}, {"id": "CVE-2026-67283", "publisher": "Joomla! Project", "title": "Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - ", "summary": "Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00419, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T09:17:30.720", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67283"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35125, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-67286", "publisher": "Joomla! Project", "title": "Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Bui", "summary": "Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00518, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:21.613", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67286"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4323, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73377", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.", "summary": "Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.550", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73377"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27014, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-52544", "publisher": "Armis", "title": "E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenti", "summary": "E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can access any file from the E3 file system.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00358, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:36.677", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-52544"}, {"t": "Mitigation, Third Party Advisory", "u": "https://www.armis.com/research/frostbyte10/"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2837, "pinned": false}, {"id": "CVE-2025-34248", "publisher": "VulnCheck", "title": "D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web", "summary": "D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.", "cvss": 7.2, "sev": "HIGH", "epss": 0.0065, "kev": false, "added": "2025-10-09", "pub": "2025-10-09T21:15:35.557", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34248"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.50547, "pinned": false}, {"id": "CVE-2025-39463", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00614, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:15:50.447", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-39463"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.48785, "pinned": false}, {"id": "CVE-2025-13032", "publisher": "NortonLifeLock Inc.", "title": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3\u00a0 on windows allows local attacker to escala", "summary": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3\u00a0 on windows allows local attacker to escalate privelages via pool overflow.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00249, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T17:15:39.700", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "antivirus", "vendor": "avast", "type": "app", "affected": ["< 25.3"], "fixed": "25.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy antivirus || rpm -q antivirus || antivirus --version"}, {"label": "2. UPGRADE to 25.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade antivirus"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade antivirus"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13032"}, {"t": "Vendor Advisory", "u": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.15287, "pinned": false}, {"id": "CVE-2025-66020", "publisher": "GitHub, Inc.", "title": "Valibot helps validate data using a schema", "summary": "Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_REGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. A short, maliciously crafted string (e.g., <100 characters) can cause the regex engine to consume excessive CPU time (minutes), leading to a Denial of Service (DoS) for the application. This issue has been patched in version 1.2.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2025-11-26", "pub": "2025-11-26T02:15:49.540", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-66020"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25023, "pinned": false}, {"id": "CVE-2024-56839", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.2, "sev": "HIGH", "epss": 0.00637, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:29.297", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56839"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.49906, "pinned": false}, {"id": "CVE-2024-56840", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.2, "sev": "HIGH", "epss": 0.00637, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:29.500", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56840"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.49906, "pinned": false}, {"id": "CVE-2026-17950", "publisher": "Chrome", "title": "Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote a", "summary": "Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00367, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.377", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17950"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29424, "pinned": false}, {"id": "CVE-2026-17951", "publisher": "Chrome", "title": "Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an", "summary": "Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00373, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.490", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17951"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30088, "pinned": false}, {"id": "CVE-2026-17967", "publisher": "Chrome", "title": "Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to p", "summary": "Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.193", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17967"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26846, "pinned": false}, {"id": "CVE-2026-17971", "publisher": "Chrome", "title": "Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pot", "summary": "Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.637", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17971"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29824, "pinned": false}, {"id": "CVE-2026-18186", "publisher": "ASUSTOR, Inc.", "title": "A stored format string vulnerability was found in the FTP Backup on the ADM", "summary": "A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected CGI process.\nAffected products and versions include: from ADM 4.1.0 through ADM 4", "cvss": 8.1, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:24.213", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18186"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=67"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39249, "pinned": false}, {"id": "CVE-2026-18187", "publisher": "ASUSTOR, Inc.", "title": "A format string vulnerability was found in the Internal Backup on the ADM", "summary": "A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected CGI process.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well", "cvss": 8.1, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:24.363", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18187"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=67"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39249, "pinned": false}, {"id": "CVE-2026-18188", "publisher": "ASUSTOR, Inc.", "title": "A format string vulnerability was found in the Rsync Backup on the ADM", "summary": "A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected backup component.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:24.503", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18188"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=67"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3925, "pinned": false}, {"id": "CVE-2026-47873", "publisher": "VMware", "title": "The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's n", "summary": "The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback.\nAffected Spring Products and Versions:\nSpring Tools for Eclipse: 5.2.0 and earlier", "cvss": 8.0, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:52.253", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "spring tools", "vendor": "broadcom", "type": "app", "affected": ["< 5.3.0"], "fixed": "5.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy spring-tools || rpm -q spring-tools || spring-tools --version"}, {"label": "2. UPGRADE to 5.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade spring-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade spring-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47873"}, {"t": "Vendor Advisory", "u": "https://spring.io/security/cve-2026-47873"}], "cwe": ["CWE-1327"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.20094, "pinned": false}, {"id": "CVE-2026-47882", "publisher": "VMware", "title": "When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or ", "summary": "When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret was generated using a non-cryptographic pseudo-random number generator rather than a cryptographically secure source of randomness.\nAffected Spring Prod", "cvss": 8.3, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:52.370", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "spring tools", "vendor": "broadcom", "type": "app", "affected": ["< 5.3.0"], "fixed": "5.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy spring-tools || rpm -q spring-tools || spring-tools --version"}, {"label": "2. UPGRADE to 5.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade spring-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade spring-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47882"}, {"t": "Vendor Advisory", "u": "https://spring.io/security/cve-2026-47882"}], "cwe": ["CWE-338"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.14302, "pinned": false}, {"id": "CVE-2026-14980", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forge", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.", "cvss": 8.3, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:26.120", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.9"], "fixed": "26.0.0.9", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14980"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281651"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36185, "pinned": false}, {"id": "CVE-2026-67348", "publisher": "VulnCheck", "title": "Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that al", "summary": "Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary execution_id values to retrieve sensitive execution records including task inputs, outputs, metadata, and temporal task tokens from other tenants.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:36.657", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67348"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37295, "pinned": false}, {"id": "CVE-2026-68581", "publisher": "VulnCheck", "title": "Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management", "summary": "Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both resolve through a generic web.Auth.GetID() interface, a link-share JWT whose numeric ID equals a target user's ID is treated as that user by the /api/v1/tokens endpoints. An authenticated attacker can obtain a target's numeric user ID via authenticated user search, then c", "cvss": 8.1, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:54.087", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68581"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39241, "pinned": false}, {"id": "CVE-2026-18582", "publisher": "VulDB", "title": "A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1", "summary": "A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not on the heap. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to versio", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00859, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T02:16:29.163", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18582"}], "cwe": ["CWE-590"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.58089, "pinned": false}, {"id": "CVE-2026-18583", "publisher": "VulDB", "title": "A weakness has been identified in mz-automation libiec61850 up to 1.6.1", "summary": "A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.6.2 is capable of addressing this issue. Pa", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00859, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T06:16:37.100", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18583"}], "cwe": ["CWE-119", "CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.5809, "pinned": false}, {"id": "CVE-2026-66916", "publisher": "Joomla! Project", "title": "Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery ", "summary": "Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0043, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T12:16:25.547", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66916"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36237, "pinned": false}, {"id": "CVE-2026-76600", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteCommen", "summary": "Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:21.970", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76600"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3371, "pinned": false}, {"id": "CVE-2026-76603", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The i", "summary": "Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.320", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76603"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33705, "pinned": false}, {"id": "CVE-2026-76608", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.", "summary": "Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:22.913", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76608"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33701, "pinned": false}, {"id": "CVE-2026-76609", "publisher": "Joomla! Project", "title": "Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdate", "summary": "Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-22", "pub": "2026-08-22T15:16:23.030", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76609"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33709, "pinned": false}, {"id": "CVE-2025-71433", "publisher": "VulnCheck", "title": "Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access ot", "summary": "Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links, can read projects and tasks, modify or delete tasks, labels and comments, and search workspace contents.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T15:17:00.837", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-71433"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46596, "pinned": false}, {"id": "CVE-2026-73367", "publisher": "Patchstack", "title": "Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.", "summary": "Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.123", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73367"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25267, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-52543", "publisher": "Armis", "title": "E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side ha", "summary": "E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:36.453", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-52543"}, {"t": "Mitigation, Third Party Advisory", "u": "https://www.armis.com/research/frostbyte10/"}], "cwe": ["CWE-836"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22341, "pinned": false}, {"id": "CVE-2025-10528", "publisher": "Mozilla Corporation", "title": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component", "summary": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:45.017", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", ">= 141.0 and < 143.0"], "fixed": "140.3.0, 143.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10528"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27763, "pinned": false}, {"id": "CVE-2025-10537", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142", "summary": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:49.433", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10537"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24629, "pinned": false}, {"id": "CVE-2025-11714", "publisher": "Mozilla Corporation", "title": "Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Th", "summary": "Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.680", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.29.0", "< 144.0", ">= 116.0 and < 140.4.0"], "fixed": "115.29.0, 140.4.0, 144.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.29.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11714"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-82/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-119", "CWE-125", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25716, "pinned": false}, {"id": "CVE-2025-34156", "publisher": "VulnCheck", "title": "Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endp", "summary": "Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00371, "kev": false, "added": "2025-10-23", "pub": "2025-10-23T17:15:36.853", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-34156"}], "cwe": ["CWE-497"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29878, "pinned": false}, {"id": "CVE-2025-13014", "publisher": "Mozilla Corporation", "title": "Use-after-free in the Audio/Video component", "summary": "Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00316, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.473", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.30.0", "< 145.0", ">= 140.0 and < 140.5.0"], "fixed": "115.30.0, 140.5.0, 145.0", "safe": "before 140.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.30.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 140.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_140.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_140.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13014"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-89/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23316, "pinned": false}, {"id": "CVE-2025-40947", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.5, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:43.053", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40947"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-078743.html"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44686, "pinned": false}, {"id": "CVE-2026-46748", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)", "summary": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access. This could allow a local attacker to escalate privileges leading to arbitrary file modification and gaining root privileges on the system.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00332, "kev": false, "added": "2026-06-09", "pub": "2026-06-09T10:16:44.263", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinec ins", "vendor": "siemens", "type": "app", "affected": ["<= 1.0", "1.0 sp1", "1.0 sp2", "1.0 sp2_update_1", "1.0 sp2_update_2", "1.0 sp2_update_3", "1.0 sp2_update_4", "1.0 sp2_update_5"], "fixed": "newer than 1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-ins || rpm -q sinec-ins || sinec-ins --version"}, {"label": "2. UPGRADE to newer than 1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-ins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-ins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46748"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-860189.html"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25148, "pinned": false}, {"id": "CVE-2026-54364", "publisher": "VulnCheck", "title": "CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attack", "summary": "CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the lack of input sanitization in the custom session serialization format to inject a resellerid session variable, bypassing the IsValidRSession authentica", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T13:16:51.367", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54364"}], "cwe": ["CWE-116"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35907, "pinned": false}, {"id": "CVE-2026-61536", "publisher": "GitHub, Inc.", "title": "Banks generates meaningful LLM prompts using a simple template language", "summary": "Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool JSON objects from the rendered body of {% completion %} blocks and later resolves their import_path field through importlib.import_module(...) + getattr(...) to obtain the callable that handles a tool call. There is no allowlist or sanitization on import_path, so any importable Python attribute (e.g. os.system, subprocess.getoutp", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:18:34.553", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61536"}], "cwe": ["CWE-94", "CWE-470"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.42562, "pinned": false}, {"id": "CVE-2026-61893", "publisher": "ICS-CERT", "title": "A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an \ninflated object count causes TestCommand", "summary": "A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an \ninflated object count causes TestCommand_getFromBuffer to read one byte \npast the end of the heap-allocated message buffer.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:51.760", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61893"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38777, "pinned": false}, {"id": "CVE-2026-63033", "publisher": "ICS-CERT", "title": "A crafted IEC 60870-5-104 I-frame with a declared object count exceeding\n what fits in the ASDU body causes In", "summary": "A crafted IEC 60870-5-104 I-frame with a declared object count exceeding\n what fits in the ASDU body causes InformationObject_ParseObjectAddress \nto read one byte past the end of the heap-allocated message buffer.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:51.917", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63033"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38777, "pinned": false}, {"id": "CVE-2026-9335", "publisher": "huntr.dev", "title": "A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due", "summary": "A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sen", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00767, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T05:16:20.827", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9335"}], "cwe": ["CWE-22"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.55067, "pinned": false}, {"id": "CVE-2026-12852", "publisher": "bcorg", "title": "In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bound", "summary": "In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0031, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T04:16:39.640", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "bc-java", "vendor": "bouncycastle", "type": "app", "affected": ["< 1.85"], "fixed": "1.85", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bc-java || rpm -q bc-java || bc-java --version"}, {"label": "2. UPGRADE to 1.85 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bc-java"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bc-java"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12852"}, {"t": "Patch", "u": "https://github.com/bcgit/bc-java/commit/a747038bb5bbd5e29fb2b7607ab38af1fd8d1790"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22673, "pinned": false}, {"id": "CVE-2025-52545", "publisher": "Armis", "title": "E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, w", "summary": "E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00264, "kev": false, "added": "2025-09-02", "pub": "2025-09-02T12:15:36.860", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "e3 supervisory controller firmware", "vendor": "copeland", "type": "os", "affected": ["< 2.31f01"], "fixed": "2.31f01", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-52545"}, {"t": "Mitigation, Third Party Advisory", "u": "https://www.armis.com/research/frostbyte10/"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17364, "pinned": false}, {"id": "CVE-2025-54289", "publisher": "Canonical Ltd.", "title": "Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read p", "summary": "Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format", "cvss": 8.1, "sev": "HIGH", "epss": 0.00212, "kev": false, "added": "2025-10-02", "pub": "2025-10-02T10:15:39.053", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 5.21.4", ">= 6.1 and < 6.5"], "fixed": "5.21.4, 6.5", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.21.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-54289"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228"}], "cwe": ["CWE-1385"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.10957, "pinned": false}, {"id": "CVE-2025-13020", "publisher": "Mozilla Corporation", "title": "Use-after-free in the WebRTC: Audio/Video component", "summary": "Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00306, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:39.097", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.5.0", "< 145.0"], "fixed": "140.5.0, 145.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13020"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22264, "pinned": false}, {"id": "CVE-2024-56837", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.2, "sev": "HIGH", "epss": 0.00517, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:28.940", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56837"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4314, "pinned": false}, {"id": "CVE-2025-67521", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Select Core select-core allows PHP Local File Inclusion.This issue affects Select Core: from n/a through < 2.6.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:25.540", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67521"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37674, "pinned": false}, {"id": "CVE-2025-67525", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through < 4.3.1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:26.973", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67525"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37676, "pinned": false}, {"id": "CVE-2025-67526", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress Sailing sailing allows PHP Local File Inclusion.This issue affects Sailing: from n/a through < 4.4.6.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:27.130", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67526"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37675, "pinned": false}, {"id": "CVE-2025-67527", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in trippleS Digiqole digiqole allows PHP Local File Inclusion.This issue affects Digiqole: from n/a through < 2.2.7.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:27.280", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67527"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37674, "pinned": false}, {"id": "CVE-2025-67529", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through < 5.3.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:27.553", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67529"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37675, "pinned": false}, {"id": "CVE-2025-67531", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in trippleS Turitor turitor allows PHP Local File Inclusion.This issue affects Turitor: from n/a through < 1.5.3.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:27.830", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67531"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37676, "pinned": false}, {"id": "CVE-2025-64193", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows PHP Local File Inclusion.This issue affects XStore: from n/a through < 9.6.1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00458, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:16:10.630", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64193"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.38747, "pinned": false}, {"id": "CVE-2026-17920", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to insta", "summary": "Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.190", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17920"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21936, "pinned": false}, {"id": "CVE-2026-67244", "publisher": "ASUSTOR, Inc.", "title": "A format string vulnerability was found in the Notification OAuth settings of ADM", "summary": "A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory information or cause denial of service of the affected component.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00499, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T03:16:25.090", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67244"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=67"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41907, "pinned": false}, {"id": "CVE-2026-67527", "publisher": "GitHub, Inc.", "title": "OpenProject is open-source, web-based project management software", "summary": "OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api/v3/work_packages/{id} accepted _links.fileLinks and allowed authenticated users with edit_work_packages but without manage_file_links to resolve Storages::FileLink records by raw id, detach or hard-delete existing FileLinks, and re-parent FileLinks from other projects to an attacker-controlled work package, exposing origin filename, origin id, and MIME ", "cvss": 7.6, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:14.473", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67527"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.36503, "pinned": false}, {"id": "CVE-2025-57739", "publisher": "Fortinet, Inc.", "title": "An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89]", "summary": "An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00305, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T18:17:12.100", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-57739"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.22096, "pinned": false}, {"id": "CVE-2025-13016", "publisher": "Mozilla Corporation", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "summary": "Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.677", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.5.0", "< 145.0"], "fixed": "140.5.0, 145.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13016"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}], "cwe": ["CWE-703"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34297, "pinned": false}, {"id": "CVE-2024-56836", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.5, "sev": "HIGH", "epss": 0.00433, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:28.760", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56836"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36589, "pinned": false}, {"id": "CVE-2026-5302", "publisher": "GitLab Inc.", "title": "CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read d", "summary": "CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00383, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T13:16:43.403", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "coolercontrold", "vendor": "coolercontrol", "type": "app", "affected": ["< 4.0.0"], "fixed": "4.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy coolercontrold || rpm -q coolercontrold || coolercontrold --version"}, {"label": "2. UPGRADE to 4.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade coolercontrold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade coolercontrold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5302"}], "cwe": ["CWE-942"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31108, "pinned": false}, {"id": "CVE-2026-17899", "publisher": "Chrome", "title": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who co", "summary": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.953", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17899"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17207, "pinned": false}, {"id": "CVE-2026-67245", "publisher": "ASUSTOR, Inc.", "title": "A path traversal vulnerability was found in the VPN Clients on the ADM", "summary": "A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an uploaded certificate file outside the intended VPN certificate directory, subject to process privileges and filesystem permissions.\nAffected products and v", "cvss": 8.1, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T05:16:38.713", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67245"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=68"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24817, "pinned": false}, {"id": "CVE-2026-13444", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim's flow. Additionally, the attacker can pollute the victim's collection by inserting their own documents into the shared namespa", "cvss": 8.1, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:06.997", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13444"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279989"}], "cwe": ["CWE-520"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27416, "pinned": false}, {"id": "CVE-2026-67352", "publisher": "VulnCheck", "title": "luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter th", "summary": "luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the administrator's browser origin.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.860", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67352"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.33854, "pinned": false}, {"id": "CVE-2026-67357", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings", "summary": "ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings tool that leaks the arcadedb.ha.clusterToken in cleartext. Attackers with MCP access can retrieve the cluster token and use it with X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User headers to impersonate root and achieve full server compromise.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00424, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:53.520", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67357"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35622, "pinned": false}, {"id": "CVE-2026-9856", "publisher": "huntr.dev", "title": "A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file", "summary": "A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `toke", "cvss": 7.1, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T16:16:25.413", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9856"}], "cwe": ["CWE-22"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.38884, "pinned": false}, {"id": "CVE-2026-73346", "publisher": "Patchstack", "title": "Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.", "summary": "Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:12.880", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73346"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31152, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-5301", "publisher": "GitLab Inc.", "title": "Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take ove", "summary": "Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries", "cvss": 7.6, "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T13:16:43.260", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "coolercontrold", "vendor": "coolercontrol", "type": "app", "affected": ["< 4.0.0"], "fixed": "4.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy coolercontrold || rpm -q coolercontrold || coolercontrold --version"}, {"label": "2. UPGRADE to 4.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade coolercontrold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade coolercontrold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5301"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29239, "pinned": false}, {"id": "CVE-2026-17995", "publisher": "Chrome", "title": "Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out", "summary": "Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.1, "sev": "HIGH", "epss": 0.00327, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.183", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17995"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24545, "pinned": false}, {"id": "CVE-2026-67347", "publisher": "VulnCheck", "title": "Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in", "summary": "Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that allows channel-scoped administrators to modify other tenants' data. Attackers can supply global IDs of StockLocation or Asset entities from different channels to overwrite inventory locations or catalog assets belonging to other tenants without proper channel isolation va", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00511, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:36.373", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67347"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.42779, "pinned": false}, {"id": "CVE-2026-44613", "publisher": "Apache Software Foundation", "title": "Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an attacker who lures an authenticated user to a \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0malicious site to perform actions on the user's behalf through REST and WebSocket endpoints. This issue affects Apache Zeppelin versions 0.6.0 through 0.12.0. Users are recommended to upgrad", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00387, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:12.130", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "zeppelin", "vendor": "apache", "type": "app", "affected": [">= 0.6.0 and < 0.12.1"], "fixed": "0.12.1", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zeppelin || rpm -q zeppelin || zeppelin --version"}, {"label": "2. UPGRADE to 0.12.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zeppelin"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zeppelin"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison zeppelin\nsudo apt install zeppelin=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold zeppelin"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list zeppelin\nsudo dnf downgrade zeppelin-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add zeppelin"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44613"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/zeppelin/pull/5229"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/94trzcny14c1csgotsnkyrfsflt30b2c"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31625, "pinned": false}, {"id": "CVE-2026-10545", "publisher": "IBM Corporation", "title": "IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to", "summary": "IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:01.597", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "planning analytics local", "vendor": "ibm", "type": "app", "affected": [">= 2.1.0 and <= 2.1.21"], "fixed": "newer than 2.1.21", "safe": "before 2.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy planning-analytics-local || rpm -q planning-analytics-local || planning-analytics-local --version"}, {"label": "2. UPGRADE to newer than 2.1.21 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade planning-analytics-local"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade planning-analytics-local"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison planning-analytics-local\nsudo apt install planning-analytics-local=<VERSION_BEFORE_2.1.0>\nsudo apt-mark hold planning-analytics-local"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list planning-analytics-local\nsudo dnf downgrade planning-analytics-local-<VERSION_BEFORE_2.1.0>\nsudo dnf versionlock add planning-analytics-local"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10545"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7278566"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31225, "pinned": false}, {"id": "CVE-2026-10700", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handl", "summary": "IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files/images/{flow_id}/{file_name} endpoint does not enforce authentication or authorization checks, allowing unauthenticated remote attackers to retrieve image files associated with any flow by specifying a valid flow_id and file_name.Additionally, the /api/v1/files/downloa", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0054, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:02.100", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.9.0"], "fixed": "1.9.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10700"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279675"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.44693, "pinned": false}, {"id": "CVE-2026-65835", "publisher": "GitHub, Inc.", "title": "Capsule is a multi-tenancy and policy-based framework for Kubernetes", "summary": "Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the ResourceReference.LoadResources and IsNamespacedGVK cluster-scoped resource rejection guard used by NamespacedItems, allowing a Tenant Owner to create cluster-sc", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:13.267", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65835"}], "cwe": ["CWE-269", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.244, "pinned": false}, {"id": "CVE-2026-54715", "publisher": "GitHub, Inc.", "title": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or thr", "summary": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Agent in a processed access log to write one to four attacker-influenced bytes beyond the heap allocation and corrupt or crash GoAccess. This issue is fix", "cvss": 7.1, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:17:49.323", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54715"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37684, "pinned": false}, {"id": "CVE-2026-20465", "publisher": "MediaTek, Inc.", "title": "In wlan AP driver, there is a possible out of bounds write due to a missing bounds check", "summary": "In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-7834.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.313", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20465"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.22328, "pinned": false}, {"id": "CVE-2026-72809", "publisher": "VulnCheck", "title": "SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's C", "summary": "SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role (RoleAdministrator) to any request whose RemoteAddr is loopback (127.0.0.1) for a specific set of endpoints (including /api/system/exit, getNetwork, getWorkspaceInfo, /assets/*, and /export/*). These localhost bypasses sit outside the access auth code gate, so they apply even when an ", "cvss": 8.0, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:53.110", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72809"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21548, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260723031701-9c16e9851f0b", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260723031701-9c16e9851f0b\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-3mp7-4rh5-jrv9", "note": "vulnerable: < 0.0.0-20260723031701-9c16e9851f0b"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-3mp7-4rh5-jrv9", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3mp7-4rh5-jrv9"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73379", "publisher": "Patchstack", "title": "Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.", "summary": "Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.867", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73379"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20365, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-6426", "publisher": "Mozilla Corporation", "title": "The executable file warning did not warn users before opening files with the `terminal` extension", "summary": "The executable file warning did not warn users before opening files with the `terminal` extension. \n*This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00205, "kev": false, "added": "2025-06-24", "pub": "2025-06-24T13:15:23.537", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 128.12.0", "< 140.0"], "fixed": "128.12.0, 140.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 128.12.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-6426"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09947, "pinned": false}, {"id": "CVE-2025-10529", "publisher": "Mozilla Corporation", "title": "Same-origin policy bypass in the Layout component", "summary": "Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:45.550", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 143.0"], "fixed": "143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 143.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10529"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-942"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21756, "pinned": false}, {"id": "CVE-2025-11183", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14\nallows an authorized attacker t", "summary": "Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14\nallows an authorized attacker to plant arbitrary JavaScript code in the page", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2025-10-13", "pub": "2025-10-13T10:15:45.887", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11183"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35261, "pinned": false}, {"id": "CVE-2025-62033", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "summary": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:09.470", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62033"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21472, "pinned": false}, {"id": "CVE-2025-13017", "publisher": "Mozilla Corporation", "title": "Same-origin policy bypass in the DOM: Notifications component", "summary": "Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.793", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.5.0", "< 145.0"], "fixed": "140.5.0, 145.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13017"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}], "cwe": ["CWE-942"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18938, "pinned": false}, {"id": "CVE-2025-13018", "publisher": "Mozilla Corporation", "title": "Mitigation bypass in the DOM: Security component", "summary": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.900", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.5.0", "< 145.0"], "fixed": "140.5.0, 145.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13018"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18938, "pinned": false}, {"id": "CVE-2025-13019", "publisher": "Mozilla Corporation", "title": "Same-origin policy bypass in the DOM: Workers component", "summary": "Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:39.000", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.5.0", "< 145.0"], "fixed": "140.5.0, 145.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13019"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}], "cwe": ["CWE-942"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18938, "pinned": false}, {"id": "CVE-2024-56838", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All version", "cvss": 7.2, "sev": "HIGH", "epss": 0.00391, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:29.120", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox ii firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.0"], "fixed": "2.17.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-56838"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32071, "pinned": false}, {"id": "CVE-2025-40806", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)", "summary": "A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack with valid users.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00456, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:45.653", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "gridscale x prepay", "vendor": "siemens", "type": "app", "affected": ["< 4.2.1"], "fixed": "4.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridscale-x-prepay || rpm -q gridscale-x-prepay || gridscale-x-prepay --version"}, {"label": "2. UPGRADE to 4.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridscale-x-prepay"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridscale-x-prepay"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40806"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-356310.html"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38624, "pinned": false}, {"id": "CVE-2026-17896", "publisher": "Chrome", "title": "Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitr", "summary": "Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.633", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17896"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28882, "pinned": false}, {"id": "CVE-2026-18362", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication agains", "summary": "The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:36.580", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18362"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30109, "pinned": false}, {"id": "CVE-2026-68578", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing al", "summary": "ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via the query tool.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00363, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:53.657", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68578"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.2893, "pinned": false}, {"id": "CVE-2026-59652", "publisher": "bcorg", "title": "In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.", "summary": "In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T01:16:45.513", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "bc-java", "vendor": "bouncycastle", "type": "app", "affected": ["< 1.85"], "fixed": "1.85", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bc-java || rpm -q bc-java || bc-java --version"}, {"label": "2. UPGRADE to 1.85 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bc-java"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bc-java"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59652"}, {"t": "Patch", "u": "https://github.com/bcgit/bc-java/commit/27c468af54ee6c6af87eab5a3a8468dce17e24a0"}], "cwe": ["CWE-90"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21068, "pinned": false}, {"id": "CVE-2026-20464", "publisher": "MediaTek, Inc.", "title": "In hevc decoder, there is a possible out of bounds write due to an integer overflow", "summary": "In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00497, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:40.357", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20464"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41768, "pinned": false}, {"id": "CVE-2026-18593", "publisher": "VulDB", "title": "A weakness has been identified in vxcontrol PentAGI up to 2.1.0", "summary": "A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotely. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the publi", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00422, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:19.207", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18593"}], "cwe": ["CWE-264", "CWE-265"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35491, "pinned": false}, {"id": "CVE-2026-73348", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.", "summary": "Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:03.240", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73348"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17575, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2025-40772", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SiPass integrated (All versions < V3.0)", "summary": "A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page.\r\n\r\nSuccessful exploitation allows an attacker to impersonate other users within the application and steal their session data. This could enable unauthorized access to acco", "cvss": 7.4, "sev": "HIGH", "epss": 0.00322, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:38.470", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sipass integrated", "vendor": "siemens", "type": "app", "affected": ["< 3.00"], "fixed": "3.00", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sipass-integrated || rpm -q sipass-integrated || sipass-integrated --version"}, {"label": "2. UPGRADE to 3.00 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sipass-integrated"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sipass-integrated"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40772"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-599451.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23995, "pinned": false}, {"id": "CVE-2025-40948", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (", "summary": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All version", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00397, "kev": false, "added": "2026-05-12", "pub": "2026-05-12T10:16:43.203", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "ruggedcom rox mx5000 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox mx5000re firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1400 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1500 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1501 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ruggedcom rox rx1510 firmware", "vendor": "siemens", "type": "os", "affected": ["< 2.17.1"], "fixed": "2.17.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40948"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-973901.html"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.32781, "pinned": false}, {"id": "CVE-2026-48236", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POS", "summary": "Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) are concatenated into mysqli connection arguments and dynamic SQL operating against an attacker-controlled database without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00355, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:20.440", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48236"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.28019, "pinned": false}, {"id": "CVE-2026-17930", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.237", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17930"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24245, "pinned": false}, {"id": "CVE-2026-67246", "publisher": "ASUSTOR, Inc.", "title": "A path traversal vulnerability was found in the Wallpaper component of ADM", "summary": "A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside the intended wallpaper directory, subject to user permissions and filesystem restrictions.\nAffected products and versions include: from ADM 4.1.0 throug", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00459, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T05:16:38.877", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67246"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=68"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.38847, "pinned": false}, {"id": "CVE-2026-67247", "publisher": "ASUSTOR, Inc.", "title": "A path traversal vulnerability was found in the IHM Log handling of ADM", "summary": "A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause the affected component to access an unintended filesystem path or log database file.\nAffected products and versions include: from ADM 4.1.0 through ADM 4", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00453, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T05:16:39.017", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "data master", "vendor": "asustor", "type": "os", "affected": [">= 4.1.0.rhu2 and <= 4.3.3.run1", ">= 5.0.0.ra82 and < 5.1.4.rjv2"], "fixed": "5.1.4.rjv2", "safe": "before 4.1.0.rhu2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67247"}, {"t": "Vendor Advisory", "u": "https://www.asustor.com/security/security_advisory_detail?id=68"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.38366, "pinned": false}, {"id": "CVE-2026-16969", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X", "summary": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00284, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:35.860", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16969"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19899, "pinned": false}, {"id": "CVE-2026-16971", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against bru", "summary": "The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:36.220", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16971"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.252, "pinned": false}, {"id": "CVE-2026-18360", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X", "summary": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00284, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:36.343", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18360"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.199, "pinned": false}, {"id": "CVE-2026-18361", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X", "summary": "The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00284, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:36.460", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18361"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.199, "pinned": false}, {"id": "CVE-2026-12945", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build j", "summary": "IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00364, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:28.173", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.10.2"], "fixed": "1.10.2", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.10.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12945"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279994"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29049, "pinned": false}, {"id": "CVE-2026-64816", "publisher": "VulnCheck", "title": "RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in", "summary": "RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in lut_processing.rs. On Windows, a UNC path in lutPath causes an outbound SMB connection to an attacker-controlled host, leaking the victim's NTLMv2 credentials. The vulnerable code path is reachable through two vectors: community presets fetched automatically from the remote preset repository when the victim opens the Community tab, and i", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00446, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:55.920", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64816"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37821, "pinned": false}, {"id": "CVE-2026-72799", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolut", "summary": "SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolution endpoints (getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath). In publish mode, when Publish.Auth.Enable is false, an unauthenticated (anonymous) reader \u2014 or any publish reader token \u2014 can call these endpoints to enumerate the complete private document tree, mapping notebook names, folder hierarchies, and ", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.690", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72799"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24333, "pinned": false}, {"id": "CVE-2025-40831", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)", "summary": "A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00388, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:46.893", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinec security monitor", "vendor": "siemens", "type": "app", "affected": ["< 4.10.0"], "fixed": "4.10.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-security-monitor || rpm -q sinec-security-monitor || sinec-security-monitor --version"}, {"label": "2. UPGRADE to 4.10.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-security-monitor"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-security-monitor"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40831"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-882673.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.31695, "pinned": false}, {"id": "CVE-2025-54748", "publisher": "Patchstack", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapS", "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:15:56.187", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-54748"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31974, "pinned": false}, {"id": "CVE-2026-48244", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed t", "summary": "Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:21.530", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48244"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31296, "pinned": false}, {"id": "CVE-2026-17898", "publisher": "Chrome", "title": "Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to", "summary": "Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.840", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17898"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17534, "pinned": false}, {"id": "CVE-2026-17948", "publisher": "Chrome", "title": "Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to insta", "summary": "Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.120", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17948"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17533, "pinned": false}, {"id": "CVE-2026-17979", "publisher": "Chrome", "title": "Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside ", "summary": "Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.477", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17979"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20368, "pinned": false}, {"id": "CVE-2026-5219", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd", "summary": "Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery.\n\nThis issue affects E-Commerce Pack: before 5.03.01.49.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T14:17:01.747", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5219"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07384, "pinned": false}, {"id": "CVE-2026-23981", "publisher": "Apache Software Foundation", "title": "An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissi", "summary": "An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updating a chart's properties via the REST API, a user can provide a list of dashboard IDs (dashboards) to associate the chart with. The validation logic in the UpdateChartCommand failed to verify that the user had write permissions for the target dashboards specified in the ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00556, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:10.447", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "superset", "vendor": "apache", "type": "app", "affected": ["< 6.0.0"], "fixed": "6.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy superset || rpm -q superset || superset --version"}, {"label": "2. UPGRADE to 6.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade superset"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade superset"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-23981"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/k7q9z27t901xvqnkwgyns1l7w1dj3csf"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45651, "pinned": false}, {"id": "CVE-2026-10535", "publisher": "IBM Corporation", "title": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2", "summary": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:01.167", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5.0 and <= 11.5.9", ">= 12.1.0 and < 12.1.5"], "fixed": "12.1.5", "safe": "before 11.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5.0>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5.0>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10535"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279466"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.051, "pinned": false}, {"id": "CVE-2025-10527", "publisher": "Mozilla Corporation", "title": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component", "summary": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00277, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:44.457", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "<= 143.0"], "fixed": "140.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", ">= 141.0 and < 143.0"], "fixed": "140.3.0, 143.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10527"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19095, "pinned": false}, {"id": "CVE-2025-13012", "publisher": "Mozilla Corporation", "title": "Race condition in the Graphics component", "summary": "Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00243, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.253", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.30.0", "< 145.0", ">= 140.0 and < 140.5.0"], "fixed": "115.30.0, 140.5.0, 145.0", "safe": "before 140.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.30.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 140.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_140.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_140.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13012"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-89/"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14638, "pinned": false}, {"id": "CVE-2025-40936", "publisher": "Siemens AG", "title": "A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simc", "summary": "A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00203, "kev": false, "added": "2025-11-17", "pub": "2025-11-17T12:15:44.493", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40936"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.09807, "pinned": false}, {"id": "CVE-2025-40829", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Simcenter Femap (All versions < V2512)", "summary": "A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-27146)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00198, "kev": false, "added": "2025-12-12", "pub": "2025-12-12T09:15:49.817", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simcenter femap", "vendor": "siemens", "type": "app", "affected": ["< 2512.0000"], "fixed": "2512.0000", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simcenter-femap || rpm -q simcenter-femap || simcenter-femap --version"}, {"label": "2. UPGRADE to 2512.0000 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade simcenter-femap"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade simcenter-femap"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40829"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-512988.html"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09125, "pinned": false}, {"id": "CVE-2026-39564", "publisher": "Patchstack", "title": "Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunsh", "summary": "Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T09:16:27.637", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39564"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.249, "pinned": false}, {"id": "CVE-2026-48246", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_S", "summary": "Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request a", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00265, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:21.780", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48246"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.17475, "pinned": false}, {"id": "CVE-2026-17946", "publisher": "Chrome", "title": "Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromise", "summary": "Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.897", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17946"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27039, "pinned": false}, {"id": "CVE-2026-17952", "publisher": "Chrome", "title": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.603", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17952"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16302, "pinned": false}, {"id": "CVE-2026-17968", "publisher": "Chrome", "title": "Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obt", "summary": "Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.307", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17968"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27037, "pinned": false}, {"id": "CVE-2026-17992", "publisher": "Chrome", "title": "Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obta", "summary": "Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.863", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17992"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27039, "pinned": false}, {"id": "CVE-2026-15929", "publisher": "LG Electronics", "title": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Elect", "summary": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection.\n\nThis issue affects SmartShare: through 2.3.1712.1202,\u00a0which is supported on Microsoft Windows 10 and earlier versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T02:16:45.360", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15929"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.18923, "pinned": false}, {"id": "CVE-2026-58043", "publisher": "HackerOne", "title": "A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix bound", "summary": "A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.\r\n\r\nUnder `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist.\r\n\r\nThis vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00152, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.310", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "node.js", "vendor": "nodejs", "type": "app", "affected": [">= 22.0 and <= 22.23.1", ">= 24.0.0 and <= 24.18.0", ">= 26.0.0 and <= 26.5.0"], "fixed": "newer than 26.5.0", "safe": "before 22.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy node.js || rpm -q node.js || node.js --version"}, {"label": "2. UPGRADE to newer than 26.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade node.js"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade node.js"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.0 (Debian / Ubuntu)", "cmd": "apt-cache madison node.js\nsudo apt install node.js=<VERSION_BEFORE_22.0>\nsudo apt-mark hold node.js"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list node.js\nsudo dnf downgrade node.js-<VERSION_BEFORE_22.0>\nsudo dnf versionlock add node.js"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58043"}, {"t": "Vendor Advisory", "u": "https://nodejs.org/en/blog/vulnerability/july-2026-security-releases"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04043, "pinned": false}, {"id": "CVE-2026-11885", "publisher": "IBM Corporation", "title": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1", "summary": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00148, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:27.760", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "power system s1122 \\(9824-22a\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1124 \\(9824-42a\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1122s \\(9824-22b\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system s1114 \\(9824-41b\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system l1122 \\(9856-22h\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "power system l1124 \\(9856-42h\\) firmware", "vendor": "ibm", "type": "os", "affected": [">= fw1110.00 and < fw1110.30"], "fixed": "fw1110.30", "safe": "before fw1110.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11885"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280628"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03688, "pinned": false}, {"id": "CVE-2026-73349", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.", "summary": "Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:13.010", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73349"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20887, "pinned": false}, {"id": "CVE-2026-66633", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:16:57.823", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66633"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15673, "pinned": false}, {"id": "CVE-2026-73375", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.270", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73375"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15602, "pinned": false}, {"id": "CVE-2025-62037", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "summary": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:10.070", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62037"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24896, "pinned": false}, {"id": "CVE-2025-62057", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethem", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00244, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:12.030", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62057"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14688, "pinned": false}, {"id": "CVE-2025-40827", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All v", "summary": "A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:38.627", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40827"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05767, "pinned": false}, {"id": "CVE-2026-7765", "publisher": "Checkmk GmbH", "title": "Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching ", "summary": "Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by sending requests to the underlying endpoint, even without a User Messages widget present.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-06-08", "pub": "2026-06-08T13:16:33.627", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.5.0", "2.5.0 b1", "2.5.0 b2", "2.5.0 b3", "2.5.0 p1", "2.5.0 p2", "2.5.0 p3", "2.5.0 p4"], "fixed": null, "safe": "before 2.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.5.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.5.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7765"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/19815"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22957, "pinned": false}, {"id": "CVE-2026-46749", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)", "summary": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00199, "kev": false, "added": "2026-06-09", "pub": "2026-06-09T10:16:44.410", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinec ins", "vendor": "siemens", "type": "app", "affected": ["<= 1.0", "1.0 sp1", "1.0 sp2", "1.0 sp2_update_1", "1.0 sp2_update_2", "1.0 sp2_update_3", "1.0 sp2_update_4", "1.0 sp2_update_5"], "fixed": "newer than 1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-ins || rpm -q sinec-ins || sinec-ins --version"}, {"label": "2. UPGRADE to newer than 1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-ins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-ins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46749"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-860189.html"}], "cwe": ["CWE-760"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09225, "pinned": false}, {"id": "CVE-2026-17892", "publisher": "Chrome", "title": "Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obt", "summary": "Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.207", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17892"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23505, "pinned": false}, {"id": "CVE-2026-17916", "publisher": "Chrome", "title": "Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00223, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.780", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17916"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12187, "pinned": false}, {"id": "CVE-2026-17975", "publisher": "Chrome", "title": "Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker t", "summary": "Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.057", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17975"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23508, "pinned": false}, {"id": "CVE-2026-18001", "publisher": "Chrome", "title": "Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obt", "summary": "Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.797", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18001"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23516, "pinned": false}, {"id": "CVE-2026-18005", "publisher": "Chrome", "title": "Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obt", "summary": "Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.240", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18005"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23509, "pinned": false}, {"id": "CVE-2026-44093", "publisher": "CERT VDE", "title": "A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged lo", "summary": "A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T07:16:57.260", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44093"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08456, "pinned": false}, {"id": "CVE-2026-44106", "publisher": "CERT VDE", "title": "A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local us", "summary": "A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T07:16:59.027", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44106"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08457, "pinned": false}, {"id": "CVE-2026-15657", "publisher": "CERT/CC", "title": "A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-proces", "summary": "A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:16:56.600", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15657"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26304, "pinned": false}, {"id": "CVE-2026-65875", "publisher": "JPCERT/CC", "title": "BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability", "summary": "BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attacker, the malicious code may be executed.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00261, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T01:16:45.657", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65875"}], "cwe": ["CWE-1236"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.16946, "pinned": false}, {"id": "CVE-2026-20483", "publisher": "MediaTek, Inc.", "title": "In Telephony, there is a possible escalation of privilege due to a missing permission check", "summary": "In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00172, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.430", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8893 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6739 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6761 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6765 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6781 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20483"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06322, "pinned": false}, {"id": "CVE-2026-59701", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001)", "summary": "A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:00.763", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59701"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04295, "pinned": false}, {"id": "CVE-2025-40809", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 ", "summary": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00138, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:39.580", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "solid edge se2024", "vendor": "siemens", "type": "app", "affected": ["all versions", "224.0", "224.0 update_0001", "224.0 update_00010", "224.0 update_00011", "224.0 update_00012", "224.0 update_00013", "224.0 update_0002"], "fixed": null, "safe": "before 224.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2024 || rpm -q solid-edge-se2024 || solid-edge-se2024 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 224.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2024\nsudo apt install solid-edge-se2024=<VERSION_BEFORE_224.0>\nsudo apt-mark hold solid-edge-se2024"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2024\nsudo dnf downgrade solid-edge-se2024-<VERSION_BEFORE_224.0>\nsudo dnf versionlock add solid-edge-se2024"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge se2025", "vendor": "siemens", "type": "app", "affected": ["all versions", "225.0", "225.0 update_0001", "225.0 update_0002", "225.0 update_0003", "225.0 update_0004", "225.0 update_0005"], "fixed": null, "safe": "before 225.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2025 || rpm -q solid-edge-se2025 || solid-edge-se2025 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 225.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2025\nsudo apt install solid-edge-se2025=<VERSION_BEFORE_225.0>\nsudo apt-mark hold solid-edge-se2025"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2025\nsudo dnf downgrade solid-edge-se2025-<VERSION_BEFORE_225.0>\nsudo dnf versionlock add solid-edge-se2025"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40809"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-541582.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02881, "pinned": false}, {"id": "CVE-2025-40810", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 ", "summary": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00138, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:39.760", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "solid edge se2024", "vendor": "siemens", "type": "app", "affected": ["all versions", "224.0", "224.0 update_0001", "224.0 update_00010", "224.0 update_00011", "224.0 update_00012", "224.0 update_00013", "224.0 update_0002"], "fixed": null, "safe": "before 224.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2024 || rpm -q solid-edge-se2024 || solid-edge-se2024 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 224.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2024\nsudo apt install solid-edge-se2024=<VERSION_BEFORE_224.0>\nsudo apt-mark hold solid-edge-se2024"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2024\nsudo dnf downgrade solid-edge-se2024-<VERSION_BEFORE_224.0>\nsudo dnf versionlock add solid-edge-se2024"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge se2025", "vendor": "siemens", "type": "app", "affected": ["all versions", "225.0", "225.0 update_0001", "225.0 update_0002", "225.0 update_0003", "225.0 update_0004", "225.0 update_0005"], "fixed": null, "safe": "before 225.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2025 || rpm -q solid-edge-se2025 || solid-edge-se2025 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 225.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2025\nsudo apt install solid-edge-se2025=<VERSION_BEFORE_225.0>\nsudo apt-mark hold solid-edge-se2025"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2025\nsudo dnf downgrade solid-edge-se2025-<VERSION_BEFORE_225.0>\nsudo dnf versionlock add solid-edge-se2025"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40810"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-541582.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02882, "pinned": false}, {"id": "CVE-2025-40811", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 ", "summary": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00138, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:39.923", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "solid edge se2024", "vendor": "siemens", "type": "app", "affected": ["all versions", "224.0", "224.0 update_0001", "224.0 update_00010", "224.0 update_00011", "224.0 update_00012", "224.0 update_00013", "224.0 update_0002"], "fixed": null, "safe": "before 224.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2024 || rpm -q solid-edge-se2024 || solid-edge-se2024 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 224.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2024\nsudo apt install solid-edge-se2024=<VERSION_BEFORE_224.0>\nsudo apt-mark hold solid-edge-se2024"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2024\nsudo dnf downgrade solid-edge-se2024-<VERSION_BEFORE_224.0>\nsudo dnf versionlock add solid-edge-se2024"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge se2025", "vendor": "siemens", "type": "app", "affected": ["all versions", "225.0", "225.0 update_0001", "225.0 update_0002", "225.0 update_0003", "225.0 update_0004", "225.0 update_0005"], "fixed": null, "safe": "before 225.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2025 || rpm -q solid-edge-se2025 || solid-edge-se2025 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 225.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2025\nsudo apt install solid-edge-se2025=<VERSION_BEFORE_225.0>\nsudo apt-mark hold solid-edge-se2025"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2025\nsudo dnf downgrade solid-edge-se2025-<VERSION_BEFORE_225.0>\nsudo dnf versionlock add solid-edge-se2025"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40811"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-541582.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02881, "pinned": false}, {"id": "CVE-2025-40812", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 ", "summary": "A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00138, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:40.090", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "solid edge se2024", "vendor": "siemens", "type": "app", "affected": ["all versions", "224.0", "224.0 update_0001", "224.0 update_00010", "224.0 update_00011", "224.0 update_00012", "224.0 update_00013", "224.0 update_0002"], "fixed": null, "safe": "before 224.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2024 || rpm -q solid-edge-se2024 || solid-edge-se2024 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 224.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2024\nsudo apt install solid-edge-se2024=<VERSION_BEFORE_224.0>\nsudo apt-mark hold solid-edge-se2024"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2024\nsudo dnf downgrade solid-edge-se2024-<VERSION_BEFORE_224.0>\nsudo dnf versionlock add solid-edge-se2024"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "solid edge se2025", "vendor": "siemens", "type": "app", "affected": ["all versions", "225.0", "225.0 update_0001", "225.0 update_0002", "225.0 update_0003", "225.0 update_0004", "225.0 update_0005"], "fixed": null, "safe": "before 225.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy solid-edge-se2025 || rpm -q solid-edge-se2025 || solid-edge-se2025 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 225.0 (Debian / Ubuntu)", "cmd": "apt-cache madison solid-edge-se2025\nsudo apt install solid-edge-se2025=<VERSION_BEFORE_225.0>\nsudo apt-mark hold solid-edge-se2025"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list solid-edge-se2025\nsudo dnf downgrade solid-edge-se2025-<VERSION_BEFORE_225.0>\nsudo dnf versionlock add solid-edge-se2025"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40812"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-541582.html"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02881, "pinned": false}, {"id": "CVE-2025-58966", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NE", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through < 8.2.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00243, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:52.960", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58966"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14579, "pinned": false}, {"id": "CVE-2025-58964", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00228, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:00.157", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58964"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12874, "pinned": false}, {"id": "CVE-2025-59556", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00228, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:01.613", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59556"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12875, "pinned": false}, {"id": "CVE-2025-62036", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper To", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00228, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:09.920", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62036"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12877, "pinned": false}, {"id": "CVE-2024-32008", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)", "summary": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00129, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:35.110", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-32008"}], "cwe": ["CWE-648"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02307, "pinned": false}, {"id": "CVE-2024-32009", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)", "summary": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00119, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:35.287", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-32009"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01663, "pinned": false}, {"id": "CVE-2024-32010", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)", "summary": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00125, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:35.450", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-32010"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02016, "pinned": false}, {"id": "CVE-2025-67572", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Ac", "summary": "Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through < 6.7.4.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:34.247", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67572"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1609, "pinned": false}, {"id": "CVE-2025-67573", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Acce", "summary": "Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sailing: from n/a through < 4.4.6.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:34.390", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67573"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16089, "pinned": false}, {"id": "CVE-2025-60182", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through < 3.8.7.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00219, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:16:09.853", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60182"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11769, "pinned": false}, {"id": "CVE-2025-64189", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme X", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through < 5.6.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00219, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:16:10.243", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64189"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11772, "pinned": false}, {"id": "CVE-2025-56535", "publisher": "MITRE", "title": "A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web s", "summary": "A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-04-29", "pub": "2026-04-29T16:16:21.610", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "opennebula", "vendor": "opennebula", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy opennebula || rpm -q opennebula || opennebula --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade opennebula"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade opennebula"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-56535"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.07686, "pinned": false}, {"id": "CVE-2026-17909", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowe", "summary": "Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chromium security severity: Low)", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00271, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.017", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17909"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18346, "pinned": false}, {"id": "CVE-2026-17917", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.880", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17917"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20084, "pinned": false}, {"id": "CVE-2026-17921", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.297", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17921"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21283, "pinned": false}, {"id": "CVE-2026-17926", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.820", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17926"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21283, "pinned": false}, {"id": "CVE-2026-17931", "publisher": "Chrome", "title": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.340", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17931"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21283, "pinned": false}, {"id": "CVE-2026-17953", "publisher": "Chrome", "title": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote", "summary": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.703", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17953"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2128, "pinned": false}, {"id": "CVE-2026-17985", "publisher": "Chrome", "title": "Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.113", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17985"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21281, "pinned": false}, {"id": "CVE-2026-17986", "publisher": "Chrome", "title": "Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.210", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17986"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.20084, "pinned": false}, {"id": "CVE-2026-17988", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.420", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17988"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21281, "pinned": false}, {"id": "CVE-2026-55777", "publisher": "GitHub, Inc.", "title": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or thr", "summary": "GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent in a processed access log to read up to approximately 4 KB beyond the heap allocation and conditionally crash GoAccess. This issue is fixed in versi", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00445, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:17:57.360", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55777"}], "cwe": ["CWE-125"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37681, "pinned": false}, {"id": "CVE-2026-61526", "publisher": "GitHub, Inc.", "title": "AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework", "summary": "AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the  error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute attacker-controlled JavaScript when a victim opens it and no custom status page or JSON response handles the error. When debug mode is disabled and no custo", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:12.030", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61526"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26009, "pinned": false}, {"id": "CVE-2026-62845", "publisher": "GitHub, Inc.", "title": "Kamaji is the Hosted Control Plane Manager for Kubernetes", "summary": "Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have no format validation, so a value containing a quote character breaks out of the quoted identifier \u2014 SQL injection executed over Kamaji's root connection ", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00324, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:55.457", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62845"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.24273, "pinned": false}, {"id": "CVE-2026-56758", "publisher": "ICS-CERT", "title": "The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS\n connection establishment", "summary": "The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS\n connection establishment. When parsing certain fields within the \ncalling AP title, an attacker controlled length value of zero or one may\n cause the parser to read past the end of a heap buffer.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:51.517", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56758"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20998, "pinned": false}, {"id": "CVE-2026-20482", "publisher": "MediaTek, Inc.", "title": "In wlan STA FW, there is a possible system becoming unresponsive due to logging", "summary": "In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00296, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.317", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8532 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7902 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7921 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7922 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8518s firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20482"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21149, "pinned": false}, {"id": "CVE-2026-20495", "publisher": "MediaTek, Inc.", "title": "In Bluetooth driver, there is a possible permission bypass due to a missing permission check", "summary": "In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0015, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.663", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt7925 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7927 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7902 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7920 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7921 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt7922 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20495"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03879, "pinned": false}, {"id": "CVE-2026-77993", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder ", "summary": "Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00436, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T08:16:33.677", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77993"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.36906, "pinned": false}, {"id": "CVE-2025-10290", "publisher": "Mozilla Corporation", "title": "Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not re", "summary": "Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS 143.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:41.520", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox focus", "vendor": "mozilla", "type": "app", "affected": ["< 143.0"], "fixed": "143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-focus || rpm -q firefox-focus || firefox-focus --version"}, {"label": "2. UPGRADE to 143.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-focus"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-focus"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10290"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-76/"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15888, "pinned": false}, {"id": "CVE-2025-40807", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)", "summary": "A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:45.853", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "gridscale x prepay", "vendor": "siemens", "type": "app", "affected": ["< 4.2.1"], "fixed": "4.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gridscale-x-prepay || rpm -q gridscale-x-prepay || gridscale-x-prepay --version"}, {"label": "2. UPGRADE to 4.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gridscale-x-prepay"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gridscale-x-prepay"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40807"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-356310.html"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2175, "pinned": false}, {"id": "CVE-2025-64376", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioSt", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00178, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:16:14.640", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64376"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07, "pinned": false}, {"id": "CVE-2026-17923", "publisher": "Chrome", "title": "Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass naviga", "summary": "Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted domain name. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.503", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17923"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18831, "pinned": false}, {"id": "CVE-2026-17929", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.123", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17929"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18831, "pinned": false}, {"id": "CVE-2026-18014", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.180", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18014"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18832, "pinned": false}, {"id": "CVE-2026-58040", "publisher": "HackerOne", "title": "An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification ac", "summary": "An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.190", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58040"}], "cwe": ["CWE-297"], "vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19158, "pinned": false}, {"id": "CVE-2026-11980", "publisher": "IBM Corporation", "title": "IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-u", "summary": "IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.", "cvss": 7.3, "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:24.277", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "aspera", "vendor": "ibm", "type": "app", "affected": [">= 1.0.5 and <= 1.0.19"], "fixed": "newer than 1.0.19", "safe": "before 1.0.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aspera || rpm -q aspera || aspera --version"}, {"label": "2. UPGRADE to newer than 1.0.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aspera"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aspera"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.5 (Debian / Ubuntu)", "cmd": "apt-cache madison aspera\nsudo apt install aspera=<VERSION_BEFORE_1.0.5>\nsudo apt-mark hold aspera"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aspera\nsudo dnf downgrade aspera-<VERSION_BEFORE_1.0.5>\nsudo dnf versionlock add aspera"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11980"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7280939"}], "cwe": ["CWE-242"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.06026, "pinned": false}, {"id": "CVE-2026-54522", "publisher": "GitHub, Inc.", "title": "MessagePack for Ruby is an implementation of the MessagePack binary serialization format", "summary": "MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_last, rmem_end, and rmem_owner stale after _msgpack_buffer_shift_chunk returns an rmem page to the shared pool, allowing a subsequent Buffer#write and a second MessagePack::Buffer to alias the page and disclose or corrupt cross-buffer data. This issue is fixed in version 1.8.2.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T17:16:33.030", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "messagepack", "vendor": "msgpack", "type": "app", "affected": ["< 1.8.2"], "fixed": "1.8.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy messagepack || rpm -q messagepack || messagepack --version"}, {"label": "2. UPGRADE to 1.8.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade messagepack"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade messagepack"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54522"}, {"t": "Patch", "u": "https://github.com/msgpack/msgpack-ruby/commit/5627d71606b565641d2dd501b82aae862f4abe90"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.127, "pinned": false}, {"id": "CVE-2026-67530", "publisher": "GitHub, Inc.", "title": "WACRM is a self-hostable CRM template for WhatsApp", "summary": "WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validation in src/lib/automations/validate.ts allowed an authenticated user with automation privileges to submit an arbitrary webhook URL that the server fetched without the existing isDeliverableUrl SSRF guard in src/lib/webhooks/ssrf.ts, allowing requests to private, loopback, link-local, or cloud", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:14.887", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67530"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.168, "pinned": false}, {"id": "CVE-2026-67332", "publisher": "VulnCheck", "title": "@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant", "summary": "@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never covered, bypassing intended authorization boundaries.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:03.973", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67332"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16723, "pinned": false}, {"id": "CVE-2026-68582", "publisher": "VulnCheck", "title": "Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in th", "summary": "Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-collection endpoint (GET /api/v1/projects/{project}/views/{view}/tasks). The endpoint loads the requested project view from the URL path without verifying the caller is authorized for it. For a link-share token holder, the task scope is pinned to the share's own project, but the view is taken from the attacker-controlled path and n", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:54.233", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68582"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17793, "pinned": false}, {"id": "CVE-2026-77028", "publisher": "Joomla! Project", "title": "Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo", "summary": "Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00414, "kev": false, "added": "2026-08-21", "pub": "2026-08-21T13:18:20.280", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77028"}], "cwe": ["CWE-79", "CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34578, "pinned": false}, {"id": "CVE-2026-73357", "publisher": "Patchstack", "title": "Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.", "summary": "Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:13.280", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73357"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12369, "pinned": false}, {"id": "CVE-2025-6430", "publisher": "Mozilla Corporation", "title": "When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the", "summary": "When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00268, "kev": false, "added": "2025-06-24", "pub": "2025-06-24T13:15:23.993", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 128.12.0", "< 140.0"], "fixed": "128.12.0, 140.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 128.12.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-6430"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1793, "pinned": false}, {"id": "CVE-2025-3025", "publisher": "NortonLifeLock Inc.", "title": "Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a", "summary": "Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before < 6.36.11508.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00145, "kev": false, "added": "2025-09-15", "pub": "2025-09-15T13:15:36.040", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-3025"}], "cwe": ["CWE-552"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03431, "pinned": false}, {"id": "CVE-2025-11711", "publisher": "Mozilla Corporation", "title": "There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable", "summary": "There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.330", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.29.0", "< 144.0", ">= 116.0 and < 140.4.0"], "fixed": "115.29.0, 140.4.0, 144.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.29.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11711"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-82/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-591"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13084, "pinned": false}, {"id": "CVE-2025-49936", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos W", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through < 8.3.2.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00217, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:39.883", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-49936"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11493, "pinned": false}, {"id": "CVE-2025-62005", "publisher": "Patchstack", "title": "Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomembe", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Cross Site Request Forgery.This issue affects SUMO Memberships for WooCommerce: from n/a through < 7.8.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00135, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:16:02.287", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62005"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02693, "pinned": false}, {"id": "CVE-2026-41918", "publisher": "Siemens AG", "title": "A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)", "summary": "A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00334, "kev": false, "added": "2026-06-02", "pub": "2026-06-02T14:16:53.200", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41918"}], "cwe": ["CWE-525"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25587, "pinned": false}, {"id": "CVE-2026-17936", "publisher": "Chrome", "title": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who", "summary": "Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.860", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17936"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-352", "CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14011, "pinned": false}, {"id": "CVE-2026-17974", "publisher": "Chrome", "title": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker t", "summary": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.950", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17974"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12648, "pinned": false}, {"id": "CVE-2026-17999", "publisher": "Chrome", "title": "Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perfo", "summary": "Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.590", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17999"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13105, "pinned": false}, {"id": "CVE-2026-16727", "publisher": "ASUS", "title": "Concurrent Execution using Shared Resource with Improper Synchronization (\u201cRace Condition\u201d) in ASUS Armoury Cr", "summary": "Concurrent Execution using Shared Resource with Improper Synchronization (\u201cRace Condition\u201d) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement.\nRefer to the '\u00a0Security Update for ASUS Armoury Crate\u00a0' section on the ASUS Security Advisory for more information.", "cvss": 7.3, "sev": "HIGH", "epss": 0.0012, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T02:16:45.537", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16727"}], "cwe": ["CWE-362"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01737, "pinned": false}, {"id": "CVE-2026-64870", "publisher": "GitHub, Inc.", "title": "MaxKB is an open-source AI assistant for enterprise", "summary": "MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update_tool passes caller-supplied download_url and download_callback_url values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user to make the server request internal, loopback, link-local, or cloud metadata URLs. A fix is present on the v2 branch but has not yet been included i", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00364, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:18:35.397", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64870"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29105, "pinned": false}, {"id": "CVE-2026-4793", "publisher": "Synology Inc.", "title": "An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to ", "summary": "An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T07:16:43.453", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "assistant", "vendor": "synology", "type": "app", "affected": ["< 7.0.7-50095"], "fixed": "7.0.7-50095", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy assistant || rpm -q assistant || assistant --version"}, {"label": "2. UPGRADE to 7.0.7-50095 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade assistant"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade assistant"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4793"}, {"t": "Release Notes, Vendor Advisory", "u": "https://www.synology.com/en-global/security/advisory/Synology_SA_26_12"}], "cwe": ["CWE-276"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03755, "pinned": false}, {"id": "CVE-2026-0392", "publisher": "ENISA", "title": "eParakst\u012bt\u0101js 3.0 for Windows before version\n1.10.0 retrieves and executes its automatic updates over a channe", "summary": "eParakst\u012bt\u0101js 3.0 for Windows before version\n1.10.0 retrieves and executes its automatic updates over a channel that is not\nauthenticated or integrity-protected. On each launch the application fetches an\nupdate descriptor (XML) over TLS but accepts any TLS certificate (a permissive\nTrustManager and a HostnameVerifier that always returns true), does not verify\nany digital signature on the update descriptor, and does not verify the\nAuthenticode sig", "cvss": 7.3, "sev": "HIGH", "epss": 0.00086, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T10:16:27.747", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0392"}], "cwe": ["CWE-295", "CWE-347", "CWE-494"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00298, "pinned": false}, {"id": "CVE-2026-71570", "publisher": "Joomla! Project", "title": "Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend op", "summary": "Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-14", "pub": "2026-08-14T21:17:56.807", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71570"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34361, "pinned": false}, {"id": "CVE-2026-67284", "publisher": "Joomla! Project", "title": "Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - ", "summary": "Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on files owned by other users.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T10:17:20.440", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67284"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27515, "pinned": false}, {"id": "CVE-2026-57262", "publisher": "Siemens AG", "title": "A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9)", "summary": "A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00149, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:18:59.463", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57262"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03773, "pinned": false}, {"id": "CVE-2025-40594", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All v", "summary": "A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to esca", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T09:15:36.743", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinamics g220 firmware", "vendor": "siemens", "type": "os", "affected": ["6.4", "6.4 hf1"], "fixed": null, "safe": "before 6.4", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sinamics s200 firmware", "vendor": "siemens", "type": "os", "affected": ["6.4"], "fixed": null, "safe": "before 6.4", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sinamics s210 firmware", "vendor": "siemens", "type": "os", "affected": ["6.4", "6.4 hf1"], "fixed": null, "safe": "before 6.4", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40594"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-027652.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10427, "pinned": false}, {"id": "CVE-2025-59042", "publisher": "GitHub, Inc.", "title": "PyInstaller bundles a Python application and all its dependencies into a single package", "summary": "PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to `sys.path` during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryption while this entry is still present in `sys.path`, an application built with PyInstaller < 6.0.0 may be tricked by an unprivileged attacker into execut", "cvss": 7.0, "sev": "HIGH", "epss": 0.00126, "kev": false, "added": "2025-09-09", "pub": "2025-09-09T23:15:37.403", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59042"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02088, "pinned": false}, {"id": "CVE-2025-64197", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Re", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2025-10-29", "pub": "2025-10-29T09:15:39.277", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64197"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09853, "pinned": false}, {"id": "CVE-2025-62032", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv t", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:09.303", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62032"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09857, "pinned": false}, {"id": "CVE-2025-67538", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews Gallery jnews-gallery allows Stored XSS.This issue affects JNews Gallery: from n/a through < 12.0.1.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00196, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:28.903", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67538"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08809, "pinned": false}, {"id": "CVE-2025-67544", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Get Bowt", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Get Bowtied Shopkeeper Extender shopkeeper-extender allows Stored XSS.This issue affects Shopkeeper Extender: from n/a through < 7.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:30.047", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67544"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08235, "pinned": false}, {"id": "CVE-2026-39526", "publisher": "Patchstack", "title": "Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting", "summary": "Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through < 4.11.2.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T09:16:25.940", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39526"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23109, "pinned": false}, {"id": "CVE-2026-5300", "publisher": "GitLab Inc.", "title": "Unauthenticated functionality in  CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view", "summary": "Unauthenticated functionality in  CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0028, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T13:16:43.123", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "coolercontrold", "vendor": "coolercontrol", "type": "app", "affected": ["< 4.0.0"], "fixed": "4.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy coolercontrold || rpm -q coolercontrold || coolercontrold --version"}, {"label": "2. UPGRADE to 4.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade coolercontrold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade coolercontrold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5300"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19375, "pinned": false}, {"id": "CVE-2026-17919", "publisher": "Chrome", "title": "Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local a", "summary": "Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security severity: Low)", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00163, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.090", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17919"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05214, "pinned": false}, {"id": "CVE-2026-17993", "publisher": "Chrome", "title": "Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privile", "summary": "Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)", "cvss": 7.0, "sev": "HIGH", "epss": 0.00089, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.977", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17993"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.00394, "pinned": false}, {"id": "CVE-2026-14227", "publisher": "ICS-CERT", "title": "An API session\u2011management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insuffic", "summary": "An API session\u2011management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user\u2011group changes. As a result, an authenticated user whose permissions have been reduced may continue accessing information.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00377, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:07.493", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14227"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30466, "pinned": false}, {"id": "CVE-2026-68563", "publisher": "Red Hat, Inc.", "title": "A flaw was found in ansible-collection-redhat-leapp", "summary": "A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T22:16:56.353", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68563"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.03359, "pinned": false}, {"id": "CVE-2026-20486", "publisher": "MediaTek, Inc.", "title": "In imgsensor, there is a possible application crash due to incorrect error handling", "summary": "In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00168, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.767", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8910 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2718 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6878 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6895 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20486"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05776, "pinned": false}, {"id": "CVE-2026-9593", "publisher": "CERT VDE", "title": "A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to e", "summary": "A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disruption of device data or operation.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T07:16:44.200", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9593"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05932, "pinned": false}, {"id": "CVE-2025-11712", "publisher": "Mozilla Corporation", "title": "A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior ", "summary": "A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T13:15:37.447", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", "< 144.0"], "fixed": "140.4.0, 144.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.4.0", ">= 141.0 and < 144.0"], "fixed": "140.4.0, 144.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.4.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11712"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-81/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-83/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-84/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-85/"}], "cwe": ["CWE-116"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11985, "pinned": false}, {"id": "CVE-2025-59593", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend T", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through < 1.0.334.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:56.407", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "colibri page builder", "vendor": "extendthemes", "type": "app", "affected": ["< 1.0.334"], "fixed": "1.0.334", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy colibri-page-builder || rpm -q colibri-page-builder || colibri-page-builder --version"}, {"label": "2. UPGRADE to 1.0.334 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade colibri-page-builder"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade colibri-page-builder"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59593"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12454, "pinned": false}, {"id": "CVE-2025-64202", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs ", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2025-10-29", "pub": "2025-10-29T09:15:40.623", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64202"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05478, "pinned": false}, {"id": "CVE-2025-13013", "publisher": "Mozilla Corporation", "title": "Mitigation bypass in the DOM: Core & HTML component", "summary": "Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00217, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.367", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.30.0", "< 145.0", ">= 140.0 and < 140.5.0"], "fixed": "115.30.0, 140.5.0, 145.0", "safe": "before 140.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.30.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 140.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_140.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_140.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13013"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-89/"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11515, "pinned": false}, {"id": "CVE-2025-40940", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)", "summary": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:47.813", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 4.0.1"], "fixed": "4.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40940"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29311, "pinned": false}, {"id": "CVE-2025-68532", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in modelthe", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through < 1.5.6.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2025-12-24", "pub": "2025-12-24T13:16:22.603", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-68532"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05946, "pinned": false}, {"id": "CVE-2026-32994", "publisher": "HackerOne", "title": "The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6", "summary": "The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8, and <7.10.12 allows any authenticated user to retrieve the full content of any message from any room (private groups, direct messages, channels) by simply providing the target message ID. The endpoint fetches the message via Messages.findOneById(messageId) with no room access check (canAccessRoomIdAsync is never called), return", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-05-19", "pub": "2026-05-19T05:16:23.787", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32994"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21572, "pinned": false}, {"id": "CVE-2026-48225", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allo", "summary": "Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the _type POST parameter directly into an HTML form hidden input value attribute. Attackers can craft a malicious request containing a JavaScript payload that executes in the victim's browser when the response is rendered.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:19.000", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48225"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21006, "pinned": false}, {"id": "CVE-2026-48230", "publisher": "VulnCheck", "title": "Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.p", "summary": "Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the multiple POST parameters (mdbhost, mdbdb, mdbuser, mdbpassword, mdbprefix, ticketshost, ticketsdb, ticketsuser, ticketspassword, ticketsprefix) directly into HTML form hidden input value attributes. Attackers can craft a malic", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-05-21", "pub": "2026-05-21T18:16:19.640", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48230"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21008, "pinned": false}, {"id": "CVE-2026-17962", "publisher": "Chrome", "title": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inj", "summary": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.673", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17962"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11938, "pinned": false}, {"id": "CVE-2026-64635", "publisher": "HackerOne", "title": "Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console", "summary": "Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to an attacker-controlled host, allowing the attacker to take over the account.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00291, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:59.930", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64635"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20559, "pinned": false}, {"id": "CVE-2026-67529", "publisher": "GitHub, Inc.", "title": "OpenProject is open-source, web-based project management software", "summary": "OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/time_entries and GET /api/v3/cost_entries rendered _links.workPackage.title and _links.workPackage.href through associated_resource in modules/costs/lib/api/v3/time_entries/time_entry_representer.rb and modules/costs/lib/api/v3/cost_entries/cost_entry_representer.rb without checking WorkPackage.visible or view_work_packages, allowing users with view_ti", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00411, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:14.750", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67529"}], "cwe": ["CWE-200", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34321, "pinned": false}, {"id": "CVE-2026-68499", "publisher": "GitHub, Inc.", "title": "re2 provides Node.js bindings for Google's RE2 regular expression engine", "summary": "re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T21:18:12.870", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68499"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07551, "pinned": false}, {"id": "CVE-2026-28147", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addo", "summary": "Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:20.377", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28147"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20176, "pinned": false}, {"id": "CVE-2026-97301", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-09-30", "pub": "2026-09-30T13:17:39.897", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97301"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06211, "pinned": false}, {"id": "CVE-2025-10536", "publisher": "Mozilla Corporation", "title": "Information disclosure in the Networking: Cache component", "summary": "Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2025-09-16", "pub": "2025-09-16T13:15:48.950", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", "< 143.0"], "fixed": "140.3.0, 143.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "thunderbird", "vendor": "mozilla", "type": "app", "affected": ["< 140.3.0", ">= 141.0 and < 143.0"], "fixed": "140.3.0, 143.0", "safe": "before 141.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy thunderbird || rpm -q thunderbird || thunderbird --version"}, {"label": "2. UPGRADE to 140.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade thunderbird"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade thunderbird"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 141.0 (Debian / Ubuntu)", "cmd": "apt-cache madison thunderbird\nsudo apt install thunderbird=<VERSION_BEFORE_141.0>\nsudo apt-mark hold thunderbird"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list thunderbird\nsudo dnf downgrade thunderbird-<VERSION_BEFORE_141.0>\nsudo dnf versionlock add thunderbird"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-10536"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-75/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-78/"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05404, "pinned": false}, {"id": "CVE-2025-14714", "publisher": "Document Foundation, The", "title": "An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inhe", "summary": "An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions\u00a0granted by the user to the main application bundle\n\n\n\n\nBy executing the bundled interpreter directly the attacker's scripts run with the application's TCC\u00a0privileges\n\n\n\n\nIn fixed versions parent-constraints are used to allow only the main application to launch interpreter with ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00135, "kev": false, "added": "2025-12-15", "pub": "2025-12-15T11:15:39.537", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "libreoffice", "vendor": "libreoffice", "type": "app", "affected": [">= 25.2.0.1 and < 25.2.4.1"], "fixed": "25.2.4.1", "safe": "before 25.2.0.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libreoffice || rpm -q libreoffice || libreoffice --version"}, {"label": "2. UPGRADE to 25.2.4.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libreoffice"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libreoffice"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.2.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison libreoffice\nsudo apt install libreoffice=<VERSION_BEFORE_25.2.0.1>\nsudo apt-mark hold libreoffice"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libreoffice\nsudo dnf downgrade libreoffice-<VERSION_BEFORE_25.2.0.1>\nsudo dnf versionlock add libreoffice"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-14714"}, {"t": "Vendor Advisory", "u": "https://www.libreoffice.org/about-us/security/advisories/cve-2025-14714"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02677, "pinned": false}, {"id": "CVE-2026-17893", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a", "summary": "Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.313", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17893"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09822, "pinned": false}, {"id": "CVE-2026-17906", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.657", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17906"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09821, "pinned": false}, {"id": "CVE-2026-17908", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allo", "summary": "Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.890", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17908"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09821, "pinned": false}, {"id": "CVE-2026-17913", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.450", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17913"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16119, "pinned": false}, {"id": "CVE-2026-17915", "publisher": "Chrome", "title": "Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote at", "summary": "Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.670", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17915"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16117, "pinned": false}, {"id": "CVE-2026-17978", "publisher": "Chrome", "title": "Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacke", "summary": "Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00283, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.370", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17978"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19733, "pinned": false}, {"id": "CVE-2026-20466", "publisher": "MediaTek, Inc.", "title": "In sec boot, there is a possible escalation of privilege due to a heap buffer overflow", "summary": "In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.433", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20466"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05496, "pinned": false}, {"id": "CVE-2026-20470", "publisher": "MediaTek, Inc.", "title": "In Telephony, there is a possible information disclosure due to a missing permission check", "summary": "In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.940", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20470"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0614, "pinned": false}, {"id": "CVE-2026-12259", "publisher": "huntr.dev", "title": "In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package", "summary": "In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for `info.url` through a compromised mirror, malicious proxy, or other source-substitution condition, leading to the installation of attacker-controlled package bytes. The vulnerability ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00101, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:17.880", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "nltk", "vendor": "nltk", "type": "app", "affected": ["3.9.4"], "fixed": null, "safe": "before 3.9.4", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nltk || rpm -q nltk || nltk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.9.4 (Debian / Ubuntu)", "cmd": "apt-cache madison nltk\nsudo apt install nltk=<VERSION_BEFORE_3.9.4>\nsudo apt-mark hold nltk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nltk\nsudo dnf downgrade nltk-<VERSION_BEFORE_3.9.4>\nsudo dnf versionlock add nltk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12259"}], "cwe": ["CWE-494"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00863, "pinned": false}, {"id": "CVE-2025-64212", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-", "summary": "Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2025-10-29", "pub": "2025-10-29T09:15:42.157", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64212"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11429, "pinned": false}, {"id": "CVE-2026-7186", "publisher": "Checkmk GmbH", "title": "Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2", "summary": "Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes scripts in other users' browsers when they view the dashboard.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-06-08", "pub": "2026-06-08T13:16:33.480", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.2.0", "2.2.0 b1", "2.2.0 b2", "2.2.0 b3", "2.2.0 b4", "2.2.0 b5", "2.2.0 b6", "2.2.0 b7"], "fixed": null, "safe": "before 2.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.2.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.2.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7186"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17991"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13176, "pinned": false}, {"id": "CVE-2026-46747", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)", "summary": "A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended file system locations.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-06-09", "pub": "2026-06-09T10:16:44.130", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinec ins", "vendor": "siemens", "type": "app", "affected": ["<= 1.0", "1.0 sp1", "1.0 sp2", "1.0 sp2_update_1", "1.0 sp2_update_2", "1.0 sp2_update_3", "1.0 sp2_update_4", "1.0 sp2_update_5"], "fixed": "newer than 1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinec-ins || rpm -q sinec-ins || sinec-ins --version"}, {"label": "2. UPGRADE to newer than 1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinec-ins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinec-ins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46747"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-860189.html"}], "cwe": ["CWE-26"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2834, "pinned": false}, {"id": "CVE-2026-17914", "publisher": "Chrome", "title": "Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00241, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.560", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17914"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14453, "pinned": false}, {"id": "CVE-2026-17966", "publisher": "Chrome", "title": "Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker ", "summary": "Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00132, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.093", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17966"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02528, "pinned": false}, {"id": "CVE-2026-17996", "publisher": "Chrome", "title": "Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacke", "summary": "Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.293", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17996"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02022, "pinned": false}, {"id": "CVE-2026-56847", "publisher": "HackerOne", "title": "A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Log", "summary": "A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:54.953", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "node.js", "vendor": "nodejs", "type": "app", "affected": [">= 22.0 and <= 22.23.1", ">= 24.0.0 and <= 24.18.0", ">= 26.0.0 and <= 26.5.0"], "fixed": "newer than 26.5.0", "safe": "before 22.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy node.js || rpm -q node.js || node.js --version"}, {"label": "2. UPGRADE to newer than 26.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade node.js"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade node.js"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.0 (Debian / Ubuntu)", "cmd": "apt-cache madison node.js\nsudo apt install node.js=<VERSION_BEFORE_22.0>\nsudo apt-mark hold node.js"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list node.js\nsudo dnf downgrade node.js-<VERSION_BEFORE_22.0>\nsudo dnf versionlock add node.js"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56847"}, {"t": "Vendor Advisory", "u": "https://nodejs.org/en/blog/vulnerability/july-2026-security-releases"}], "cwe": ["CWE-1119"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04545, "pinned": false}, {"id": "CVE-2026-11383", "publisher": "IBM Corporation", "title": "IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross", "summary": "IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T15:16:23.877", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 8.5 and < 8.5.5.30", ">= 9.0 and < 9.0.5.29"], "fixed": "8.5.5.30, 9.0.5.29", "safe": "before 8.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 8.5.5.30 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.5 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_8.5>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_8.5>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "tivoli system automation application manager", "vendor": "ibm", "type": "app", "affected": [">= 4.1.0 and <= 4.1.0.7"], "fixed": "newer than 4.1.0.7", "safe": "before 4.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tivoli-system-automation-application-manager || rpm -q tivoli-system-automation-application-manager || tivoli-system-automation-application-manager --version"}, {"label": "2. UPGRADE to newer than 4.1.0.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tivoli-system-automation-application-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tivoli-system-automation-application-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison tivoli-system-automation-application-manager\nsudo apt install tivoli-system-automation-application-manager=<VERSION_BEFORE_4.1.0>\nsudo apt-mark hold tivoli-system-automation-application-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tivoli-system-automation-application-manager\nsudo dnf downgrade tivoli-system-automation-application-manager-<VERSION_BEFORE_4.1.0>\nsudo dnf versionlock add tivoli-system-automation-application-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11383"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7281073"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13172, "pinned": false}, {"id": "CVE-2026-67596", "publisher": "VulnCheck", "title": "CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unau", "summary": "CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can trivially decrypt the Router.cfg backup file to expose web administration and telnet passwords, WPA/WPA2 pre-shared keys, PPPoE and 3G/APN credentials, and ", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.0012, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T16:17:16.497", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67596"}], "cwe": ["CWE-261"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01704, "pinned": false}, {"id": "CVE-2026-10695", "publisher": "IBM Corporation", "title": "IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced fe", "summary": "IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00142, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T19:17:01.830", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 12.1.0 and < 12.1.5"], "fixed": "12.1.5", "safe": "before 12.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_12.1.0>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_12.1.0>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10695"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279474"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.03162, "pinned": false}, {"id": "CVE-2026-67528", "publisher": "GitHub, Inc.", "title": "OpenProject is open-source, web-based project management software", "summary": "OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/custom_options/:id resolved CustomOption records by global numeric id and allowed UserCustomField and GroupCustomField options without checking visible(current_user), so authenticated non-admin users could enumerate sequential custom option ids and read labels belonging to admin_only user or group custom fields. This issue is fixed in 17.6.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0036, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:14.613", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67528"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28605, "pinned": false}, {"id": "CVE-2026-68583", "publisher": "VulnCheck", "title": "luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist nam", "summary": "luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML. When an administrator views the AdBlock Fast status page, the injected payload executes in the administrator's browser under the LuCI origin.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T13:16:54.377", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68583"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13596, "pinned": false}, {"id": "CVE-2026-20467", "publisher": "MediaTek, Inc.", "title": "In apusys, there is a possible escalation of privilege due to a missing bounds check", "summary": "In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.547", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20467"}], "cwe": ["CWE-749"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05501, "pinned": false}, {"id": "CVE-2026-20468", "publisher": "MediaTek, Inc.", "title": "In apusys, there is a possible escalation of privilege due to a confused deputy", "summary": "In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.683", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20468"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.046, "pinned": false}, {"id": "CVE-2026-20469", "publisher": "MediaTek, Inc.", "title": "In trusted_mem, there is a possible escalation of privilege due to improper input validation", "summary": "In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:41.823", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20469"}], "cwe": ["CWE-123"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.046, "pinned": false}, {"id": "CVE-2026-20473", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible memory corruption due to use after free", "summary": "In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.290", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8910 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8126 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8171 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20473"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05501, "pinned": false}, {"id": "CVE-2026-20474", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible escalation of privilege due to a race condition", "summary": "In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00128, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.407", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8126 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8171 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8189 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20474"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02219, "pinned": false}, {"id": "CVE-2026-20475", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible out of bounds write due to a missing bounds check", "summary": "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.523", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8910 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8126 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8171 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20475"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05502, "pinned": false}, {"id": "CVE-2026-20477", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible out of bounds write due to a missing bounds check", "summary": "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.750", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8910 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8189 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8668 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20477"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05502, "pinned": false}, {"id": "CVE-2026-20481", "publisher": "MediaTek, Inc.", "title": "In geniezone, there is a possible out of bounds write due to a missing bounds check", "summary": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.200", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6989 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8755 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8771 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8775 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8781 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20481"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05502, "pinned": false}, {"id": "CVE-2026-20485", "publisher": "MediaTek, Inc.", "title": "In HFRP, there is a possible out of bounds write due to a missing bounds check", "summary": "In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.653", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20485"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04601, "pinned": false}, {"id": "CVE-2026-20497", "publisher": "MediaTek, Inc.", "title": "In geniezone, there is a possible out of bounds write due to a missing bounds check", "summary": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.890", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6989 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8755 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8771 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8775 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8781 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20497"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05502, "pinned": false}, {"id": "CVE-2026-20498", "publisher": "MediaTek, Inc.", "title": "In geniezone, there is a possible escalation of privilege due to a missing permission check", "summary": "In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:45.000", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8791t firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8792 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8796 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8799 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20498"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-1287"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05501, "pinned": false}, {"id": "CVE-2025-6425", "publisher": "Mozilla Corporation", "title": "An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that i", "summary": "An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0031, "kev": false, "added": "2025-06-24", "pub": "2025-06-24T13:15:23.403", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.25.0", "< 140.0", ">= 116.0 and < 128.12.0"], "fixed": "115.25.0, 128.12.0, 140.0", "safe": "before 116.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.25.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 116.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_116.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_116.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-6425"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.mozilla.org/show_bug.cgi?id=1717672"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-52/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-54/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-55/"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.22634, "pinned": false}, {"id": "CVE-2026-39484", "publisher": "Patchstack", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp a", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T09:16:23.110", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39484"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19582, "pinned": false}, {"id": "CVE-2026-17891", "publisher": "Chrome", "title": "Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had c", "summary": "Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.097", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17891"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04555, "pinned": false}, {"id": "CVE-2026-17902", "publisher": "Chrome", "title": "Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote atta", "summary": "Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.5, "sev": "LOW", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.253", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17902"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.14842, "pinned": false}, {"id": "CVE-2026-67550", "publisher": "GitHub, Inc.", "title": "re2 provides Node.js bindings for Google's RE2 regular expression engine", "summary": "re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII subject to trigger an out-of-bounds heap read and an uncatchable process crash, with limited heap information disclosure in some cases. This issue is fi", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00161, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:18:15.030", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67550"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04947, "pinned": false}, {"id": "CVE-2026-10031", "publisher": "VulnCheck", "title": "SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent", "summary": "SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent per-directory access controls by creating symbolic links in a permitted directory that point to files in directories where download, upload, or overwrite permissions are denied. Attackers can exploit the create_symlinks permission combined with read and write access in one directory to read or modify files in restricted directories, as o", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T23:16:51.347", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10031"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0824, "pinned": false}, {"id": "CVE-2025-40760", "publisher": "Siemens AG", "title": "A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0)", "summary": "A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.\r\nThis could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00141, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T21:15:37.733", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40760"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03108, "pinned": false}, {"id": "CVE-2025-66056", "publisher": "Patchstack", "title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncann", "summary": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through < 6.10.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00273, "kev": false, "added": "2025-11-21", "pub": "2025-11-21T13:15:46.340", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-66056"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18695, "pinned": false}, {"id": "CVE-2025-40941", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)", "summary": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses.\r\nThis could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:47.997", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 4.0.1"], "fixed": "4.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40941"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19616, "pinned": false}, {"id": "CVE-2025-66532", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configu", "summary": "Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00284, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:20.607", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "powerlift", "vendor": "qodeinteractive", "type": "app", "affected": ["< 3.2.1"], "fixed": "3.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy powerlift || rpm -q powerlift || powerlift --version"}, {"label": "2. UPGRADE to 3.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade powerlift"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade powerlift"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-66532"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19852, "pinned": false}, {"id": "CVE-2026-28736", "publisher": "Mattermost, Inc.", "title": "** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded ", "summary": "** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's fileID to read the content of the file. NOTE: Focalboard as a standalone product is not maintained and no fix will be issued.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-04-03", "pub": "2026-04-03T14:16:29.517", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "focalboard", "vendor": "mattermost", "type": "app", "affected": ["8.0.0"], "fixed": null, "safe": "before 8.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy focalboard || rpm -q focalboard || focalboard --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison focalboard\nsudo apt install focalboard=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold focalboard"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list focalboard\nsudo dnf downgrade focalboard-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add focalboard"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28736"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18247, "pinned": false}, {"id": "CVE-2026-8078", "publisher": "Checkmk GmbH", "title": "Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and a", "summary": "Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the Activate Changes page or Audit log.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-06-08", "pub": "2026-06-08T13:16:33.760", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.2.0", "2.2.0 b1", "2.2.0 b2", "2.2.0 b3", "2.2.0 b4", "2.2.0 b5", "2.2.0 b6", "2.2.0 b7"], "fixed": null, "safe": "before 2.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.2.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.2.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8078"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17992"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14518, "pinned": false}, {"id": "CVE-2026-9549", "publisher": "Checkmk GmbH", "title": "Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.", "summary": "Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an admin or a user with host read permissions when they run the check on the service discovery page.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-06-08", "pub": "2026-06-08T13:16:34.030", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.2.0", "2.2.0 b1", "2.2.0 b2", "2.2.0 b3", "2.2.0 b4", "2.2.0 b5", "2.2.0 b6", "2.2.0 b7"], "fixed": null, "safe": "before 2.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.2.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.2.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9549"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17993"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14513, "pinned": false}, {"id": "CVE-2026-17903", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on t", "summary": "Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. (Chromium security severity: Low)", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.353", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17903"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05454, "pinned": false}, {"id": "CVE-2026-17932", "publisher": "Chrome", "title": "Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to ", "summary": "Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00136, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.437", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17932"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02784, "pinned": false}, {"id": "CVE-2026-17949", "publisher": "Chrome", "title": "Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak ", "summary": "Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.247", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17949"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19687, "pinned": false}, {"id": "CVE-2026-17973", "publisher": "Chrome", "title": "Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker ", "summary": "Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00129, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.850", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17973"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02291, "pinned": false}, {"id": "CVE-2026-7260", "publisher": "PHP Group", "title": "Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashin", "summary": "Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process,\u00a0in PHP versions\u00a0from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00114, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T12:19:04.300", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.33", ">= 8.3.0 and < 8.3.33", ">= 8.4.0 and < 8.4.24", ">= 8.5.0 and < 8.5.9"], "fixed": "8.2.33, 8.3.33, 8.4.24, 8.5.9", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.33 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7260"}, {"t": "Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-vc5h-9ppw-p5f3"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01413, "pinned": false}, {"id": "CVE-2026-10569", "publisher": "IBM Corporation", "title": "IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy ", "summary": "IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T20:16:51.940", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "devops deploy", "vendor": "ibm", "type": "app", "affected": [">= 8.0.0.0 and < 8.0.1.14", ">= 8.1.0.0 and < 8.1.2.7", ">= 8.2.0.0 and < 8.2.2.0"], "fixed": "8.0.1.14, 8.1.2.7, 8.2.2.0", "safe": "before 8.0.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy devops-deploy || rpm -q devops-deploy || devops-deploy --version"}, {"label": "2. UPGRADE to 8.0.1.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade devops-deploy"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade devops-deploy"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison devops-deploy\nsudo apt install devops-deploy=<VERSION_BEFORE_8.0.0.0>\nsudo apt-mark hold devops-deploy"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list devops-deploy\nsudo dnf downgrade devops-deploy-<VERSION_BEFORE_8.0.0.0>\nsudo dnf versionlock add devops-deploy"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "urbancode deploy", "vendor": "ibm", "type": "app", "affected": [">= 7.2.0.0 and < 7.2.3.24", ">= 7.3.0.0 and < 7.3.2.19"], "fixed": "7.2.3.24, 7.3.2.19", "safe": "before 7.2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy urbancode-deploy || rpm -q urbancode-deploy || urbancode-deploy --version"}, {"label": "2. UPGRADE to 7.2.3.24 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade urbancode-deploy"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade urbancode-deploy"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison urbancode-deploy\nsudo apt install urbancode-deploy=<VERSION_BEFORE_7.2.0.0>\nsudo apt-mark hold urbancode-deploy"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list urbancode-deploy\nsudo dnf downgrade urbancode-deploy-<VERSION_BEFORE_7.2.0.0>\nsudo dnf versionlock add urbancode-deploy"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10569"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7277574"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21702, "pinned": false}, {"id": "CVE-2026-20476", "publisher": "MediaTek, Inc.", "title": "In ccci, there is a possible out of bounds read due to a missing bounds check", "summary": "In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-7660.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.637", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6813 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6986 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20476"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03506, "pinned": false}, {"id": "CVE-2026-20478", "publisher": "MediaTek, Inc.", "title": "In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow", "summary": "In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 (Note: For MT6880, MT6890, MT6988, MT6990) / AUTO00851293 (Note: For MT2735, MT2737); Issue ID: MSV-7638.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.867", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt2735 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2737 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6880 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6990 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20478"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03451, "pinned": false}, {"id": "CVE-2026-20480", "publisher": "MediaTek, Inc.", "title": "In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow", "summary": "In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.097", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6880 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2735 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2737 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6980d firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20480"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0345, "pinned": false}, {"id": "CVE-2026-20491", "publisher": "MediaTek, Inc.", "title": "In med, there is a possible out of bounds write due to an incorrect bounds check", "summary": "In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.220", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt2735 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2737 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6990 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20491"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03505, "pinned": false}, {"id": "CVE-2026-20492", "publisher": "MediaTek, Inc.", "title": "In Audio HAL, there is a possible system becoming unresponsive due to a race condition", "summary": "In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00113, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.330", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6990 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2735 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt2737 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6880 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20492"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01347, "pinned": false}, {"id": "CVE-2026-20494", "publisher": "MediaTek, Inc.", "title": "In wifi, there is a possible out of bounds read due to a missing bounds check", "summary": "In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 /  BORA00155314, BORA00155001, BORA00154907; Issue ID: MSV-7570.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.553", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6990 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20494"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03501, "pinned": false}, {"id": "CVE-2025-40819", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)", "summary": "A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do not properly validate license restrictions against the database, allowing direct modification of the system_ticketinfo table to bypass license limitations without proper enforcement checks. This could allow with database access to circumvent licensing restrictions by directly modifying database values and potentially enabling un", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00249, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:46.223", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinema remote connect server", "vendor": "siemens", "type": "app", "affected": ["< 3.2", "3.2 sp1", "3.2 sp2", "3.2 sp3"], "fixed": "3.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinema-remote-connect-server || rpm -q sinema-remote-connect-server || sinema-remote-connect-server --version"}, {"label": "2. UPGRADE to 3.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinema-remote-connect-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinema-remote-connect-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40819"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-626856.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15308, "pinned": false}, {"id": "CVE-2025-40939", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)", "summary": "A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow an attacker with physical access to the device to trigger reboot that could cause denial of service condition.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:47.617", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 4.0.1"], "fixed": "4.0.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40939"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11025, "pinned": false}, {"id": "CVE-2026-39572", "publisher": "Patchstack", "title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus", "summary": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T09:16:28.497", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39572"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16701, "pinned": false}, {"id": "CVE-2026-17907", "publisher": "Chrome", "title": "Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.773", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17907"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16643, "pinned": false}, {"id": "CVE-2026-17912", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00243, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.343", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17912"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14632, "pinned": false}, {"id": "CVE-2026-17928", "publisher": "Chrome", "title": "Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.030", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17928"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16637, "pinned": false}, {"id": "CVE-2026-17934", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.640", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17934"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15806, "pinned": false}, {"id": "CVE-2026-17937", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.967", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17937"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15806, "pinned": false}, {"id": "CVE-2026-17938", "publisher": "Chrome", "title": "Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.070", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17938"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14829, "pinned": false}, {"id": "CVE-2026-17941", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.383", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17941"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14829, "pinned": false}, {"id": "CVE-2026-17942", "publisher": "Chrome", "title": "Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to l", "summary": "Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.483", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17942"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16635, "pinned": false}, {"id": "CVE-2026-17943", "publisher": "Chrome", "title": "Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to by", "summary": "Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.597", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17943"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15806, "pinned": false}, {"id": "CVE-2026-17944", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00243, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.693", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17944"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14631, "pinned": false}, {"id": "CVE-2026-17945", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.793", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17945"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14828, "pinned": false}, {"id": "CVE-2026-17955", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remot", "summary": "Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.910", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17955"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14819, "pinned": false}, {"id": "CVE-2026-17958", "publisher": "Chrome", "title": "Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to per", "summary": "Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.260", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17958"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14831, "pinned": false}, {"id": "CVE-2026-17960", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.470", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17960"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15807, "pinned": false}, {"id": "CVE-2026-17961", "publisher": "Chrome", "title": "Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a remote at", "summary": "Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00243, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.563", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17961"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14631, "pinned": false}, {"id": "CVE-2026-17964", "publisher": "Chrome", "title": "Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to pe", "summary": "Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.883", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17964"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14832, "pinned": false}, {"id": "CVE-2026-17965", "publisher": "Chrome", "title": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack", "summary": "Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.990", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17965"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14828, "pinned": false}, {"id": "CVE-2026-17972", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.740", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17972"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14828, "pinned": false}, {"id": "CVE-2026-17982", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote at", "summary": "Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.793", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17982"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15804, "pinned": false}, {"id": "CVE-2026-17983", "publisher": "Chrome", "title": "Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.907", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17983"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14825, "pinned": false}, {"id": "CVE-2026-17994", "publisher": "Chrome", "title": "Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta", "summary": "Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00243, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.080", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17994"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1463, "pinned": false}, {"id": "CVE-2026-18003", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.013", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18003"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14828, "pinned": false}, {"id": "CVE-2026-18004", "publisher": "Chrome", "title": "Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh", "summary": "Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00249, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.127", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18004"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1534, "pinned": false}, {"id": "CVE-2026-18007", "publisher": "Chrome", "title": "Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta", "summary": "Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.450", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18007"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14827, "pinned": false}, {"id": "CVE-2026-18013", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.080", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18013"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14826, "pinned": false}, {"id": "CVE-2026-18019", "publisher": "Chrome", "title": "Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.713", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18019"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-1300"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16637, "pinned": false}, {"id": "CVE-2026-67344", "publisher": "VulnCheck", "title": "ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ..", "summary": "ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access (e.g., a read-only API token) can submit these ALTER TYPE statements via the HTTP command endpoint to mutate a type's custom schema metadata and bucket-selecti", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00241, "kev": false, "added": "2026-08-01", "pub": "2026-08-01T13:17:05.700", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67344"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1444, "pinned": false}, {"id": "CVE-2026-10774", "publisher": "Zephyr Project", "title": "Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown", "summary": "Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy ", "cvss": 2.4, "sev": "LOW", "epss": 0.00291, "kev": false, "added": "2026-08-02", "pub": "2026-08-02T15:16:33.793", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 3.6.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 3.6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10774"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/f573da9f53630082ae95fcfd39fb021fe15f7abd"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-6q7g-798f-76p2"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.20535, "pinned": false}, {"id": "CVE-2026-20471", "publisher": "MediaTek, Inc.", "title": "In DA, there is a possible out of bounds write due to a missing bounds check", "summary": "In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 (Note: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO00851171 (Note: For MT2735, MT2737); Issue ID: MSV-7790.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.060", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20471"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12762, "pinned": false}, {"id": "CVE-2026-77029", "publisher": "Joomla! Project", "title": "Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66", "summary": "Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-08-21", "pub": "2026-08-21T12:16:34.097", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77029"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1028, "pinned": false}, {"id": "CVE-2025-62028", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a throug", "summary": "Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00236, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:16:08.857", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62028"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13741, "pinned": false}, {"id": "CVE-2026-39506", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly ", "summary": "Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-04-08", "pub": "2026-04-08T09:16:24.790", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39506"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12621, "pinned": false}, {"id": "CVE-2026-17895", "publisher": "Chrome", "title": "Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker", "summary": "Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.533", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17895"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11077, "pinned": false}, {"id": "CVE-2026-17897", "publisher": "Chrome", "title": "Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak ", "summary": "Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:53.743", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17897"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11077, "pinned": false}, {"id": "CVE-2026-17901", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allow", "summary": "Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00233, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.160", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17901"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13391, "pinned": false}, {"id": "CVE-2026-17904", "publisher": "Chrome", "title": "Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote att", "summary": "Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.450", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17904"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1108, "pinned": false}, {"id": "CVE-2026-17905", "publisher": "Chrome", "title": "Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attack", "summary": "Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.557", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17905"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11081, "pinned": false}, {"id": "CVE-2026-17910", "publisher": "Chrome", "title": "Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote att", "summary": "Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.130", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17910"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11077, "pinned": false}, {"id": "CVE-2026-17911", "publisher": "Chrome", "title": "Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to le", "summary": "Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:55.240", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17911"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11077, "pinned": false}, {"id": "CVE-2026-17933", "publisher": "Chrome", "title": "Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker t", "summary": "Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:57.547", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17933"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1108, "pinned": false}, {"id": "CVE-2026-17939", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:58.167", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17939"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12598, "pinned": false}, {"id": "CVE-2026-17959", "publisher": "Chrome", "title": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to l", "summary": "Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.360", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17959"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11086, "pinned": false}, {"id": "CVE-2026-17963", "publisher": "Chrome", "title": "Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak ", "summary": "Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.773", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17963"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11087, "pinned": false}, {"id": "CVE-2026-17977", "publisher": "Chrome", "title": "Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin da", "summary": "Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.260", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17977"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11878, "pinned": false}, {"id": "CVE-2026-17981", "publisher": "Chrome", "title": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to lea", "summary": "Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.687", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17981"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11083, "pinned": false}, {"id": "CVE-2026-18008", "publisher": "Chrome", "title": "Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ", "summary": "Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.557", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18008"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12598, "pinned": false}, {"id": "CVE-2026-18009", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remo", "summary": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.653", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18009"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20", "CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12598, "pinned": false}, {"id": "CVE-2026-18010", "publisher": "Chrome", "title": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to", "summary": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.770", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18010"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12597, "pinned": false}, {"id": "CVE-2025-32916", "publisher": "Checkmk GmbH", "title": "Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38", "summary": "Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00192, "kev": false, "added": "2025-10-09", "pub": "2025-10-09T15:16:05.503", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": [">= 2.1.0 and < 2.2.0", "2.2.0", "2.2.0 p1", "2.2.0 p10", "2.2.0 p11", "2.2.0 p12", "2.2.0 p13", "2.2.0 p14"], "fixed": "2.2.0", "safe": "before 2.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. UPGRADE to 2.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade checkmk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade checkmk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.1.0>\nsudo apt-mark hold checkmk"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.1.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-32916"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/17105"}], "cwe": ["CWE-598"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08388, "pinned": false}, {"id": "CVE-2026-17900", "publisher": "Chrome", "title": "Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote", "summary": "Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:54.053", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17900"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08912, "pinned": false}, {"id": "CVE-2026-17925", "publisher": "Chrome", "title": "Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attac", "summary": "Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00202, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.713", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17925"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09599, "pinned": false}, {"id": "CVE-2026-17954", "publisher": "Chrome", "title": "Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin ", "summary": "Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:59.807", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17954"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0976, "pinned": false}, {"id": "CVE-2026-17970", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an att", "summary": "Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00187, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:01.520", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17970"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07854, "pinned": false}, {"id": "CVE-2026-17976", "publisher": "Chrome", "title": "Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who ", "summary": "Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.157", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17976"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07727, "pinned": false}, {"id": "CVE-2026-17998", "publisher": "Chrome", "title": "Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced ", "summary": "Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00187, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.487", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17998"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07854, "pinned": false}, {"id": "CVE-2026-18016", "publisher": "Chrome", "title": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem", "summary": "Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00196, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.397", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18016"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08794, "pinned": false}, {"id": "CVE-2026-16970", "publisher": "sba-research", "title": "The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffe", "summary": "The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T10:16:36.100", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16970"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08237, "pinned": false}, {"id": "CVE-2026-20484", "publisher": "MediaTek, Inc.", "title": "In TFA, there is a possible information disclosure due to a missing permission check", "summary": "In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.540", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt8799 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6739 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6761 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6765 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6781 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20484"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04448, "pinned": false}, {"id": "CVE-2026-20488", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible information disclosure due to a missing bounds check", "summary": "In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.880", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8126 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8171 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8189 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20488"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05333, "pinned": false}, {"id": "CVE-2026-20489", "publisher": "MediaTek, Inc.", "title": "In display, there is a possible information disclosure due to an integer overflow", "summary": "In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:43.997", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6991 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6993 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8126 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8171 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8188 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8189 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20489"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05333, "pinned": false}, {"id": "CVE-2026-41861", "publisher": "VMware", "title": "Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned ", "summary": "Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .network, and create any missing parent directories with mode 0777 via network Alias on Ubuntu.\n\n\n\nAffected versions: BOSH agent < v2.847.0 (jammy <= v1.1202, or noble <= v1.364). Lower bound unspecified in advisory (\"All bosh agent versions\").", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:04.920", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41861"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10997, "pinned": false}, {"id": "CVE-2025-40774", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SiPass integrated (All versions < V3.0)", "summary": "A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords.\r\n\r\nSuccessful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and pot", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00136, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:38.850", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sipass integrated", "vendor": "siemens", "type": "app", "affected": ["< 3.00"], "fixed": "3.00", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sipass-integrated || rpm -q sipass-integrated || sipass-integrated --version"}, {"label": "2. UPGRADE to 3.00 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sipass-integrated"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sipass-integrated"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40774"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-599451.html"}], "cwe": ["CWE-257"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02795, "pinned": false}, {"id": "CVE-2026-17927", "publisher": "Chrome", "title": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who co", "summary": "Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00163, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:16:56.923", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17927"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05192, "pinned": false}, {"id": "CVE-2026-18006", "publisher": "Chrome", "title": "Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker ", "summary": "Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.350", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18006"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04241, "pinned": false}, {"id": "CVE-2026-59327", "publisher": "VMware", "title": "Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a pl", "summary": "Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the \"Spring Boot DevTools Client\" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the user marks the configuration as a shared file, directly into the project tree where it can be committed to version control. This secret is the sole crede", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00105, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.797", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "spring tools", "vendor": "broadcom", "type": "app", "affected": ["< 5.3.0"], "fixed": "5.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy spring-tools || rpm -q spring-tools || spring-tools --version"}, {"label": "2. UPGRADE to 5.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade spring-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade spring-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59327"}, {"t": "Vendor Advisory", "u": "https://spring.io/security/cve-2026-59327"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01041, "pinned": false}, {"id": "CVE-2026-59328", "publisher": "VMware", "title": "Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (", "summary": "Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browser) with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded browser when a developer hovers a dependency checkbox in the New Spring Starter Project wizard. Impact is limited to in-IDE UI spoofing and outbound netw", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.920", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "spring tools", "vendor": "broadcom", "type": "app", "affected": ["< 5.3.0"], "fixed": "5.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy spring-tools || rpm -q spring-tools || spring-tools --version"}, {"label": "2. UPGRADE to 5.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade spring-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade spring-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59328"}, {"t": "Vendor Advisory", "u": "https://spring.io/security/cve-2026-59328"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0609, "pinned": false}, {"id": "CVE-2026-20472", "publisher": "MediaTek, Inc.", "title": "In TFA, there is a possible out of bounds write due to a missing bounds check", "summary": "In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:42.177", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20472"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03285, "pinned": false}, {"id": "CVE-2026-20490", "publisher": "MediaTek, Inc.", "title": "In ccci, there is a possible out of bounds read due to a missing bounds check", "summary": "In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.110", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6813 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6982vb firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6986 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6986d firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20490"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03285, "pinned": false}, {"id": "CVE-2026-20493", "publisher": "MediaTek, Inc.", "title": "In wifi, there is a possible out of bounds write due to a missing bounds check", "summary": "In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.443", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6890 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6988 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt6990 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20493"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03285, "pinned": false}, {"id": "CVE-2026-20496", "publisher": "MediaTek, Inc.", "title": "In geniezone, there is a possible out of bounds read due to a missing bounds check", "summary": "In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.0015, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T03:16:44.777", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "mt6983 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8676 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8678 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8755 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8768 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mt8771 firmware", "vendor": "mediatek", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20496"}, {"t": "Vendor Advisory", "u": "https://www.mediatek.com/product-security-bulletin/August-2026"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03828, "pinned": false}, {"id": "CVE-2025-13015", "publisher": "Mozilla Corporation", "title": "Spoofing issue in Firefox", "summary": "Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.", "cvss": 3.4, "sev": "LOW", "epss": 0.00229, "kev": false, "added": "2025-11-11", "pub": "2025-11-11T16:15:38.573", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "firefox", "vendor": "mozilla", "type": "app", "affected": ["< 115.30.0", "< 145.0", ">= 140.0 and < 140.5.0"], "fixed": "115.30.0, 140.5.0, 145.0", "safe": "before 140.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox || rpm -q firefox || firefox --version"}, {"label": "2. UPGRADE to 115.30.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 140.0 (Debian / Ubuntu)", "cmd": "apt-cache madison firefox\nsudo apt install firefox=<VERSION_BEFORE_140.0>\nsudo apt-mark hold firefox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list firefox\nsudo dnf downgrade firefox-<VERSION_BEFORE_140.0>\nsudo dnf versionlock add firefox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-13015"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-87/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-88/"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2025-89/"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13002, "pinned": false}, {"id": "CVE-2025-67591", "publisher": "Patchstack", "title": "Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cross Site Requ", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cross Site Request Forgery.This issue affects JNews Paywall: from n/a through < 12.0.1.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00119, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:18:37.207", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-67591"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01693, "pinned": false}, {"id": "CVE-2026-56850", "publisher": "HackerOne", "title": "A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS ", "summary": "A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00084, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T06:25:55.073", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "node.js", "vendor": "nodejs", "type": "app", "affected": [">= 22.0 and <= 22.23.1", ">= 24.0.0 and <= 24.18.0", ">= 26.0.0 and <= 26.5.0"], "fixed": "newer than 26.5.0", "safe": "before 22.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy node.js || rpm -q node.js || node.js --version"}, {"label": "2. UPGRADE to newer than 26.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade node.js"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade node.js"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.0 (Debian / Ubuntu)", "cmd": "apt-cache madison node.js\nsudo apt install node.js=<VERSION_BEFORE_22.0>\nsudo apt-mark hold node.js"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list node.js\nsudo dnf downgrade node.js-<VERSION_BEFORE_22.0>\nsudo dnf versionlock add node.js"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56850"}, {"t": "Vendor Advisory", "u": "https://nodejs.org/en/blog/vulnerability/july-2026-security-releases"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.00247, "pinned": false}, {"id": "CVE-2026-7485", "publisher": "Checkmk GmbH", "title": "Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 ver", "summary": "Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.", "cvss": 2.3, "sev": "LOW", "epss": 0.00351, "kev": false, "added": "2026-08-20", "pub": "2026-08-20T13:19:07.817", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7485"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27518, "pinned": false}, {"id": "CVE-2026-17980", "publisher": "Chrome", "title": "Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacke", "summary": "Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.1, "sev": "LOW", "epss": 0.0023, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:02.587", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17980"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13108, "pinned": false}, {"id": "CVE-2026-18018", "publisher": "Chrome", "title": "Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local att", "summary": "Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:06.610", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18018"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01633, "pinned": false}, {"id": "CVE-2026-17957", "publisher": "Chrome", "title": "Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had", "summary": "Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.1, "sev": "LOW", "epss": 0.00184, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:00.150", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17957"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07622, "pinned": false}, {"id": "CVE-2026-17997", "publisher": "Chrome", "title": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh", "summary": "Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.1, "sev": "LOW", "epss": 0.00184, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.387", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17997"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07624, "pinned": false}, {"id": "CVE-2026-18000", "publisher": "Chrome", "title": "Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote att", "summary": "Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.1, "sev": "LOW", "epss": 0.00184, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:04.690", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18000"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07622, "pinned": false}, {"id": "CVE-2026-18581", "publisher": "VulDB", "title": "A vulnerability was determined in ggml-org llama.cpp e15efe0", "summary": "A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has", "cvss": 3.3, "sev": "LOW", "epss": 0.0016, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T01:16:43.300", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18581"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04787, "pinned": false}, {"id": "CVE-2025-40818", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)", "summary": "A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.", "cvss": 3.3, "sev": "LOW", "epss": 0.00102, "kev": false, "added": "2025-12-09", "pub": "2025-12-09T16:17:46.040", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "sinema remote connect server", "vendor": "siemens", "type": "app", "affected": ["< 3.2", "3.2 sp1", "3.2 sp2", "3.2 sp3"], "fixed": "3.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sinema-remote-connect-server || rpm -q sinema-remote-connect-server || sinema-remote-connect-server --version"}, {"label": "2. UPGRADE to 3.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sinema-remote-connect-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sinema-remote-connect-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40818"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-626856.html"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0088, "pinned": false}, {"id": "CVE-2026-17984", "publisher": "Chrome", "title": "Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local att", "summary": "Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "cvss": 3.3, "sev": "LOW", "epss": 0.00122, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:03.010", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17984"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01854, "pinned": false}, {"id": "CVE-2026-18011", "publisher": "Chrome", "title": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local ", "summary": "Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: Low)", "cvss": 2.4, "sev": "LOW", "epss": 0.0013, "kev": false, "added": "2026-07-30", "pub": "2026-07-30T01:17:05.860", "modified": "2026-10-23T22:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.72"], "fixed": "151.0.7922.72", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18011"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.024, "pinned": false}, {"id": "CVE-2026-18591", "publisher": "VulDB", "title": "A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android", "summary": "A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the component com.meesho.supply. Such manipulation of the argument user_id/phone number/email address/name leads to cleartext storage of sensitive information. The attack can be executed directly on the physical device. The exploit is publicly available and might be used. The vendor was contacted ea", "cvss": 2.1, "sev": "LOW", "epss": 0.00109, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T08:17:18.823", "modified": "2026-10-23T22:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18591"}], "cwe": ["CWE-310", "CWE-312"], "vector": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01178, "pinned": false}, {"id": "CVE-2026-91446", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (C", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00123, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.253", "modified": "2026-10-23T21:17:28.603", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91446"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01907, "pinned": false}, {"id": "CVE-2026-91445", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboa", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM End User accessible da", "cvss": 8.2, "sev": "HIGH", "epss": 0.00258, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.140", "modified": "2026-10-23T21:17:28.497", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91445"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16527, "pinned": false}, {"id": "CVE-2026-91444", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (C", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00123, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:48.020", "modified": "2026-10-23T21:17:28.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91444"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01907, "pinned": false}, {"id": "CVE-2026-91443", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.903", "modified": "2026-10-23T21:17:28.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91443"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18285, "pinned": false}, {"id": "CVE-2026-91442", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability", "cvss": 8.8, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.790", "modified": "2026-10-23T21:17:28.187", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91442"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.24778, "pinned": false}, {"id": "CVE-2026-91441", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Ma", "summary": "Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Customer Order Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel App", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.670", "modified": "2026-10-23T21:17:28.080", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91441"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10573, "pinned": false}, {"id": "CVE-2026-91440", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data as well", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00269, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.550", "modified": "2026-10-23T21:17:27.977", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91440"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18114, "pinned": false}, {"id": "CVE-2026-91439", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to al", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.440", "modified": "2026-10-23T21:17:27.870", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91439"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03443, "pinned": false}, {"id": "CVE-2026-91438", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data a", "cvss": 7.1, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.323", "modified": "2026-10-23T21:17:27.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91438"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21893, "pinned": false}, {"id": "CVE-2026-91437", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  While the vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnera", "cvss": 8.7, "sev": "HIGH", "epss": 0.00381, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.210", "modified": "2026-10-23T21:17:27.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91437"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30912, "pinned": false}, {"id": "CVE-2026-91436", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Si", "cvss": 3.9, "sev": "LOW", "epss": 0.00118, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:47.100", "modified": "2026-10-23T21:17:27.543", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91436"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01638, "pinned": false}, {"id": "CVE-2026-91435", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deploy", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00394, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.980", "modified": "2026-10-23T21:17:27.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91435"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32432, "pinned": false}, {"id": "CVE-2026-91434", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (C", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00123, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.873", "modified": "2026-10-23T21:17:27.337", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91434"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01907, "pinned": false}, {"id": "CVE-2026-91433", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer)", "summary": "Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Field Service.  Successful attacks of this vulnerability can result in takeover of Siebel Apps - Field Service. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Av", "cvss": 7.2, "sev": "HIGH", "epss": 0.00466, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.757", "modified": "2026-10-23T21:17:27.233", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91433"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39382, "pinned": false}, {"id": "CVE-2026-91432", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Siebel CRM End User accessible data as well as  unauthorized re", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.647", "modified": "2026-10-23T21:17:27.130", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91432"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1957, "pinned": false}, {"id": "CVE-2026-91431", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM End User executes to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM End Use", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.537", "modified": "2026-10-23T21:17:27.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91431"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01653, "pinned": false}, {"id": "CVE-2026-91430", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accou", "summary": "Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel Apps - Fin", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.427", "modified": "2026-10-23T21:17:26.917", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91430"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12921, "pinned": false}, {"id": "CVE-2026-91429", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible dat", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.313", "modified": "2026-10-23T21:17:26.813", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91429"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12921, "pinned": false}, {"id": "CVE-2026-91428", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or dele", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.203", "modified": "2026-10-23T21:17:26.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91428"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10999, "pinned": false}, {"id": "CVE-2026-91427", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (pa", "cvss": 2.3, "sev": "LOW", "epss": 0.00148, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:46.090", "modified": "2026-10-23T21:17:26.603", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91427"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03684, "pinned": false}, {"id": "CVE-2026-91426", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to al", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00151, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.977", "modified": "2026-10-23T21:17:26.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91426"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0397, "pinned": false}, {"id": "CVE-2026-91424", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Depl", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.002, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.863", "modified": "2026-10-23T21:17:26.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91424"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09388, "pinned": false}, {"id": "CVE-2026-91423", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to cr", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.750", "modified": "2026-10-23T21:17:26.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91423"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05617, "pinned": false}, {"id": "CVE-2026-91422", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00277, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.640", "modified": "2026-10-23T21:17:26.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91422"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19094, "pinned": false}, {"id": "CVE-2026-91421", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Dep", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00367, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.527", "modified": "2026-10-23T21:17:26.043", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91421"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29393, "pinned": false}, {"id": "CVE-2026-91420", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment a", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.420", "modified": "2026-10-23T21:17:25.913", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91420"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16233, "pinned": false}, {"id": "CVE-2026-91419", "publisher": "Oracle", "title": "Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)", "summary": "Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server.  Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentialit", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:45.303", "modified": "2026-10-23T21:17:25.803", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91419"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05071, "pinned": false}, {"id": "CVE-2026-91415", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via", "cvss": 7.0, "sev": "HIGH", "epss": 0.00224, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.937", "modified": "2026-10-23T21:17:25.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91415"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1231, "pinned": false}, {"id": "CVE-2026-91414", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized ac", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.827", "modified": "2026-10-23T21:17:25.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91414"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21479, "pinned": false}, {"id": "CVE-2026-91413", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting)", "summary": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via CORBA to compromise Siebel CRM Development.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00348, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.710", "modified": "2026-10-23T21:17:25.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91413"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27187, "pinned": false}, {"id": "CVE-2026-83813", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host and port. An attacker able to deliver a packet to the resolver's listening port with the correct transaction ID can inject a forged answer. The standard ", "cvss": 3.1, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:25.287", "modified": "2026-10-23T21:17:25.287", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83813"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-75525", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. The product's design guarantees that appointment data is end-to-end encrypted to staff members and that the staff recipient directory is not attacker-writa", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:25.150", "modified": "2026-10-23T21:17:25.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75525"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-75524", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.2, an attacker overbooks an agent, placing multiple appointments into a single time slot that the system is designed to keep exclusive. The number of overlapping appointments equals the number of concurrent requests, and one booking token is enough because the token is consumed after the insert. This results in the inte", "cvss": 5.4, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:25.010", "modified": "2026-10-23T21:17:25.010", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75524"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-65825", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, a returning client's six-digit booking PIN can be brute-forced online in the victim tenant. A successful guess yields the client's booking access token, granting access to that client's appointment tunnel, which holds their end-to-end-encrypted appointment data, and the ability to act as the client, for example ", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:24.870", "modified": "2026-10-23T21:17:24.870", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65825"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-65824", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential and register their own passkey on the invited account, taking control of that account. For a staff or tenant-admin invite this yields access to the tenant context tied to that account. This issue has been patched", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:24.730", "modified": "2026-10-23T21:17:24.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65824"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-58497", "publisher": "GitHub, Inc.", "title": "Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tool", "summary": "Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious web page could send a CORS simple POST request, such as text/plain, to the local /mcp endpoint and deliver a JSON-RPC body to the dispatcher. If the us", "cvss": 8.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:34.257", "modified": "2026-10-23T21:17:24.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58497"}], "cwe": ["CWE-346", "CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-58202", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.0.0, the account-confirmation link in emails is built from the request Host header, with no allowlist. The unauthenticated POST /api/auth/resend-confirmation rotates a pending invitee's confirmation token and emails a link whose host comes from the request. An attacker who sends one resend-confirmation with Host: attacker", "cvss": 8.3, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:24.473", "modified": "2026-10-23T21:17:24.473", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58202"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-56837", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is absent, startup only logs a warning and _handle_webhook() skips Linear-Signature verification entirely. An unauthenticated network caller who can reach the webhook endpoint can submit a forged Linear-Event: AgentSession request. The", "cvss": 8.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:15.203", "modified": "2026-10-23T21:17:24.307", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56837"}], "cwe": ["CWE-287", "CWE-306", "CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-fc26-m9pf-v56q", "note": "vulnerable: >= 4.6.56, <= 4.6.58"}], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56833", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable tool factories. Those tools accept run_id and agent_id arguments from the tool caller. The underlying stores join those values into filesystem paths without rejecting absolute paths or .. traversal. Because run_id can be an absol", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:14.600", "modified": "2026-10-23T21:17:24.210", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56833"}], "cwe": ["CWE-22", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-22cj-m4wf-fv2c", "note": "vulnerable: >= 3.8.1, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-55835", "publisher": "GitHub, Inc.", "title": "Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains tha", "summary": "Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's \"report a capture\" email on demand (this is expected). The /json/<uuid>/report API endpoint (CaptureReport) is incorrectly passing the email and comment parameters, overwriting as_admin. When True, as_admin will trigger a search query on a MISP inst", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00315, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:15.543", "modified": "2026-10-23T21:17:24.103", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55835"}], "cwe": ["CWE-233"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23177, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-55222", "publisher": "GitHub, Inc.", "title": "Isar is an integration system for automated root filesystem generation", "summary": "Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one that executes Isar) instead of root. If the calling user's id is identical to one of an unprivileged user inside the image, this user is able to alter existing keys and deploy new ones, sile", "cvss": 5.1, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.563", "modified": "2026-10-23T21:17:24.003", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55222"}], "cwe": ["CWE-1290"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-53920", "publisher": "GitHub, Inc.", "title": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt", "summary": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD option whose body is shorter than struct dhcpv6_ia_hdr, casts the option header to that full structure, and reads ia->iaid before proving that the IA body contains the IAID field. If an unauthenticated network-adjacent client places a zero-length or otherwise short IA op", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.573", "modified": "2026-10-23T21:17:23.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53920"}], "cwe": ["CWE-125", "CWE-126", "CWE-200", "CWE-201"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-46346", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset request. An attacker who knows the target's email address can request a reset and then brute-force the token. Exploiting this finding alone forces an unauthorized password reset on any account. This issue has been patched in version 26.05.", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:31.030", "modified": "2026-10-23T21:17:23.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46346"}], "cwe": ["CWE-330", "CWE-340", "CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115877", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in an HTTP header value but accepts a bare carriage return or bare line feed. Because Twisted splits header lines only on CRLF, a hidden Content-Length header can remain folded into another value while a lenient front end treats the bare character as a line terminator. The resul", "cvss": 5.4, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:23.643", "modified": "2026-10-23T21:17:23.643", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115877"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115800", "publisher": "VulDB", "title": "A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2", "summary": "A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:23.467", "modified": "2026-10-23T21:17:23.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115800"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115778", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.conch.telnet.Telnet.dataReceived appends every byte received after IAC SB to a persistent subnegotiation buffer until IAC SE is received, without applying a maximum length. Telnet option negotiation occurs before authentication, so an unauthenticated peer can omit the terminator and continuously grow the buffer. The resulting memory", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:23.320", "modified": "2026-10-23T21:17:23.320", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115778"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115776", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUser server subclass inherits this behavior, and buffering occurs before PASS, NICK, or USER authentication commands. An unauthenticated connection can cont", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:23.180", "modified": "2026-10-23T21:17:23.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115776"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115775", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, the twisted.words.xish.domish ExpatElementStream parser allows an unauthenticated remote peer to keep a container element open while continuously adding child elements. The parser retains the unfinished stanza as an in-memory tree without a byte or element-count limit, and XMPP pre-authentication stream parsing exposes this behavior before ", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:23.050", "modified": "2026-10-23T21:17:23.050", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115775"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115774", "publisher": "GitHub, Inc.", "title": "Twisted is an event-based framework for internet applications, supporting Python 3.6+", "summary": "Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox state. The negative size moves the parser cursor below zero, and Python's negative indexing prevents the synchronous scanning loop from terminating. The loop", "cvss": 4.9, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:22.900", "modified": "2026-10-23T21:17:22.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115774"}], "cwe": ["CWE-400", "CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115586", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-controlled --prompt value into PS1 without escaping dollar signs or backticks when both promptvars and POSIX mode are disabled during activation. Re-enabling promptvars, running set -o posix, or starting an interactive child bash that inherits the exported PS1 can then expand command substitution i", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.363", "modified": "2026-10-23T21:17:22.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115586"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115570", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch. An attacker who holds a certificate issued through one of these intermediates and can intercept network traffic can impersonate a TLS server to an affec", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T19:17:44.470", "modified": "2026-10-23T21:17:22.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115570"}], "cwe": ["CWE-299"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115537", "publisher": "VulDB", "title": "A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a", "summary": "A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component URL Validation. This manipulation of the argument url_route causes open redirect. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. This pro", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00258, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T02:16:57.387", "modified": "2026-10-23T21:17:22.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115537"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16582, "pinned": false}, {"id": "CVE-2026-115534", "publisher": "VulDB", "title": "A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a", "summary": "A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument nama/email/alamat/telepon/pesan can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This produ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00273, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T00:16:49.733", "modified": "2026-10-23T21:17:22.400", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115534"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18653, "pinned": false}, {"id": "CVE-2026-115506", "publisher": "VulnCheck", "title": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in account", "summary": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.620", "modified": "2026-10-23T21:17:22.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115506"}], "cwe": ["CWE-776"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27483, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "expat", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "expat", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115360", "publisher": "VulnCheck", "title": "OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects u", "summary": "OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authenticated to OpenBao. Attackers can craft OIDC links that redirect unauthenticated users to attacker-controlled destinations, enabling phishing or credential theft.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.237", "modified": "2026-10-23T21:17:22.163", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115360"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09777, "pinned": false}, {"id": "CVE-2026-115352", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows un", "summary": "Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitting long runs of unmatched '[' characters. Attackers can send small markdown payloads that trigger O(N^2) parse_link_text and parse_link_label probing, occupying rendering workers for 30+ seconds per 16 KB input.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:41.077", "modified": "2026-10-23T21:17:22.050", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115352"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28448, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115348", "publisher": "VulnCheck", "title": "Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's p", "summary": "Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows unauthenticated attackers to exhaust CPU with unbalanced brackets. Attackers can submit Markdown containing many unbalanced '[' or '![' characters, forcing repeated unbounded forward scans and tying up worker processes for minutes.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:40.430", "modified": "2026-10-23T21:17:21.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115348"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28449, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114613", "publisher": "GitHub, Inc.", "title": "MessagePack is the serializer implementation for Python msgpack.org", "summary": "MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both unpackb() and the streaming Unpacker API are af", "cvss": 7.5, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:37.733", "modified": "2026-10-23T21:17:21.823", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114613"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26116, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-msgpack", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-msgpack", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "python3.14-pip", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "python-msgpack", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "python-pip", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python3.12-pip", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "python3.12-pip", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-113951", "publisher": "Apple Inc.", "title": "If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec creden", "summary": "If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it \u2014 turning filesystem access inside an untrusted Linux container into arbitrary command execution on the", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T21:17:21.717", "modified": "2026-10-23T21:17:21.717", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113951"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-112342", "publisher": "VulnCheck", "title": "Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py tha", "summary": "Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cached entry's TTL refreshed on every request. Attackers can create their own space to obtain an admin group designation, then switch their active space to a", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T19:17:43.203", "modified": "2026-10-23T21:17:21.483", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112342"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-112330", "publisher": "VulnCheck", "title": "Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publi", "summary": "Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single double-quote header value, or an unparsable typed attribute such as cloudEvents:time to trigger an unhandled exception in ExtractCloudEvent that is treated as fat", "cvss": 7.5, "sev": "HIGH", "epss": 0.00627, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:05.580", "modified": "2026-10-23T21:17:21.363", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112330"}], "cwe": ["CWE-755"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4943, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-110975", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Kruize Autotune", "summary": "A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration \u2014 the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint \u2014 serialized datasource objects using a default Gson configuration with no field-exclusion strategy. As a result, the authentication secrets stored for each configured monitoring datasource (basic-auth passwords, beare", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T18:17:20.503", "modified": "2026-10-23T21:17:21.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110975"}], "cwe": ["CWE-256"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-65400", "publisher": "Apple Inc.", "title": "Apple macOS Improper Authentication Vulnerability", "summary": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01723, "kev": true, "added": "2026-08-06", "pub": "2026-08-06T22:18:14.533", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "macos", "vendor": "apple", "type": "os", "affected": [">= 14.0 and < 14.8.9", ">= 15.0 and < 15.7.9", ">= 26.0 and < 26.6.1"], "fixed": "14.8.9, 15.7.9, 26.6.1", "safe": "before 14.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65400"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/148170"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/148171"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/148172"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/149035"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/149042"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-08-21", "kev_added": "2026-08-18", "ransom": false, "priority": 87, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.77346, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "panchocosil/CVE-2026-65400-poc (9 stars)", "url": "https://github.com/panchocosil/CVE-2026-65400-poc", "stars": 9}, {"kind": "poc", "name": "acheong08/CVE-2026-65400 (9 stars)", "url": "https://github.com/acheong08/CVE-2026-65400", "stars": 9}, {"kind": "poc", "name": "HORKimhab/CVE-2026-65400 (3 stars)", "url": "https://github.com/HORKimhab/CVE-2026-65400", "stars": 3}, {"kind": "writeup", "name": "advisories.ncsc.nl/2026/ncsc-2026-0280.html", "url": "https://advisories.ncsc.nl/2026/ncsc-2026-0280.html"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "pinned": false, "mentions": [{"src": "Huntress", "group": "research", "title": "From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS", "url": "https://www.huntress.com/blog/macos-screen-sharing-rce-patched", "date": "2026-08-07"}], "buzz": 1}, {"id": "CVE-2026-18601", "publisher": "VulDB", "title": "A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Performing a manipulation of the argument filename results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure and confirmed the existence of the", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:25.947", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18601"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8946, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_check_config_glc_rce/CVE.", "url": "https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_check_config_glc_rce/CVE.md"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18602", "publisher": "VulDB", "title": "A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Executing a manipulation of the argument Hostname can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure and confirmed the exist", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:35.153", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18602"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89461, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_get_recommend_config_glc_", "url": "https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_get_recommend_config_glc_rce/CVE.md"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-41452", "publisher": "VulnCheck", "title": "Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unaut", "summary": "Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall middleware redirect check. Attackers can supply arbitrary name, email, and password values to the admin-config-setup endpoint, which performs an unauthe", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03742, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:37.047", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41452"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89813, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "Boreas37/CVE-2026-41452-PoC (4 stars)", "url": "https://github.com/Boreas37/CVE-2026-41452-PoC", "stars": 4}, {"kind": "poc", "name": "o-sec/CVE-2026-41452-poc (0 stars)", "url": "https://github.com/o-sec/CVE-2026-41452-poc", "stars": 0}, {"kind": "writeup", "name": "jivasecurity.com/writeups/krayin-installer-bypass-account-takeover-cve-2026-41452", "url": "https://jivasecurity.com/writeups/krayin-installer-bypass-account-takeover-cve-2026-41452"}, {"kind": "nuclei", "name": "Krayin CRM < 2.2.1 - Installer Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41452.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18612", "publisher": "VulDB", "title": "A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5", "summary": "A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03967, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T18:16:38.450", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18612"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "EPSS top 10%: very likely to be exploited", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.90417, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18614", "publisher": "VulDB", "title": "A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of the component s2s.so Native Plugin. Performing a manipulation of the argument port results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T19:16:45.200", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18614"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8946, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18615", "publisher": "VulDB", "title": "A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-server.so Native Plugin. Executing a manipulation of the argument private_key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure and confirmed ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T19:16:45.383", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18615"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89461, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "vuldb.com/cve/CVE-2026-18615", "url": "https://vuldb.com/cve/CVE-2026-18615"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18616", "publisher": "VulDB", "title": "A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument public_key leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure and confirmed the existence of the vu", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T19:16:45.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18616"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89461, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18684", "publisher": "VulDB", "title": "A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03616, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:45.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18684"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89462, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/modem_remove_profile_glc_rce", "url": "https://github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/modem_remove_profile_glc_rce"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69084", "publisher": "VulnCheck", "title": "SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL", "summary": "SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no single-statement, read-only, or admin restrictions. The endpoint is gated only by CheckAuth, making it reachable by the publish RoleReader token and by anonymous users when publish authentication is disabled. Because the underlying driver executes stacked statements, an a", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01573, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.680", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69084"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 65, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.75238, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260721002947-23a17d44b5f3", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260721002947-23a17d44b5f3\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-vh22-h7hf-www7", "note": "vulnerable: < 0.0.0-20260721002947-23a17d44b5f3"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "Boreas37/CVE-2026-69084-PoC (1 stars)", "url": "https://github.com/Boreas37/CVE-2026-69084-PoC", "stars": 1}, {"kind": "nuclei", "name": "SiYuan - SQL Execution", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69084.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66909", "publisher": "Apache Software Foundation", "title": "Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage\u00a0using native Java deserializ", "summary": "Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage\u00a0using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or, if a suitable gadget class is on the classpath, remote code execution. The fix disables ObjectMessage\u00a0deserialization by default, with a configuration s", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01148, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.583", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66909"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.666, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69085", "publisher": "VulnCheck", "title": "SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where th", "summary": "SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenated directly into SQL statements with no escaping or parameter binding. The endpoint is reachable by a publish RoleReader token, or unauthenticated when publish mode is enabled with Publish.Auth.Enable set to false. Because the statement executes on a read-write SQLite handle via a driver th", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01488, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.820", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69085"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.73879, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260721043339-eef10568384e", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260721043339-eef10568384e\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-33jq-p8c2-q3q4", "note": "vulnerable: < 0.0.0-20260721043339-eef10568384e"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "nuclei", "name": "SiYuan <=3.7.2 - SQL Injection", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69085.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67261", "publisher": "Dell", "title": "Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Comma", "summary": "Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying operating system with root privileges. Exploitation may lead to a complete system takeover by an attacker. This vulnerability is", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02319, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:24.430", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "virtual storage integrator", "vendor": "dell", "type": "app", "affected": ["< 10.11.1.0"], "fixed": "10.11.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy virtual-storage-integrator || rpm -q virtual-storage-integrator || virtual-storage-integrator --version"}, {"label": "2. UPGRADE to 10.11.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade virtual-storage-integrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade virtual-storage-integrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67261"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.83329, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-56162", "publisher": "Microsoft Corporation", "title": "Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a net", "summary": "Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00901, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:31.990", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure sql database", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-sql-database || rpm -q azure-sql-database || azure-sql-database --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56162"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56162"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.59342, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71558", "publisher": "Apache Software Foundation", "title": "Heap type confusion vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ vers", "summary": "Heap type confusion vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserialization, causing an object of an incompatible type to be treated as the declared base type. This may result in undefined behavior and potentially lead to denial of service or arbitrary code execution.\n\n\nUser", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0099, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:59.337", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "fory", "vendor": "apache", "type": "app", "affected": [">= 0.14.0 and < 1.5.0"], "fixed": "1.5.0", "safe": "before 0.14.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fory || rpm -q fory || fory --version"}, {"label": "2. UPGRADE to 1.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.14.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fory\nsudo apt install fory=<VERSION_BEFORE_0.14.0>\nsudo apt-mark hold fory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fory\nsudo dnf downgrade fory-<VERSION_BEFORE_0.14.0>\nsudo dnf versionlock add fory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71558"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/oywndv60jwqdv6j37t7bc1qbcc4b235r"}], "cwe": ["CWE-502", "CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.62203, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-24254", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could c", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00889, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:49.937", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24254"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58983, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63508", "publisher": "Microsoft Corporation", "title": "Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attack", "summary": "Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00798, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:36.973", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "planetary computer", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy planetary-computer || rpm -q planetary-computer || planetary-computer --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63508"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63508"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56083, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65667", "publisher": "Microsoft Corporation", "title": "Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.", "summary": "Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00798, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:38.680", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65667"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65667"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56082, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-52102", "publisher": "MITRE", "title": "An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attack", "summary": "An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02939, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:40.273", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52102"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87027, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "showmeyourhands/CVE-2026-52102-PoC (1 stars)", "url": "https://github.com/showmeyourhands/CVE-2026-52102-PoC", "stars": 1}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-69264", "publisher": "GitHub, Inc.", "title": "Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly ", "summary": "Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis, which on Node.js exposes eval and dynamic import, the attacker can break out of the Python string literal, hand a JavaScript string to js.eval, dynamically import Node built-in modules such as fs and chi", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01112, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:57.027", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69264"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6499"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4j8x-x6v7-w9rq"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4j8x-x6v7-w9rq"}], "cwe": ["CWE-94", "CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65715, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-4j8x-x6v7-w9rq", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-4j8x-x6v7-w9rq", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48323", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template ", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01369, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.063", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48323"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.71685, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61484", "publisher": "Apache Software Foundation", "title": "** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.\n\n\n\nThis issue ", "summary": "** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.\n\n\n\nThis issue affects Apache Lucy: all versions.\n\n\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\n\n\nLucy is now maintained outside of the ASF at\u00a0https://github.com/lucysearch . 0.8.0 is no longer affected by this i", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00806, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:35.487", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "lucy", "vendor": "apache", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lucy || rpm -q lucy || lucy --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61484"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/942t3pwgz2nrhnklrtyt5zr7g4wqc9cb"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56367, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53975", "publisher": "VulnCheck", "title": "OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attacker", "summary": "OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn() without any allowlist, blocklist, or argument validation. The authentication middleware becomes a no-op when UI_PASSWORD is not configured, matching the default Docker deployment, enabling ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01676, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:55.827", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53975"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.76716, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53976", "publisher": "VulnCheck", "title": "OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs", "summary": "OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassing the workspace boundary check in resolveReadPathFromContext. Attackers can exploit the vacuous isPathWithinRoot guard to read sensitive files such as t", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.02612, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:55.983", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53976"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.85303, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "nuclei", "name": "OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53976.yaml"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18613", "publisher": "VulDB", "title": "A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00995, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T18:16:38.617", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18613"}], "cwe": ["CWE-74", "CWE-707"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.62347, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70470", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide and full OS command execution on the Flowise host via Pyodide js module interop. The validator gates pyodide.runPythonAsync in packages/components/nodes/", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00972, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:57.930", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70470"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6499"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61624, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-52fh-8v99-63c2", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-52fh-8v99-63c2", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70553", "publisher": "VulnCheck", "title": "MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arb", "summary": "MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file by submitting crafted POST requests to the install endpoint after installation is complete. Attackers can supply a malicious db_dbprefix value containing a single quote to break out of a PHP string literal in application/config/database.php, appending attacker-controlled PHP statemen", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01274, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:56.023", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70553"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.69703, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "woshidashabi1126/CVE-2026-70553-PoC (1 stars)", "url": "https://github.com/woshidashabi1126/CVE-2026-70553-PoC", "stars": 1}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71289", "publisher": "TuranSec", "title": "The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose", "summary": "The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g. \":8089/tcp\") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system's sole authentication boundary.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00682, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.703", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71289"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51921, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68079", "publisher": "Apache Software Foundation", "title": "In Apache CXF's DefaultEncryptingCodeDataProvider,\u00a0a captured authorization code can be redeemed an unlimited ", "summary": "In Apache CXF's DefaultEncryptingCodeDataProvider,\u00a0a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the\u00a0removeCodeGrant functionality. This violates the RFC requirement that\u00a0\"The authorization code MUST NOT be used more than once.\" Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00682, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:28.060", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68079"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/6m06gdqz4rxhy9g90qz9lyqx2gqmf13o"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51943, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71398", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi", "summary": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01166, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:22.327", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": [">= 7.2.1 and < 7.4.4"], "fixed": "7.4.4", "safe": "before 7.2.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to 7.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison campaign\nsudo apt install campaign=<VERSION_BEFORE_7.2.1>\nsudo apt-mark hold campaign"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list campaign\nsudo dnf downgrade campaign-<VERSION_BEFORE_7.2.1>\nsudo dnf versionlock add campaign"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71398"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-123.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.67075, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-64827", "publisher": "VulnCheck", "title": "Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authenti", "summary": "Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches 'login_admin.php'. Attackers can append '/login_admin.php' to the path of any target PHP script to cause the authentication check to pass an", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0083, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:27.630", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64827"}], "cwe": ["CWE-807"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57153, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "karmainsecurity.com/KIS-2026-14", "url": "https://karmainsecurity.com/KIS-2026-14"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67688", "publisher": "MITRE", "title": "ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file uplo", "summary": "ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00857, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:23.130", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67688"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58026, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/qflksheep/ICS-Park-Smart-Park-Management-System-v2.0-POC/blob/main/xsspoc", "url": "https://github.com/qflksheep/ICS-Park-Smart-Park-Management-System-v2.0-POC/blob/main/xsspoc"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48168", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vulnerable to command injection because it embeds an attacker-controlled pull request branch name into a Bash run: block without quoting or validation. Additionally, the workflow allows any @claude comment to trigger the job regardless of whether the commenter is a trusted collaborator. An outside contributor can open a pull request", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01503, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:31.070", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48168"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.74139, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xp85-6wwf-r67c", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xp85-6wwf-r67c"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-50515", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a ne", "summary": "Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.01694, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:31.140", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure service bus", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-service-bus || rpm -q azure-service-bus || azure-service-bus --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50515"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50515"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.76958, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48330", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is ch", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01036, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.317", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48330"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.63608, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70554", "publisher": "VulnCheck", "title": "MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arb", "summary": "MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxsite_comuser cookie directly to unserialize() without validation or class allowlisting. Attackers can craft a malicious serialized PHP object payload delivered in a single HTTP request to trigger magic methods during object graph reconstruction, enabling property-oriente", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01233, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:38.613", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70554"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.6879, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62873", "publisher": "Microsoft Corporation", "title": "Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker", "summary": "Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00606, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:36.350", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "windows admin center", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy windows-admin-center || rpm -q windows-admin-center || windows-admin-center --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62873"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48356, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71560", "publisher": "Apache Software Foundation", "title": "Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versi", "summary": "Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.\n\n\nUsers are recommended to upgrade to Apache Fory 1.5.0, which fixes this is", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00767, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:59.590", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "fory", "vendor": "apache", "type": "app", "affected": [">= 0.14.0 and < 1.5.0"], "fixed": "1.5.0", "safe": "before 0.14.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fory || rpm -q fory || fory --version"}, {"label": "2. UPGRADE to 1.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.14.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fory\nsudo apt install fory=<VERSION_BEFORE_0.14.0>\nsudo apt-mark hold fory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fory\nsudo dnf downgrade fory-<VERSION_BEFORE_0.14.0>\nsudo dnf versionlock add fory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71560"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/xl2g544kctbgozccnj35qts43p452y5x"}], "cwe": ["CWE-502", "CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55074, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70477", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatflow using a CSV Agent node can cause the LLM to respond with a malicious Python script that bypasses the blocklist validator and executes in an unsandboxed Pyodide environment. The specific flaw exists within the run method of the CSV_Agents class, where untrusted data is used to construct an LLM prompt and th", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00814, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:54.473", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70477"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6499"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56618, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-5xvg-pmgg-3mxr", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-5xvg-pmgg-3mxr", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-15734", "publisher": "CERT/CC", "title": "A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authent", "summary": "A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:48.513", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15734"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53597, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Stuub/WGDashboard-v4.3.2-SSTI-to-Root-RCE-PoC", "url": "https://github.com/Stuub/WGDashboard-v4.3.2-SSTI-to-Root-RCE-PoC"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-58115", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 ", "summary": "A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server.\r\nThis could allow an unauthenticated remote attacker to create malicious flows through the HTTP int", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00953, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:00.190", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58115"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60989, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69096", "publisher": "VulnCheck", "title": "OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC bac", "summary": "OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an OS command injection vulnerability. The package's read ACL grants broad ubus access to docker.* / docker.container.*, which exposes the docker.container.ttyd_start method even though it performs mutating operations. The run_ttyd handler builds a shell command from the request-controlled id, ", "cvss": 8.8, "sev": "HIGH", "epss": 0.0327, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:30.500", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69096"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.88343, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/openwrt/luci/security/advisories/GHSA-cq4h-h8jr-3xqv", "url": "https://github.com/openwrt/luci/security/advisories/GHSA-cq4h-h8jr-3xqv"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68979", "publisher": "Apache Software Foundation", "title": "Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce aut", "summary": "Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges on the Parameter Context itself. As a result of the missing authorization, an authenticated user authorized to mod", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00808, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:28.977", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "nifi", "vendor": "apache", "type": "app", "affected": [">= 1.10.0 and < 2.11.0"], "fixed": "2.11.0", "safe": "before 1.10.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nifi || rpm -q nifi || nifi --version"}, {"label": "2. UPGRADE to 2.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nifi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nifi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.10.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nifi\nsudo apt install nifi=<VERSION_BEFORE_1.10.0>\nsudo apt-mark hold nifi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nifi\nsudo dnf downgrade nifi-<VERSION_BEFORE_1.10.0>\nsudo dnf versionlock add nifi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68979"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/xwz8wsss2ovx07tns96rkc3n7cm4xfrq"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5645, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61486", "publisher": "Apache Software Foundation", "title": "** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.\n\n\n\nThis issue affect", "summary": "** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.\n\n\n\nThis issue affects Apache Lucy: all versions.\n\n\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\n\n\nLucy is now maintained outside of the ASF \nat\u00a0https://github.com/lucysearch . This issue has been fixed in 0.8.0 there.\n", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00807, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:35.733", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "lucy", "vendor": "apache", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lucy || rpm -q lucy || lucy --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61486"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/z88yv1z19ppsd4td4nqtg7q72fvqh01b"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56405, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:09:01.822238+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48331", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu", "summary": "Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00946, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.443", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48331"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60782, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69263", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00662, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:01.683", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69263"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/a4c4e4988cded15edf725e762560575b889ae351"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6471"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5108, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-xc48-889x-5qmw", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-xc48-889x-5qmw", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "leoelsolh/CVE-2026-69263 (0 stars)", "url": "https://github.com/leoelsolh/CVE-2026-69263", "stars": 0}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70552", "publisher": "VulnCheck", "title": "MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allo", "summary": "MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers to access admin-gated endpoints by supplying any X-Requested-With header and requesting a base64-encoded path resolving to any *-ajax.php file in the codebase. Attackers can exploit this dispatcher bypass to reach privileged plugin endpoints without credentials, enabling actions such as manipulating poll state", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00826, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:55.883", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70552"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57024, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-9192", "publisher": "Progress Software Corporation", "title": "An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 1", "summary": "An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00835, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:10.063", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9192"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57291, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-34191", "publisher": "Apache Software Foundation", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache P", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00587, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.650", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "apr-util", "vendor": "apache", "type": "app", "affected": [">= 1.6.0 and <= 1.6.3"], "fixed": "newer than 1.6.3", "safe": "before 1.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apr-util || rpm -q apr-util || apr-util --version"}, {"label": "2. UPGRADE to newer than 1.6.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apr-util"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison apr-util\nsudo apt install apr-util=<VERSION_BEFORE_1.6.0>\nsudo apt-mark hold apr-util"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list apr-util\nsudo dnf downgrade apr-util-<VERSION_BEFORE_1.6.0>\nsudo dnf versionlock add apr-util"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34191"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47385, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}, {"os": "Ubuntu 24.04", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-1+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-1+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-3+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-3+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "apr-util", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69703", "publisher": "VulnCheck", "title": "Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/cont", "summary": "Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actions such as record deletion by requesting controller endpoints with GET parameters like supp, because the PHP header() redirect is never followed by an e", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00585, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.130", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69703"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47276, "pinned": false, "pocs": [{"kind": "writeup", "name": "gist.github.com/arjunjaincs/8cd878b6628d587a1139febd40de9ac6", "url": "https://gist.github.com/arjunjaincs/8cd878b6628d587a1139febd40de9ac6"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67531", "publisher": "GitHub, Inc.", "title": "FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP)", "summary": "FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute\u00a0tool exposes live host Zod\u00a0schema instances to the script via\u00a0getTool(), and because Zod v4 defines\u00a0_zod as a non-configurable, non-writable own property, the ECMAScript Proxy invariants force the security membrane to hand back the raw host object, letting a script reach\u00a0_zod.constr.constructor\u00a0(the host Function\u00a0construct", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00735, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:53.733", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67531"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53933, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/agentfront/frontmcp/security/advisories/GHSA-mp29-fxh8-92px", "url": "https://github.com/agentfront/frontmcp/security/advisories/GHSA-mp29-fxh8-92px"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17032", "publisher": "WPScan", "title": "Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update se", "summary": "Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00545, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:49.237", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17032"}], "cwe": ["CWE-912"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4499, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48085", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to `/setup/create-admin-account` and creates additional GLOBAL_ADMIN accounts without verifying that an admin already exists. Any unauthenticated network attacker who can submit a same-origin form POST gains full platform-level administr", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00591, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.440", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48085"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47553, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/open-reception/appointment-booking-software/security/advisories/GHSA-qvvq-hhpj-", "url": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-qvvq-hhpj-64rp"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48087", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration handler at `POST /api/auth/register/{userId}` validates the relationship between the WebAuthn challenge and the registration cookie's email but never validates that the `userId` in the URL belongs to that email. An unauthenticated attacker requests a challenge for their own email, generates a registr", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00574, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48087"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46716, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/open-reception/appointment-booking-software/security/advisories/GHSA-j9rw-x2wv-", "url": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-j9rw-x2wv-h5rj"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66914", "publisher": "Joomla! Project", "title": "Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unaut", "summary": "Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.01535, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T14:17:00.397", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66914"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.74654, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "nuclei", "name": "SEBLOD for Joomla < 3.30.0/< 4.7.0/< 6.0.1 - Path Traversal", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-66914.yaml"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18600", "publisher": "VulDB", "title": "A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5", "summary": "A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure and confirme", "cvss": 8.8, "sev": "HIGH", "epss": 0.03212, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:25.763", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18600"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.88099, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18787", "publisher": "VulDB", "title": "A vulnerability was identified in GL.iNet AX1800 up to 4.8.3", "summary": "A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpoint. The manipulation of the argument args.id leads to command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.", "cvss": 8.8, "sev": "HIGH", "epss": 0.03212, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:48.817", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18787"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.88099, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63455", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauth", "summary": "Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00796, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:57.717", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63455"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56028, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63456", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauth", "summary": "Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00796, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:57.853", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63456"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56028, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71207", "publisher": "TuranSec", "title": "The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and buil", "summary": "The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00706, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.717", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71207"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52844, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70558", "publisher": "VulnCheck", "title": "Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new F", "summary": "Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path validation. The route is marked @SaIgnore and /download/** is excluded from the Sa-Token interceptor, so the only guard is a header equality check against a dinkyToken value whose default (efda1551-7958-4e0f-80a8-dfd107df3e38) is hardcoded in source and shipped to every deployment. Anyone w", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00819, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:26.227", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70558"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5677, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/DataLinkDC/dinky/issues/4566", "url": "https://github.com/DataLinkDC/dinky/issues/4566"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73211", "publisher": "GitHub, Inc.", "title": "PeerTube is an ActivityPub-federated video streaming platform", "summary": "PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including oAuthToken.accessToken, and take over administrator accounts. This issue is fixed in version 8.1.6.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:26.357", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73211"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53603, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69083", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint", "summary": "SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00475, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.537", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69083"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40122, "pinned": false, "pocs": [{"kind": "poc", "name": "0xdak/CVE-2026-69083_exploit (0 stars)", "url": "https://github.com/0xdak/CVE-2026-69083_exploit", "stars": 0}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260721004815-cf42dd5680c8", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260721004815-cf42dd5680c8\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-fph3-ghq9-vw66", "note": "vulnerable: < 0.0.0-20260721004815-cf42dd5680c8"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69258", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an overrideConfig object and unconditionally spread it into internal flowConfig and flowData objects in packages/server/src/utils/buildChatflow.ts and packages/server/src/utils/index.ts without checking apiOverrideStatus. This allowed unauthenticated attackers to inject arbitrar", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00667, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:01.280", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69258"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/23b997ee5ef9e269b628bad0f56f1ecb86bd2fca"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6279"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6vh2-wg4h-4vwj"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6vh2-wg4h-4vwj"}], "cwe": ["CWE-639", "CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51297, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-6vh2-wg4h-4vwj", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61466", "publisher": "Apache Software Foundation", "title": "In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `", "summary": "In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00711, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:27.730", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61466"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/2l1r16g79tpxd7fzrzr2q9oscwrjgljs"}], "cwe": ["CWE-304"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53042, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65553", "publisher": "Patchstack", "title": "Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6 <= 2.1.3 versions.", "summary": "Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6 <= 2.1.3 versions.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.0086, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:17.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65553"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58111, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-59115", "publisher": "Microsoft Corporation", "title": "'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate priv", "summary": "'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.01024, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:33.780", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "entra provisioning service", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy entra-provisioning-service || rpm -q entra-provisioning-service || entra-provisioning-service --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59115"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6322, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18641", "publisher": "VulDB", "title": "A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13", "summary": "A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this d", "cvss": 7.3, "sev": "HIGH", "epss": 0.02657, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:16.923", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18641"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.85578, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/lkua-1/cve/issues/1", "url": "https://github.com/lkua-1/cve/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64633", "publisher": "HackerOne", "title": "A vulnerability allowing remote unauthenticated code execution on the agent host.", "summary": "A vulnerability allowing remote unauthenticated code execution on the agent host.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00604, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:58.227", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64633"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48274, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "tfawnies/CVE-2026-64633 (0 stars)", "url": "https://github.com/tfawnies/CVE-2026-64633", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70478", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint is included in WHITELIST_URLS and requires no authentication. The endpoint decrypts the stored credential, sends a refresh request to the configured OAuth provider with the client secret and refresh token, and returns the refreshed access_token in the response body. An attacker ", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00615, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:54.610", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70478"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-qgvm-j2hm-6m38"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-qgvm-j2hm-6m38"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48822, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-qgvm-j2hm-6m38", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66902", "publisher": "CPANSec", "title": "Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ", "summary": "Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call.\n\nThe Pluggable subclass reads credential_source.executable.command from the credentials JSON and runs it as `system($command)`, a single argument call that passes the whole string to /bin/sh -c. The executable's environment_variables map from the same JSON is copied into %ENV first. No opt-in gate guards the call. mak", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00702, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:37.253", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66902"}], "cwe": ["CWE-78", "CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52731, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71231", "publisher": "TuranSec", "title": "IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ", "summary": "IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00665, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:25.740", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71231"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51201, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71278", "publisher": "TuranSec", "title": "rust-iot-platform allows creating a \"calc rule\" via POST /calc-rule/create (api/src/controller/calc_rule_route", "summary": "rust-iot-platform allows creating a \"calc rule\" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00665, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.320", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71278"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51201, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69102", "publisher": "VulnCheck", "title": "MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-max", "summary": "MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate as any user by exploiting the password-skipped login endpoint. Attackers can craft a JWT token signed with the publicly known default secret, submit it to the /sign/login/jwt/trust endpoint, and obtain a fully authenticated admin session with a", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00641, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:17.587", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69102"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50093, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48031", "publisher": "GitHub, Inc.", "title": "go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL", "summary": "go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string \"random\", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin roles, and completely bypass authentication on all protected endpoints. This value is set in two places: the dev.env template (line 10) and a programmat", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00626, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:24.200", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48031"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49365, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/dhax/go-base/pull/31", "url": "https://github.com/dhax/go-base/pull/31"}, {"kind": "writeup", "name": "github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm", "url": "https://github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/dhax/go-base", "status": "fixed", "fixed": "0.0.0-20260517152733-cc82b9740fa6", "cmd": "go get github.com/dhax/go-base@v0.0.0-20260517152733-cc82b9740fa6\ngo list -m github.com/dhax/go-base", "url": "https://github.com/advisories/GHSA-mqq6-462x-jxmm", "note": "vulnerable: < 0.0.0-20260517152733-cc82b9740fa6"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66297", "publisher": "EEF", "title": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in live", "summary": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands.\n\nLivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_instructions/4 in lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex interpolate deployment group envir", "cvss": 8.0, "sev": "HIGH", "epss": 0.02414, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:11.743", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "livebook", "vendor": "livebook", "type": "app", "affected": [">= 0.13.0 and < 0.18.7", ">= 0.19.0 and < 0.19.9"], "fixed": "0.18.7, 0.19.9", "safe": "before 0.13.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy livebook || rpm -q livebook || livebook --version"}, {"label": "2. UPGRADE to 0.18.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade livebook"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade livebook"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.13.0 (Debian / Ubuntu)", "cmd": "apt-cache madison livebook\nsudo apt install livebook=<VERSION_BEFORE_0.13.0>\nsudo apt-mark hold livebook"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list livebook\nsudo dnf downgrade livebook-<VERSION_BEFORE_0.13.0>\nsudo dnf versionlock add livebook"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66297"}, {"t": "Vendor Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66297.html"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/0c2487326bbb37cb1eb43bb2f76eb93ad9f8fd6b"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/b2a8416d149043132fe5a14ed611e0fefc9dc9cd"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/f8fe9c62cb8bfc1dd0ccda4ea4a57c5e91563c85"}, {"t": "Exploit, Patch", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-qpjc-w5mm-73mj"}, {"t": "Exploit, Patch", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-qpjc-w5mm-73mj"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.84011, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/livebook-dev/livebook/security/advisories/GHSA-qpjc-w5mm-73mj", "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-qpjc-w5mm-73mj"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50481", "publisher": "Microsoft Corporation", "title": "Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to eleva", "summary": "Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00822, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:30.980", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure active directory", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-active-directory || rpm -q azure-active-directory || azure-active-directory --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50481"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481"}], "cwe": ["CWE-471"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56897, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62830", "publisher": "Microsoft Corporation", "title": "Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.", "summary": "Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00778, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:34.593", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure sre agent", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-sre-agent || rpm -q azure-sre-agent || azure-sre-agent --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62830"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62830"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55411, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:10:32.563403+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71209", "publisher": "TuranSec", "title": "audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET r", "summary": "audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cover or /authors/:id/image shape, where req.path retains %2F sequences URL-encoded. CacheManager.handleCoverCache then joins this decoded value into a cache file path and streams the result before any database-backed ownership check.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01927, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:43.110", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71209"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.79822, "pocs": [{"kind": "writeup", "name": "github.com/advplyr/audiobookshelf/security/advisories/GHSA-pg8v-5jcv-wrvw", "url": "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-pg8v-5jcv-wrvw"}, {"kind": "nuclei", "name": "Audiobookshelf - Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71209.yaml"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71254", "publisher": "TuranSec", "title": "nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record f", "summary": "nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-request's record_length is at most 124, but it never validates the CUMULATIVE response size across all sub-requests before processing them.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00553, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T12:18:57.600", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71254"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45471, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71256", "publisher": "TuranSec", "title": "nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_d", "summary": "nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_device_identification_res in nanomodbus.c. A fixed 3-element stack array order[3] = {0,1,2} maps object IDs to buffer indices. The server-supplied object_id field (0-255, read directly from the wire) is used without any bounds check as buf_index = order[object_id].", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00553, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T12:18:57.847", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71256"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4547, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71267", "publisher": "TuranSec", "title": "microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied ", "summary": "microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t via strcpy(h.name, name), with no check that strlen(name) is less than 100 before the copy.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00553, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:50.963", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71267"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45476, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-20272", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are grouped under the Common Wea", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00573, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:49.053", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20272"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46625, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28139", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions.", "summary": "Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:52.580", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28139"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46129, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65556", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.", "summary": "Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:17.803", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65556"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46127, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65571", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.", "summary": "Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.560", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65571"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4614, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65572", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.", "summary": "Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.683", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65572"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46141, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65574", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.", "summary": "Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.940", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65574"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46128, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65575", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.", "summary": "Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.067", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65575"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46128, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65576", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.", "summary": "Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.190", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65576"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65577", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.", "summary": "Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.313", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65577"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65579", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.", "summary": "Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.560", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65579"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4614, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65581", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.", "summary": "Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.683", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65581"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4614, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66662", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.", "summary": "Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00548, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.850", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66662"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45151, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66665", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.", "summary": "Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.227", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66665"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54212", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a \nbuffe", "summary": "Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a \nbuffer overflow condition. By submitting a specially crafted JSON body, \nsuch as one that is at least 8 characters long and begins with a number,\n an unauthenticated attacker can cause the server to crash, resulting in\n denial of service. Depending on the stack state or if a stack canary \ncan be disclosed through another vulnerability, this bu", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.00665, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.353", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54212"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51231, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73376", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.", "summary": "Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T15:17:05.410", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73376"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4613, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60053", "publisher": "Apache Software Foundation", "title": "Insufficient Session Expiration vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0", "summary": "Insufficient Session Expiration vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAdministrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys were explicitly removed.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00566, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:58.323", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60053"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/2vkcj3bdvso6cywnklt2vtkc2m4o0b5c"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46241, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-62836", "publisher": "Microsoft Corporation", "title": "Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an un", "summary": "Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00648, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:34.727", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure sql managed instance", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-sql-managed-instance || rpm -q azure-sql-managed-instance || azure-sql-managed-instance --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62836"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62836"}], "cwe": ["CWE-923"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50443, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70332", "publisher": "Microsoft Corporation", "title": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00863, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:41.040", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "sharepoint online", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sharepoint-online || rpm -q sharepoint-online || sharepoint-online --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70332"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70332"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5822, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-9190", "publisher": "Progress Software Corporation", "title": "An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and ", "summary": "An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP request containing both Content-Length and Transfer-Encoding headers causes a reverse proxy and MarkLogic Server to interpret request boundaries differe", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00737, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:09.940", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9190"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54006, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54213", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be \nshu", "summary": "Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be \nshut down when a specific endpoint (/internalRestart) is accessed. This \nendpoint is accessible to unauthenticated users over the public \nInternet. Instead of \u201crestarting\u201d, the server shuts completely down. As a\n result, a remote attacker can trigger a persistent denial of service by\n shutting down the web server without requiring authentica", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00713, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.500", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54213"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53148, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68980", "publisher": "Apache Software Foundation", "title": "Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Cont", "summary": "Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Context Identifier without verifying the requested Identifier against the stored Identifier. Apache", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00477, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:29.127", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "nifi", "vendor": "apache", "type": "app", "affected": [">= 2.0.0 and < 2.11.0"], "fixed": "2.11.0", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nifi || rpm -q nifi || nifi --version"}, {"label": "2. UPGRADE to 2.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nifi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nifi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nifi\nsudo apt install nifi=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold nifi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nifi\nsudo dnf downgrade nifi-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add nifi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68980"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/yo8k6tt3zxjm49zzhly3453v0xhwm3o1"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40233, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69256", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to provide Python code that is executed through pyodide; although a denylist blocked dangerous Python constructs, pandas.read_pickle() could deserialize a pickled payload and achieve code execution without matching the denied words. The affected file is flowise-components/nodes/agents/CSVAgent/CSVAgent.ts, where", "cvss": 8.8, "sev": "HIGH", "epss": 0.0101, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:00.707", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69256"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/c79fe56a6c249850e96bce9b4859f7a0083e4507"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6257"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x6vm-w76m-8j7g"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x6vm-w76m-8j7g"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.62835, "vendors": [{"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-x6vm-w76m-8j7g", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-x6vm-w76m-8j7g", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-47623", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted da", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00692, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.983", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47623"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52352, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61483", "publisher": "Apache Software Foundation", "title": "** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.\n\n\n\nThis issue affects Apa", "summary": "** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.\n\n\n\nThis issue affects Apache Lucy: all versions.\n\n\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the ASF. Lucy is now maintained outside of the", "cvss": 7.5, "sev": "HIGH", "epss": 0.0103, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:35.330", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "lucy", "vendor": "apache", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lucy || rpm -q lucy || lucy --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61483"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ltp8320c0nsy45bpzm8342jd7yj05z1h"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.63414, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71263", "publisher": "TuranSec", "title": "The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/port", "summary": "The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE limit.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00501, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:50.473", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71263"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.42029, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-32327", "publisher": "Apache Software Foundation", "title": "A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer whi", "summary": "A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the\u00a0apr_xml_quote_elem() function.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes this issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00458, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.190", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "apr-util", "vendor": "apache", "type": "app", "affected": ["< 1.6.4"], "fixed": "1.6.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apr-util || rpm -q apr-util || apr-util --version"}, {"label": "2. UPGRADE to 1.6.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apr-util"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32327"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/hq27vj8yfno9tkwv0fpj6jksfzgxvth1"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38796, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}, {"os": "Debian 12", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-1+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-1+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-3+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-3+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.3-23.el10_2.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66392\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-9.el8_10.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69113\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-23.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66341\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "apr-util", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "apr-util", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2115", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-32327.html", "note": "ALAS2023-2026-2115"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3892", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-32327.html", "note": "ALAS2-2026-3892"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3892 (important): apr-util", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3892.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-49163", "publisher": "Microsoft Corporation", "title": "Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profile", "summary": "Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01024, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:30.800", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "application insights profiler", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-insights-profiler || rpm -q application-insights-profiler || application-insights-profiler --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49163"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49163"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6322, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-56161", "publisher": "Microsoft Corporation", "title": "Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a netwo", "summary": "Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00689, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:31.827", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure logic apps", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-logic-apps || rpm -q azure-logic-apps || azure-logic-apps --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56161"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52212, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-62896", "publisher": "Microsoft Corporation", "title": "Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.", "summary": "Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00689, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:36.590", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62896"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62896"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52212, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68823", "publisher": "Microsoft Corporation", "title": "Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute cod", "summary": "Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00932, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:40.900", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "azure confidential ledger", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-confidential-ledger || rpm -q azure-confidential-ledger || azure-confidential-ledger --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68823"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823"}], "cwe": ["CWE-749"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.60343, "vendors": [{"os": "Fedora 46", "pkg": "pspp", "status": "fixed", "fixed": "2.1.3-2.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0d6444911b", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d6444911b", "note": "FEDORA-2026-0d6444911b"}, {"os": "Fedora ELN", "pkg": "barman", "status": "fixed", "fixed": "3.20.1-3.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-45ecf042c2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-45ecf042c2", "note": "FEDORA-2026-45ecf042c2"}], "vendors_checked": "2026-10-23T23:12:23.811813+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2025-58627", "publisher": "Patchstack", "title": "Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculo", "summary": "Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2025-11-06", "pub": "2025-11-06T16:15:59.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58627"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3791, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71214", "publisher": "TuranSec", "title": "The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the call", "summary": "The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the caller's Hasura session role via getHasuraSession, which prefers a session_variables object taken directly from the client-supplied JSON request body over the Authorization header's JWT claims, with no verification that the request actually originated from Hasura.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:43.807", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71214"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40673, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5134", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Sof", "summary": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection.\n\nThis issue affects CMS: through 06082026.\u00a0NOTE: The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00476, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:36.840", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5134"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4019, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28005", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.", "summary": "Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:51.560", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28005"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4068, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54489", "publisher": "Dell", "title": "Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive", "summary": "Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This vulnerability is considered critical as it allows an unauthenticated attacker to obtain active session credentials and fully impersonate authenticated users, ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00619, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:56.120", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "virtual storage integrator", "vendor": "dell", "type": "app", "affected": ["< 10.11.1.0"], "fixed": "10.11.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy virtual-storage-integrator || rpm -q virtual-storage-integrator || virtual-storage-integrator --version"}, {"label": "2. UPGRADE to 10.11.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade virtual-storage-integrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade virtual-storage-integrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54489"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49019, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65507", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.", "summary": "Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:14.823", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65507"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40687, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-24253", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00641, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:49.767", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24253"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50101, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70374", "publisher": "TuranSec", "title": "HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbn", "summary": "HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation routine. Media.generateThumbnail in src/Server/Entity/Resource/Media.js builds a temporary file path as 'thumbnail' + Path.extname(filename) and passes it, unescaped, into a shell command executed via AppService.exec ('convert ' + tempFile + ...).", "cvss": 8.8, "sev": "HIGH", "epss": 0.01868, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.567", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70374"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.79166, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70375", "publisher": "TuranSec", "title": "HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer compon", "summary": "HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js executes AppService.exec, interpolating the configured branch value directly into a shell command with no escaping.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01868, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.697", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70375"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.79166, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17556", "publisher": "GitHub, Inc. (Products Only)", "title": "A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated atta", "summary": "A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The X-GitHub-Request-Id request header was used without sanitization as a filesystem path segment for the upload buffer directory, so a traversal value pointed th", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00805, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:06.047", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "enterprise server", "vendor": "github", "type": "app", "affected": ["< 3.17.19", ">= 3.18.0 and < 3.18.13", ">= 3.19.0 and < 3.19.10", ">= 3.20.0 and < 3.20.6", ">= 3.21.0 and < 3.21.4"], "fixed": "3.17.19, 3.18.13, 3.19.10, 3.20.6, 3.21.4", "safe": "before 3.18.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-server || rpm -q enterprise-server || enterprise-server --version"}, {"label": "2. UPGRADE to 3.17.19 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade enterprise-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade enterprise-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.18.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-server\nsudo apt install enterprise-server=<VERSION_BEFORE_3.18.0>\nsudo apt-mark hold enterprise-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-server\nsudo dnf downgrade enterprise-server-<VERSION_BEFORE_3.18.0>\nsudo dnf versionlock add enterprise-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17556"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56338, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-57817", "publisher": "Apache Software Foundation", "title": "The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when opera", "summary": "The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow.\u00a0If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substitution/Injection attacks.\u00a0Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00692, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.120", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57817"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/pj63c3pf7kkp1xhr53do704fwj3t3htn"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52342, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65552", "publisher": "Patchstack", "title": "Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.", "summary": "Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:17.430", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65552"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46129, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65573", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.", "summary": "Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.813", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65573"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46141, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65578", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Agora <= 1.9 versions.", "summary": "Unauthenticated PHP Object Injection in Agora <= 1.9 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.437", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65578"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46142, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-59118", "publisher": "Microsoft Corporation", "title": "Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.", "summary": "Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00716, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:33.923", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "power apps", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy power-apps || rpm -q power-apps || power-apps --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59118"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59118"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53278, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54210", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are \n", "summary": "Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are \nvulnerable to a buffer overflow condition. By specifying an excessively \nlong filename in a file upload request, an unauthenticated attacker can \ntrigger a crash of the server, resulting in a denial of service. \nDepending on the stack state or if a stack canary can be disclosed \nthrough another vulnerability, this buffer overflow could po", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.00665, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.030", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54210"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51231, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54211", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application\u2019s endpoint \u201c//serverClient_close.html\u201d is vulnerable to a", "summary": "Tobit Laboratories AG TeamDavid's Webbox application\u2019s endpoint \u201c//serverClient_close.html\u201d is vulnerable to a\n buffer overflow vulnerability in multiple form data parameters. By \nsubmitting excessively long values in these parameters, an authenticated\n attacker can trigger a server crash, resulting in denial of service. \nDepending on the stack state or if a stack canary can be disclosed \nthrough another vulnerability, this buffer overflow could ", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.0064, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.170", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54211"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50039, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18811", "publisher": "VulDB", "title": "A vulnerability was detected in H3C NX15 V100R017", "summary": "A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03583, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:35.730", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18811"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.89368, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_filter_url_add_root_rce", "url": "https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_filter_url_add_root_rce"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18812", "publisher": "VulDB", "title": "A flaw has been found in H3C NX15 V100R017", "summary": "A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03583, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:35.890", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18812"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.89367, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_ipv6_wan_set_workmode_r", "url": "https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_ipv6_wan_set_workmode_root_rce"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18813", "publisher": "VulDB", "title": "A vulnerability has been found in H3C NX15 V100R017", "summary": "A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03583, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:36.053", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18813"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.89368, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_apcm_version_delete_roo", "url": "https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_apcm_version_delete_root_rce"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18814", "publisher": "VulDB", "title": "A vulnerability was found in H3C NX15 V100R017", "summary": "A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03583, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:13.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18814"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.89367, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18900", "publisher": "VulDB", "title": "A weakness has been identified in H3C NX15 V100R017", "summary": "A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03822, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T05:16:49.243", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18900"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "EPSS top 10%: very likely to be exploited", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.9003, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18902", "publisher": "VulDB", "title": "A vulnerability was detected in H3C NX15 V100R017", "summary": "A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument my2P4key results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03822, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:37.490", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18902"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "EPSS top 10%: very likely to be exploited", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.9003, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69111", "publisher": "VulnCheck", "title": "Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote", "summary": "Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a 'role' parameter to shut down the proxy, datanode, or querynode components, resulting in ", "cvss": 7.5, "sev": "HIGH", "epss": 0.01099, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:14.657", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69111"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.6539, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61372", "publisher": "Apache Software Foundation", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fu", "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki.\n\nThis issue affects Apache Jena Fuseki: through 6.1.0.\n\nUsers are recommended to upgrade to version 6.2.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00808, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:39.467", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "jena fuseki", "vendor": "apache", "type": "app", "affected": ["< 6.2.0"], "fixed": "6.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jena-fuseki || rpm -q jena-fuseki || jena-fuseki --version"}, {"label": "2. UPGRADE to 6.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jena-fuseki"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jena-fuseki"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61372"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56454, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "apache-jena", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "apache-jena", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68981", "publisher": "Apache Software Foundation", "title": "Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jerse", "summary": "Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compressio", "cvss": 7.5, "sev": "HIGH", "epss": 0.0074, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:29.280", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "nifi", "vendor": "apache", "type": "app", "affected": [">= 1.5.0 and < 2.11.0"], "fixed": "2.11.0", "safe": "before 1.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nifi || rpm -q nifi || nifi --version"}, {"label": "2. UPGRADE to 2.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nifi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nifi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nifi\nsudo apt install nifi=<VERSION_BEFORE_1.5.0>\nsudo apt-mark hold nifi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nifi\nsudo dnf downgrade nifi-<VERSION_BEFORE_1.5.0>\nsudo dnf versionlock add nifi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68981"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/vxrqn7poyf1wx6gdy7c0dxqfqkctjngg"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54125, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48326", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00972, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:46.190", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48326"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.61638, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69259", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended database setting, allowing additionalConfig.database to overwrite the SQLite database path. An authenticated attacker using the published Docker image, w", "cvss": 8.8, "sev": "HIGH", "epss": 0.00821, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:01.413", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69259"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/d07186844263bad057008863037466aff7c3390f"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6464"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.56872, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-x3hf-7cj6-3r4m", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-x3hf-7cj6-3r4m", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47612", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause im", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0082, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.630", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.0.0"], "fixed": "newer than 1.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47612"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56822, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70476", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept attacker-controlled Stripe subscriptionId values without verifying that the identifier belongs to the authenticated user's organization. An authenticated attacker", "cvss": 8.2, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:54.330", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70476"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/4d7899d02ca370a5510406be5c91483085a412f9"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6321"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-gmmw-qg98-6j6p"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-gmmw-qg98-6j6p"}], "cwe": ["CWE-284", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43241, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-gmmw-qg98-6j6p", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-gmmw-qg98-6j6p"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-gmmw-qg98-6j6p", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66257", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leadi", "summary": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:38.423", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66257"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/dnczt6bgfcq2x6q8ljco177h1qmv59fm"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55299, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66273", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to", "summary": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:38.593", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66273"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/z34s9v5w05qk4qqtz5fs3v9wpxz6fnbh"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55297, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67465", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leadi", "summary": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.160", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67465"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/zl2pj5fo32lbyrwof89tdyrgt67bbo0m"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55298, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67551", "publisher": "Apache Software Foundation", "title": "pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to p", "summary": "pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.313", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67551"}, {"t": "Vendor Advisory", "u": "https://lists.apache.org/thread/o566fhkrr3gg0lyzt24xwvz9w94oo6ro"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55297, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67588", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leadi", "summary": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.450", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid protonj2", "vendor": "apache", "type": "app", "affected": ["< 1.2.0"], "fixed": "1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-protonj2 || rpm -q qpid-protonj2 || qpid-protonj2 --version"}, {"label": "2. UPGRADE to 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-protonj2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-protonj2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67588"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/vk4j02dzggfdrdkwvzmqo4jro2tgj0jt"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55298, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67589", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to", "summary": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.583", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid protonj2", "vendor": "apache", "type": "app", "affected": ["< 1.2.0"], "fixed": "1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-protonj2 || rpm -q qpid-protonj2 || qpid-protonj2 --version"}, {"label": "2. UPGRADE to 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-protonj2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-protonj2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67589"}, {"t": "Vendor Advisory", "u": "https://lists.apache.org/thread/bs24x4778dh72xtfs299cy8krvdlo47q"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55299, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68060", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to", "summary": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.737", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68060"}, {"t": "Vendor Advisory", "u": "https://lists.apache.org/thread/0slvl8h25w3z4opnh08yyn8l3chko5c9"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55299, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68074", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leadi", "summary": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:39.877", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68074"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/9t1pvl36z69ssww6449od5g0tszqnhjs"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55299, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71190", "publisher": "MITRE", "title": "In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnera", "summary": "In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The \"qdtext\" pattern (?:[^\"]|\\\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can e", "cvss": 8.7, "sev": "HIGH", "epss": 0.00836, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:40.023", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71190"}], "cwe": ["CWE-1333"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57342, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "swift", "status": "fixed", "fixed": "2.30.1-0+deb12u2", "cmd": "sudo apt update && sudo apt install --only-upgrade swift\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' swift)\" ge \"2.30.1-0+deb12u2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "swift", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66274", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to", "summary": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:37.590", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66274"}, {"t": "Vendor Advisory", "u": "https://lists.apache.org/thread/h7xolzws2by2qhdjf7scbx87foxojb5h"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.553, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67552", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to", "summary": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.103", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67552"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/4dyg0gycrv55ox4oywqght61b053g8xj"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55297, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67590", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to", "summary": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.613", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid protonj2", "vendor": "apache", "type": "app", "affected": ["< 1.2.0"], "fixed": "1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-protonj2 || rpm -q qpid-protonj2 || qpid-protonj2 --version"}, {"label": "2. UPGRADE to 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-protonj2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-protonj2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67590"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/kmov6k7f3moqy01m1s370fl61vgos3ly"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55298, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67592", "publisher": "Apache Software Foundation", "title": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authent", "summary": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue", "cvss": 7.5, "sev": "HIGH", "epss": 0.0074, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.853", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid protonj2", "vendor": "apache", "type": "app", "affected": ["< 1.2.0"], "fixed": "1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-protonj2 || rpm -q qpid-protonj2 || qpid-protonj2 --version"}, {"label": "2. UPGRADE to 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-protonj2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-protonj2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67592"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/b4pv9hfdk7ox78pss77sb4nzwjrvqhhz"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54127, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68073", "publisher": "Apache Software Foundation", "title": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to", "summary": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00774, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.973", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68073"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/djz1gnrk882vzjo8rykyf9bnywqbvwwr"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55298, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-12609", "publisher": "Eclipse Foundation", "title": "In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/", "summary": "In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpoint, which resolves the requested file path with `path.resolve(localPath, filePath)` without verifying that the resolved path stays within the plugin's directory. An unauthenticated network attacker can send percent-encoded `../` sequences (`%2e%2e%2f`) that decode into the path parameter and esc", "cvss": 7.5, "sev": "HIGH", "epss": 0.01644, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:24.080", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "theia", "vendor": "eclipse", "type": "app", "affected": [">= 1.66.0 and < 1.74.0"], "fixed": "1.74.0", "safe": "before 1.66.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy theia || rpm -q theia || theia --version"}, {"label": "2. UPGRADE to 1.74.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade theia"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade theia"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.66.0 (Debian / Ubuntu)", "cmd": "apt-cache madison theia\nsudo apt install theia=<VERSION_BEFORE_1.66.0>\nsudo apt-mark hold theia"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list theia\nsudo dnf downgrade theia-<VERSION_BEFORE_1.66.0>\nsudo dnf versionlock add theia"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12609"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/133"}, {"t": "Issue Tracking, Mitigation", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/524"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.76257, "pocs": [{"kind": "nuclei", "name": "Eclipse Theia - Unauthenticated Path Traversal", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12609.yaml"}], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48834", "publisher": "Apache Software Foundation", "title": "Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.\n\nThis issue affects Apache", "summary": "Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nUnauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00764, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:56.980", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48834"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/0yg5smwnbrhqs55m5h61gn42mcs8s95p"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54963, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54225", "publisher": "Apache Software Foundation", "title": "Apache CXF allows to control the maximum attachment size via the\u00a0\"attachment-max-size\"", "summary": "Apache CXF allows to control the maximum attachment size via the\u00a0\"attachment-max-size\". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by imposing a default attachment size limit of 50mb.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00732, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.003", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54225"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/h2bjqm6g58z0j6893qzh728kdtk1byfy"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53823, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-57819", "publisher": "Apache Software Foundation", "title": "Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParamete", "summary": "Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParameterCount\" configuration option. However, no default limit is set which may lead to denial of service attacks when processing\u00a0 requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00732, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.237", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57819"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53822, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66733", "publisher": "VulnCheck", "title": "Sonic 3 A.I.R", "summary": "Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per miss", "cvss": 7.5, "sev": "HIGH", "epss": 0.01552, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:18:21.947", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66733"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.74935, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53984", "publisher": "VulnCheck", "title": "Ground Station prior to\u00a00.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vu", "summary": "Ground Station prior to\u00a00.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or replace the entire SQLite database by sending a single full_restore command with a caller-supplied SQL blob. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authenticati", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:42.280", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53984"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53632, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67622", "publisher": "VulnCheck", "title": "Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants inte", "summary": "Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownership verification. Attackers can enumerate cross-workspace assistant metadata, retrieve file and vector store listings, and upload files into victim worksp", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00479, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:22.873", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.4"], "fixed": "newer than 3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67622"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.40412, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65668", "publisher": "Microsoft Corporation", "title": "Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges ov", "summary": "Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00778, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:38.833", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "purview ediscovery", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purview-ediscovery || rpm -q purview-ediscovery || purview-ediscovery --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65668"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55414, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71559", "publisher": "Apache Software Foundation", "title": "Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to ", "summary": "Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.\n\nThis issue affects Apache Fory: from 0.16.0 before 1.5.0.\u00a0 Users of other language implementations are not affected.\n\nUsers are recommended to upgrade to version 1.5.0, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00799, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:59.477", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "fory", "vendor": "apache", "type": "app", "affected": [">= 0.16.0 and < 1.5.0"], "fixed": "1.5.0", "safe": "before 0.16.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fory || rpm -q fory || fory --version"}, {"label": "2. UPGRADE to 1.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.16.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fory\nsudo apt install fory=<VERSION_BEFORE_0.16.0>\nsudo apt-mark hold fory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fory\nsudo dnf downgrade fory-<VERSION_BEFORE_0.16.0>\nsudo dnf versionlock add fory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71559"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/f28bw002p32yt723rvv3dcwdkljys8r3"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56133, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69152", "publisher": "GitHub, Inc.", "title": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix", "summary": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00647, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:45.953", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "brace-expansion", "vendor": "juliangruber", "type": "app", "affected": ["< 1.1.18", ">= 2.0.0 and < 2.1.4", ">= 3.0.0 and < 3.0.6", ">= 4.0.0 and < 5.0.9"], "fixed": "1.1.18, 2.1.4, 3.0.6, 5.0.9", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls brace-expansion"}, {"label": "2. UPGRADE to 1.1.18", "cmd": "npm install brace-expansion@\">=1.1.18\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view brace-expansion versions\nnpm install brace-expansion@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"}, {"t": "Patch", "u": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"}, {"t": "Patch", "u": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"}, {"t": "Patch", "u": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"}, {"t": "Patch", "u": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"}, {"t": "Exploit, Mitigation", "u": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"}, {"t": "Exploit, Mitigation", "u": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "brace-expansion", "status": "fixed", "fixed": "1.1.18", "cmd": "npm install brace-expansion@\">=1.1.18\"\nnpm ls brace-expansion", "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895", "note": "vulnerable: < 1.1.18"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "node-brace-expansion", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-brace-expansion", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "nodejs-nodemon", "status": "fixed", "fixed": "nodejs-nodemon-3.1.14-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:52841\nrpm -q nodejs-nodemon", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "nodejs22", "status": "fixed", "fixed": "nodejs22-22.23.1-6.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55541\nrpm -q nodejs22", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rh-podman-desktop", "status": "fixed", "fixed": "rh-podman-desktop-1.1.2-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:57590\nrpm -q rh-podman-desktop", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "nodejs24", "status": "fixed", "fixed": "nodejs24-24.18.0-5.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:58819\nrpm -q nodejs24", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "nodejs-nodemon", "status": "fixed", "fixed": "nodejs-nodemon-3.1.14-3.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:61374\nrpm -q nodejs-nodemon", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10849", "publisher": "Zephyr Project", "title": "The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the ", "summary": "The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in response_json_cb() (subsys/mgmt/hawkbit/hawkbit.c). The buffer is sized to hold the received body bytes but reserves no space for a terminating NUL. When the full response has arrived, the code writes response_data[downloaded_size] = '\\0' \u2014 and whenever the accumulated body length equals the allocation,", "cvss": 8.2, "sev": "HIGH", "epss": 0.00507, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:47.963", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "zephyr", "vendor": "zephyrproject", "type": "os", "affected": [">= 2.4.0 and < 4.5.0"], "fixed": "4.5.0", "safe": "before 2.4.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10849"}, {"t": "Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/commit/59d7ab58d853489e6134081cadb11733730264ac"}, {"t": "Exploit, Patch", "u": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-39h3-7phx-pwhv"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42406, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-39h3-7phx-pwhv", "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-39h3-7phx-pwhv"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48317", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated ", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00942, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:45.930", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": ["<= 7.4.2", "7.4.3 9394", "7.4.3 9396", "7.4.3 9397", "7.4.3 9398"], "fixed": "newer than 7.4.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to newer than 7.4.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48317"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.60643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69257", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSecurity.ts did not normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0.0.1 and ::ffff:169.254.169.254 before checking them against the deny list. Because ipaddr.js reports these addresses as ipv6 while IPv4 CIDR deny-list entries are ipv4, isDeniedIP() skipped the IPv4 CIDR checks. An attacker who cont", "cvss": 8.6, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:00.840", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69257"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/0fc769208395641c1411ccdb9c81416e54802155"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6431"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-c6xh-wv4j-ppv5"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-c6xh-wv4j-ppv5"}], "cwe": ["CWE-918", "CWE-1389"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35989, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-c6xh-wv4j-ppv5", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10059", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller", "summary": "A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00639, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T09:18:13.720", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10059"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49995, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60023", "publisher": "Apache Software Foundation", "title": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\nThis issue affects", "summary": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nDeleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00622, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:58.203", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60023"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/rq3ygd0j9cchkbmh99dqf8624s7r8y49"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49181, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-64958", "publisher": "Apache Software Foundation", "title": "An incomplete fix for\u00a0CVE-2026-50645 means that it is still possible to perform a denial of service attack on ", "summary": "An incomplete fix for\u00a0CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00664, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.350", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64958"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51157, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65432", "publisher": "Apache Software Foundation", "title": "Apache CXF reads a top-level WSDL through its hardened StaxUtils\u00a0path, which disables XML DTDs and external en", "summary": "Apache CXF reads a top-level WSDL through its hardened StaxUtils\u00a0path, which disables XML DTDs and external entities. However, any <wsdl:import>\u00a0or <xsd:import>\u00a0referenced from that top-level WSDL is handed off to WSDL4J, which does not\u00a0disable DOCTYPE declarations or external entities. As a result, the protections applied to the top-level document do not extend to imported documents, leaving imported WSDL/XSD content vulnerable to XML External E", "cvss": 7.5, "sev": "HIGH", "epss": 0.00652, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:30.463", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65432"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50624, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68481", "publisher": "Apache Software Foundation", "title": "In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and Toke", "summary": "In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {\"active\":false}'. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00664, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:28.183", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68481"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/88c0h10yjb2b8201o1km3st71fs2zw2b"}], "cwe": ["CWE-672"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51171, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65548", "publisher": "Patchstack", "title": "Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.", "summary": "Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00789, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.737", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65548"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55795, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70636", "publisher": "VulnCheck", "title": "Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to", "summary": "Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers can send a POST request to the oauth2-credential refresh route with a trailing credential identifier to bypass all authentication and authorization check", "cvss": 7.5, "sev": "HIGH", "epss": 0.00663, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:28.150", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.4"], "fixed": "newer than 3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70636"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51107, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54203", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading ", "summary": "Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL \u201c/.well-known/mta-sts.\u201d, the application responds\n with memory. By repeatedly \nrequesting this endpoint, an attacker can access sensitive \ninformation,\u00a0including user passwords. Exploitation does not require \nauthentication.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting with Ro", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00559, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.070", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54203"}], "cwe": ["CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45824, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69255", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAgent/CSVAgent.ts extracted attacker-controlled CSV data with file.split(',').pop() and interpolated it directly into executable Python as base64_string = \"${base64String}\" before calling Pyodide. The validatePythonCodeForDataFrame() denylist only checked later LLM-generated code and did not ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00602, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:00.570", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69255"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6499"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vmv7-4m6c-3cg5"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vmv7-4m6c-3cg5"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.48145, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-vmv7-4m6c-3cg5", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-vmv7-4m6c-3cg5", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47613", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.750", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47613"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4597, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47614", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.877", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47614"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45971, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47615", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by su", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.997", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47615"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45971, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47616", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause s", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.120", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47616"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45972, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47617", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause s", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.250", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47617"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45971, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47618", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could ", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.367", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47618"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45971, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-46581", "publisher": "Eclipse Foundation", "title": "In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly saniti", "summary": "In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target server. This could allow access to restricted files such as `WEB-INF/web.xml` or `/etc/passwd`.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00556, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T12:18:57.190", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mojarra", "vendor": "eclipse", "type": "app", "affected": [">= 2.3.0 and <= 4.1.13", "5.0.0 milestone1", "5.0.0 milestone2", "5.0.0 milestone3", "5.0.0 milestone4", "5.0.0 milestone5"], "fixed": "newer than 4.1.13", "safe": "before 2.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mojarra || rpm -q mojarra || mojarra --version"}, {"label": "2. UPGRADE to newer than 4.1.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mojarra"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mojarra"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mojarra\nsudo apt install mojarra=<VERSION_BEFORE_2.3.0>\nsudo apt-mark hold mojarra"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mojarra\nsudo dnf downgrade mojarra-<VERSION_BEFORE_2.3.0>\nsudo dnf versionlock add mojarra"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46581"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/160"}, {"t": "Exploit, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/544"}, {"t": "Exploit, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/544"}], "cwe": ["CWE-22", "CWE-94", "CWE-641"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "mojarra", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mojarra", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48911", "publisher": "Apache Software Foundation", "title": "Insufficient Verification of Data Authenticity vulnerability in Apache Answer.\n\nThis issue affects Apache Answ", "summary": "Insufficient Verification of Data Authenticity vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nA missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00575, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:57.100", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48911"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/mrlwtdnhqqgfbchjgq6rffkz67o8wyv8"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46725, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-57818", "publisher": "Apache Software Foundation", "title": "A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple t", "summary": "A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:27.373", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57818"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/7q08mz8bcbosp25wok7gr537zlp15mfz"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39874, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-12605", "publisher": "Eclipse Foundation", "title": "In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admi", "summary": "In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authenticated into the Admin Console -\\> full unauthenticated takeover of Eclipse GlassFish domain until the token expires.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:20.887", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "glassfish", "vendor": "eclipse", "type": "app", "affected": [">= 8.0.0 and < 8.0.4"], "fixed": "8.0.4", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy glassfish || rpm -q glassfish || glassfish --version"}, {"label": "2. UPGRADE to 8.0.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade glassfish"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade glassfish"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison glassfish\nsudo apt install glassfish=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold glassfish"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list glassfish\nsudo dnf downgrade glassfish-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add glassfish"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12605"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/127"}, {"t": "Exploit, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/445"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.36505, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9390", "publisher": "CPANSec", "title": "XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup.\n\nverify() and _get_signed_xml() in ", "summary": "XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup.\n\nverify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions by concatenating the SignedInfo/Reference/@URI value read from the document being verified. The value is neither escaped nor checked against the NCName grammar that XML requires of an ID, so a URI containing a single quote closes the string literal in the generated expression and appends arbitrary XP", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00505, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:30.983", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "\\", "vendor": "xml\\", "type": "app", "affected": ["< 0.71"], "fixed": "0.71", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy  || rpm -q  ||  --version"}, {"label": "2. UPGRADE to 0.71 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade "}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade "}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9390"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-XML-Sig/commit/69ad2b421118fadd33d57f50b110b8d161e8fef5.patch"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-XML-Sig/commit/a85aad21aa767ac1c158bbfc19447683941ab376.patch"}], "cwe": ["CWE-643", "CWE-1287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42294, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18733", "publisher": "AMZN", "title": "A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow rem", "summary": "A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the non_interactive parameter to true, bypassing the human consent gate.\n\n\n\nTo remediate this issue, users should upgrade to version 0.8.0.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:37.963", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18733"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4661, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18667", "publisher": "Tenable Network Security, Inc.", "title": "A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by i", "summary": "A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00718, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T23:16:45.590", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18667"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.53335, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15307", "publisher": "Django Software Foundation", "title": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\nGeoDjango spatial lookups optimistic", "summary": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\nGeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a spatial lookup against a `GeometryField` or `RasterField` reaches this constructor, including untrusted input, for example a spatial-field filter submitted through the Django admin changelist query st", "cvss": 8.8, "sev": "HIGH", "epss": 0.01134, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:46.127", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "django", "vendor": "djangoproject", "type": "app", "affected": ["< 5.2.17", ">= 6.0 and < 6.0.8"], "fixed": "5.2.17, 6.0.8", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy django || rpm -q django || django --version"}, {"label": "2. UPGRADE to 5.2.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade django"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade django"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison django\nsudo apt install django=<VERSION_BEFORE_6.0>\nsudo apt-mark hold django"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list django\nsudo dnf downgrade django-<VERSION_BEFORE_6.0>\nsudo dnf versionlock add django"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15307"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.djangoproject.com/en/dev/releases/security/"}, {"t": "Patch", "u": "https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e"}, {"t": "Patch", "u": "https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa"}, {"t": "Patch", "u": "https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6"}, {"t": "Patch", "u": "https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520"}, {"t": "Vendor Advisory", "u": "https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"}], "cwe": ["CWE-73", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.66232, "pinned": false, "mentions": [{"src": "Django Weblog", "group": "ecosystem", "title": "Django security releases issued: 6.1.2, 6.0.9, and 5.2.18", "url": "https://www.djangoproject.com/weblog/2026/oct/06/security-releases/", "date": "2026-10-06"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "Django", "status": "fixed", "fixed": "5.2.17", "cmd": "pip install --upgrade \"Django>=5.2.17\"\npip show Django", "url": "https://github.com/advisories/GHSA-wvqv-fj8w-qmhm", "note": "vulnerable: < 5.2.17"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "python-django", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-django", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "py3-django", "status": "fixed", "fixed": "py3-django-5.2.17-r0", "cmd": "apk add --upgrade py3-django\napk info -v py3-django", "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-24255", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could ca", "summary": "NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00545, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.070", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24255"}], "cwe": ["CWE-1023"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.44984, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-0163", "publisher": "Google Devices", "title": "In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free", "summary": "In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00382, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:39.213", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "android", "vendor": "google", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0163"}, {"t": "Vendor Advisory", "u": "https://source.android.com/docs/security/bulletin/pixel/2026/2026-08-01"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31102, "pinned": false, "pocs": [{"kind": "poc", "name": "sentinel-aidefense/CVE-2026-0163-EXP (1 stars)", "url": "https://github.com/sentinel-aidefense/CVE-2026-0163-EXP", "stars": 1}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67623", "publisher": "VulnCheck", "title": "Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arb", "summary": "Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook execution. Attackers can distribute or create a crafted repository containing a malicious fsmonitor entry to achieve arbitrary command execution with the vict", "cvss": 8.8, "sev": "HIGH", "epss": 0.01059, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T14:17:10.047", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67623"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.64249, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/mistralai/mistral-vibe/issues/942", "url": "https://github.com/mistralai/mistral-vibe/issues/942"}, {"kind": "writeup", "name": "github.com/mistralai/mistral-vibe/pull/962", "url": "https://github.com/mistralai/mistral-vibe/pull/962"}, {"kind": "writeup", "name": "therealcoiffeur.com/c111011.html", "url": "https://therealcoiffeur.com/c111011.html"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-7557", "publisher": "Progress Software Corporation", "title": "An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progres", "summary": "An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affects deployments with SAML single sign-on enabled.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00462, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:09.437", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7557"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39123, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-20263", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow", "summary": "A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow t", "cvss": 8.6, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:47.310", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20263"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd"}], "cwe": ["CWE-388"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46649, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19034", "publisher": "VulDB", "title": "A vulnerability was determined in Shibby Tomato 1.28.0000", "summary": "A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_stop of the file /tmp/qoslimittc_stop.sh. Executing a manipulation of the argument wan_iface can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03178, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T11:16:29.777", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19034"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.87975, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19035", "publisher": "VulDB", "title": "A vulnerability was identified in Shibby Tomato 1.28.0000", "summary": "A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03178, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:27.103", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19035"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.87975, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63687", "publisher": "Apache Software Foundation", "title": "Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter", "summary": "Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose client_secret is known or compromised) can thereby substitute the code_challenge, code_challenge_method, nonce, and state values that were set in the outer HTTP request, undermining PKCE integrity and OpenID Connec", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00282, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:27.843", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63687"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/drcq4chmt0btx86f17o47j17r378hzpw"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.19666, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65583", "publisher": "Apache Software Foundation", "title": "Apache CXF\u2019s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required", "summary": "Apache CXF\u2019s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00279, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:27.953", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "cxf", "vendor": "apache", "type": "app", "affected": ["< 3.6.12", ">= 4.0.0 and < 4.1.8", ">= 4.2.0 and < 4.2.3"], "fixed": "3.6.12, 4.1.8, 4.2.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cxf || rpm -q cxf || cxf --version"}, {"label": "2. UPGRADE to 3.6.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cxf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cxf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison cxf\nsudo apt install cxf=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold cxf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list cxf\nsudo dnf downgrade cxf-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add cxf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65583"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.19289, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19036", "publisher": "VulDB", "title": "A security flaw has been discovered in Shibby Tomato 1.28.0000", "summary": "A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This project is superseded by FreshTomato.", "cvss": 7.2, "sev": "HIGH", "epss": 0.03178, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:17:27.457", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19036"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.87976, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-34501", "publisher": "Apache Software Foundation", "title": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.\n\nThis issue affects ", "summary": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.773", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "apr-util", "vendor": "apache", "type": "app", "affected": [">= 1.6.0 and < 1.6.4"], "fixed": "1.6.4", "safe": "before 1.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apr-util || rpm -q apr-util || apr-util --version"}, {"label": "2. UPGRADE to 1.6.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apr-util"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison apr-util\nsudo apt install apr-util=<VERSION_BEFORE_1.6.0>\nsudo apt-mark hold apr-util"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list apr-util\nsudo dnf downgrade apr-util-<VERSION_BEFORE_1.6.0>\nsudo dnf versionlock add apr-util"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34501"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/o8h6c7cq86fplxlnry6c3rn9x0ovq8mv"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4255, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3892 (important): apr-util", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3892.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-1+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-1+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-3+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-3+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.3-23.el10_2.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66392\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-9.el8_10.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69113\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-23.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66341\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "apr-util", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "apr-util", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2115", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-34501.html", "note": "ALAS2023-2026-2115"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3892", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-34501.html", "note": "ALAS2-2026-3892"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-34502", "publisher": "Apache Software Foundation", "title": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client\n\nThis issue affec", "summary": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client\n\nThis issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.920", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "apr-util", "vendor": "apache", "type": "app", "affected": [">= 1.3.0 and <= 1.6.3"], "fixed": "newer than 1.6.3", "safe": "before 1.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apr-util || rpm -q apr-util || apr-util --version"}, {"label": "2. UPGRADE to newer than 1.6.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apr-util"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison apr-util\nsudo apt install apr-util=<VERSION_BEFORE_1.3.0>\nsudo apt-mark hold apr-util"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list apr-util\nsudo dnf downgrade apr-util-<VERSION_BEFORE_1.3.0>\nsudo dnf versionlock add apr-util"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34502"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4255, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3892 (important): apr-util", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3892.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-1+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-1+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "apr-util", "status": "fixed", "fixed": "1.6.3-3+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade apr-util\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' apr-util)\" ge \"1.6.3-3+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.3-23.el10_2.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66392\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-9.el8_10.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69113\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.1-23.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66341\nrpm -q apr-util", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "apr-util", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "apr-util", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "apr-util", "status": "fixed", "fixed": "apr-util-1.6.4-r0", "cmd": "apk add --upgrade apr-util\napk info -v apr-util", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2115", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-34502.html", "note": "ALAS2023-2026-2115"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3892", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-34502.html", "note": "ALAS2-2026-3892"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53977", "publisher": "VulnCheck", "title": "OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attacker", "summary": "OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler chain. Attackers can exploit the route registration order in bootstrap-runtime.js to reach the shutdown handler before auth middleware executes, causing den", "cvss": 7.5, "sev": "HIGH", "epss": 0.00967, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:43.483", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53977"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61467, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53983", "publisher": "VulnCheck", "title": "Ground Station prior to\u00a00.6.0\u00a0contains an unauthenticated blind server-side request forgery vulnerability in t", "summary": "Ground Station prior to\u00a00.6.0\u00a0contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication enforcement and a wildcard CORS policy, the", "cvss": 8.6, "sev": "HIGH", "epss": 0.00574, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:42.120", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53983"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46681, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62918", "publisher": "Microsoft Corporation", "title": "Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform", "summary": "Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00495, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:36.833", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62918"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62918"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.41625, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66838", "publisher": "EEF", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-e", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimiter with */ and extend the streamed statement with their own clauses, which execute under the connection's role. Ecto exposes the same option through Ecto.Repo.stream/2.\n\nPostgrex appends the", "cvss": 8.2, "sev": "HIGH", "epss": 0.00403, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T13:16:52.960", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "postgrex", "vendor": "elixir-ecto", "type": "app", "affected": [">= 0.19.3 and < 0.22.4"], "fixed": "0.22.4", "safe": "before 0.19.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy postgrex || rpm -q postgrex || postgrex --version"}, {"label": "2. UPGRADE to 0.22.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade postgrex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade postgrex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.19.3 (Debian / Ubuntu)", "cmd": "apt-cache madison postgrex\nsudo apt install postgrex=<VERSION_BEFORE_0.19.3>\nsudo apt-mark hold postgrex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list postgrex\nsudo dnf downgrade postgrex-<VERSION_BEFORE_0.19.3>\nsudo dnf versionlock add postgrex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66838"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66838.html"}, {"t": "Exploit, Patch", "u": "https://github.com/elixir-ecto/ecto/security/advisories/GHSA-3gww-3f36-2388"}, {"t": "Patch", "u": "https://github.com/elixir-ecto/postgrex/commit/4011be852c99dc61ddb98cb01aa41e8775a0e3dd"}, {"t": "Patch", "u": "https://github.com/elixir-ecto/postgrex/commit/e1ecba618ddea4cee2556bd6ad9b6285e05f9d3c"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-66838"}, {"t": "Exploit, Patch", "u": "https://github.com/elixir-ecto/ecto/security/advisories/GHSA-3gww-3f36-2388"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33378, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/elixir-ecto/ecto/security/advisories/GHSA-3gww-3f36-2388", "url": "https://github.com/elixir-ecto/ecto/security/advisories/GHSA-3gww-3f36-2388"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67608", "publisher": "VulnCheck", "title": "Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS comma", "summary": "Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php that allows authenticated attackers to execute arbitrary operating system commands by passing an unsanitized pid parameter into an exec() call when the action parameter is set to checkProcess. Attackers can inject malicious OS commands through the pid request parameter to execute arbitrary co", "cvss": 7.2, "sev": "HIGH", "epss": 0.02428, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:27.793", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67608"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.84117, "pinned": false, "pocs": [{"kind": "writeup", "name": "karmainsecurity.com/KIS-2026-15", "url": "https://karmainsecurity.com/KIS-2026-15"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-68584", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-ret", "summary": "SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeading*Transaction, and getBacklinkDoc perform no password check despite protecting the primary getDoc endpoint. Anonymous attackers can retrieve full content of password-protected documents by obtaining internal block IDs from reader-accessible endpoints and calling unprotected content endpoint", "cvss": 8.6, "sev": "HIGH", "epss": 0.00535, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:27.943", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68584"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44327, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-7j72-f6wg-cxw6", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7j72-f6wg-cxw6"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260721020826-2d069dce84a2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260721020826-2d069dce84a2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-7j72-f6wg-cxw6", "note": "vulnerable: < 0.0.0-20260721020826-2d069dce84a2"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69095", "publisher": "VulnCheck", "title": "OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnera", "summary": "OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attackers to read files outside the configured runtimeDir. Attackers can supply directory traversal sequences in the query string to escape the intended directory and read sensitive files accessible to the CGI process.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00928, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:30.343", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69095"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60186, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67599", "publisher": "VulnCheck", "title": "ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticat", "summary": "ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can inject command substitution payloads into the filter parameter to execute arbitrary commands as the webconfig user, and due to extensive NOPASSWD sudo privi", "cvss": 7.2, "sev": "HIGH", "epss": 0.02428, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:28.113", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67599"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.84117, "pinned": false, "pocs": [{"kind": "poc", "name": "LazyTitan33/CVE-2026-67599_ClearOS_RCE (0 stars)", "url": "https://github.com/LazyTitan33/CVE-2026-67599_ClearOS_RCE", "stars": 0}, {"kind": "writeup", "name": "lazytitan.ro/clearos", "url": "https://lazytitan.ro/clearos"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18907", "publisher": "TECNOMobile", "title": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write", "summary": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00906, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T02:16:37.950", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18907"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.59515, "pinned": false, "pocs": [{"kind": "poc", "name": "Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal (0 stars)", "url": "https://github.com/Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71238", "publisher": "TuranSec", "title": "DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/settings.py rather than ", "summary": "DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/settings.py rather than read from an environment variable. Since this key is used for session signing, CSRF token generation, and password reset tokens, anyone who reads the public repository can forge valid session cookies (including for the superadmin account), forge CSRF tokens, and forge password reset tokens, achieving full account takeover.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0044, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.630", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71238"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71268", "publisher": "TuranSec", "title": "OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structure", "summary": "OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes the referenced content to with no validation that file_path stays within the ./core directory. A path-validation function, validate_file_path, exists elsewhere in the codebase (webserver/credentials.py) but is never invoked from compile_program, leaving the sink unprotected.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0058, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.083", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71268"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.4701, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71277", "publisher": "TuranSec", "title": "rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authoriza", "summary": "rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header (e.g. ) satisfies the guard, granting access to every endpoint protected only by this request guard.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0042, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.200", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71277"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35297, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10025", "publisher": "IBM Corporation", "title": "IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (", "summary": "IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00646, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:49.197", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qradar security information and event manager", "vendor": "ibm", "type": "app", "affected": ["7.5.0", "7.5.0 update_pack_1", "7.5.0 update_pack_10", "7.5.0 update_pack_11", "7.5.0 update_pack_12", "7.5.0 update_pack_13", "7.5.0 update_pack_13_interim_fix_01", "7.5.0 update_pack_13_interim_fix_02"], "fixed": null, "safe": "before 7.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qradar-security-information-and-event-manager || rpm -q qradar-security-information-and-event-manager || qradar-security-information-and-event-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison qradar-security-information-and-event-manager\nsudo apt install qradar-security-information-and-event-manager=<VERSION_BEFORE_7.5.0>\nsudo apt-mark hold qradar-security-information-and-event-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list qradar-security-information-and-event-manager\nsudo dnf downgrade qradar-security-information-and-event-manager-<VERSION_BEFORE_7.5.0>\nsudo dnf versionlock add qradar-security-information-and-event-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10025"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282394"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50356, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-7329", "publisher": "Progress Software Corporation", "title": "An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress", "summary": "An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00571, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:09.200", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7329"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.46522, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71319", "publisher": "GitHub, Inc.", "title": "Nuxt is an open-source web development framework for Vue.js", "summary": "Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the Vite HMR endpoint (ws://<host>:<port>/, subprotocol vite-hmr) can call RPC methods, with no token, handshake, or origin check before the channel is est", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00629, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T22:17:08.227", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71319"}], "cwe": ["CWE-94", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.49533, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "@nuxt/devtools", "status": "fixed", "fixed": "3.3.1", "cmd": "npm install @nuxt/devtools@\">=3.3.1\"\nnpm ls @nuxt/devtools", "url": "https://github.com/advisories/GHSA-279x-mwfv-vcqv", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65508", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.", "summary": "Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:14.957", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65508"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3312, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:58:53.133845+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65520", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.", "summary": "Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.607", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65520"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33119, "pinned": false}, {"id": "CVE-2026-65546", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.", "summary": "Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.480", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65546"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33118, "pinned": false}, {"id": "CVE-2026-66447", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.", "summary": "Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.207", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66447"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33132, "pinned": false}, {"id": "CVE-2026-66709", "publisher": "Patchstack", "title": "Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.", "summary": "Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00822, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.927", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66709"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.56919, "pinned": false}, {"id": "CVE-2026-5423", "publisher": "Neo4j", "title": "@neo4j/graphql\u00a0library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decod", "summary": "@neo4j/graphql\u00a0library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription\u00a0connectionParams.\u00a0As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JWT claims (e.g.\u00a0sub,\u00a0roles) in\u00a0connectionParams.jwt\u00a0and have them accepted as authenticated identity for the purposes of\u00a0@authentication\u00a0and\u00a0@subscription", "cvss": 8.2, "sev": "HIGH", "epss": 0.00586, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:44.430", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5423"}], "cwe": ["CWE-302"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.47313, "pinned": false}, {"id": "CVE-2026-43629", "publisher": "VulnCheck", "title": "llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restor", "summary": "llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the state_read_data() function computes write size without overflow checking, allowing attackers with write access to the slot_save_path directory to corrupt heap memory. Attackers can craft malicious state files where cell_count multiplication overflows or exceeds tensor buffer allocation to write attacker-controlled bytes p", "cvss": 8.1, "sev": "HIGH", "epss": 0.00698, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:05.917", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b4882 and <= b9058"], "fixed": "newer than b9058", "safe": "before b4882", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b9058 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b4882 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b4882>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b4882>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43629"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Mitigation, Patch", "u": "https://www.vulncheck.com/advisories/llama-cpp-b4882-b9058-buffer-overflow-in-kv-cache-state-restore"}], "cwe": ["CWE-190", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52585, "pinned": false}, {"id": "CVE-2026-48088", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route `POST /api/tenants/{tenantId}/staff/{staffId}/crypto` accepts and stores attacker-controlled ML-KEM-768 public keys against any tenant on the platform without authentication. The handler logs an \"Unauthorized crypto key storage attempt\" warning when neither a session nor a registration cookie is present, th", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00377, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.893", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48088"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30457, "pinned": false}, {"id": "CVE-2026-72713", "publisher": "VulnCheck", "title": "XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or d", "summary": "XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00835, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:23.717", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72713"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.57286, "pinned": false}, {"id": "CVE-2026-73090", "publisher": "GitHub, Inc.", "title": "PeerTube is an ActivityPub-federated video streaming platform", "summary": "PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id, allowing a malicious federated server to rewrite another server's video metadata, visibility, media file, and HLS URLs. This issue is fixed in version 8.2.2.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:26.210", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73090"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32516, "pinned": false}, {"id": "CVE-2026-18108", "publisher": "CPANSec", "title": "Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accep", "summary": "Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature.\n\n_verify_encrypted_assertion decrypts the EncryptedAssertion and returns it as verified when it carries no signature, via \"return $xml unless $xpath->exists('dsig:Signature', $assert);\". The signature check and the trust anchor check that follow run only when a signatu", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00311, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:25.157", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "net\\", "vendor": "timlegge", "type": "app", "affected": ["< 0.86"], "fixed": "0.86", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy net || rpm -q net || net --version"}, {"label": "2. UPGRADE to 0.86 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18108"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-Net-SAML2/commit/d916468586404518b8cf3c78dbd001cc1f1046a7.patch"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22795, "pinned": false}, {"id": "CVE-2026-15314", "publisher": "TPLink", "title": "Tapo P110 v1\nsmart Wi-Fi Plug contains an improper boundary validation vulnerability in the\nhandling of authen", "summary": "Tapo P110 v1\nsmart Wi-Fi Plug contains an improper boundary validation vulnerability in the\nhandling of authenticated HTTP request bodies due to insufficient input\nvalidation before memory copy operations. This may lead to buffer overflow condition,\ncausing the web service process to crash.\n\n\n\n\n\nSuccessful exploitation\nmay cause the web service process to stop responding or restart, resulting in a\ndenial-of-service condition.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00759, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:46.313", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "tapo p110 firmware", "vendor": "tp-link", "type": "os", "affected": ["< 1.1.4"], "fixed": "1.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15314"}, {"t": "Vendor Advisory", "u": "https://www.tp-link.com/us/support/faq/5220/"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54774, "pinned": false}, {"id": "CVE-2026-58067", "publisher": "HackerOne", "title": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory ", "summary": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:56.333", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58067"}], "cwe": ["CWE-789"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37896, "pinned": false}, {"id": "CVE-2026-18895", "publisher": "VulDB", "title": "A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535", "summary": "A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T02:16:37.403", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18895"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.56345, "pinned": false}, {"id": "CVE-2026-18897", "publisher": "VulDB", "title": "A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535", "summary": "A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T02:16:37.773", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18897"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.56343, "pinned": false}, {"id": "CVE-2026-18898", "publisher": "VulDB", "title": "A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306", "summary": "A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T04:17:16.790", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18898"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.56345, "pinned": false}, {"id": "CVE-2026-49004", "publisher": "ZTE Corporation", "title": "The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection", "summary": "The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing local attackers to bypass Android's permission sandbox and gain full root access.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.01197, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:37.333", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49004"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "P", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.67883, "pinned": false}, {"id": "CVE-2026-25703", "publisher": "SUSE", "title": "NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API\u00a0due to missing aut", "summary": "NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API\u00a0due to missing authentication and cached data containing sensitive information.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00804, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T10:17:27.300", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25703"}], "cwe": ["CWE-202", "CWE-306", "CWE-524"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.56311, "pocs": [{"kind": "nuclei", "name": "NeuVector - Information Disclosure", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25703.yaml"}], "pinned": false}, {"id": "CVE-2026-60009", "publisher": "Eclipse Foundation", "title": "In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload", "summary": "In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart `uri` field and calls `fs.move(tmp, target, { overwrite: true })` with no workspace confinement and no authentication. In browser (non-Electron) deployments the connection token is enforced only on WebSocket upgrades; the HTTP", "cvss": 8.8, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:25.363", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "theia", "vendor": "eclipse", "type": "app", "affected": ["< 1.74.0"], "fixed": "1.74.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy theia || rpm -q theia || theia --version"}, {"label": "2. UPGRADE to 1.74.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade theia"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade theia"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60009"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/177"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/595"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/595"}], "cwe": ["CWE-22", "CWE-73", "CWE-306", "CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.37625, "pinned": false}, {"id": "CVE-2026-9195", "publisher": "Progress Software Corporation", "title": "A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.", "summary": "A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perform privileged actions on the administrator's behalf.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00654, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:10.313", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9195"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-22", "CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.50709, "pinned": false}, {"id": "CVE-2026-17623", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary command", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00794, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:44.663", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17623"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282147"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55947, "pinned": false}, {"id": "CVE-2026-20268", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20268 are related to issues with improper restriction of operations within the bounds of a memory buffer that are ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:47.830", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20268"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39515, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco IOS XE Software Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Security%20Hardening%20Release:%20August%202026%26vs_k=1", "date": "2026-10-02"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20269", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20269 are related to issues with improper control of a resource through its lifetime that are grouped under the Co", "cvss": 8.6, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:48.070", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20269"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-664"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39515, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco IOS XE Software Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Security%20Hardening%20Release:%20August%202026%26vs_k=1", "date": "2026-10-02"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20270", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20270 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) Pil", "cvss": 8.6, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:48.340", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20270"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-682"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39515, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco IOS XE Software Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Security%20Hardening%20Release:%20August%202026%26vs_k=1", "date": "2026-10-02"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20271", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20271 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumer", "cvss": 8.6, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:48.810", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20271"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-691"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39513, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco IOS XE Software Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Security%20Hardening%20Release:%20August%202026%26vs_k=1", "date": "2026-10-02"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20273", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20273 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (C", "cvss": 8.6, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:49.290", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20273"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39514, "pinned": false}, {"id": "CVE-2026-20303", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE)", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00487, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:50.513", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20303"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.4099, "pinned": false}, {"id": "CVE-2026-66881", "publisher": "EEF", "title": "Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a", "summary": "Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path.\n\nA .livemd notebook can declare file_entries metadata, each entry carrying a name. Every path that creates a file entry through the user interface validates that name with Livebook.Notebook.validate_file_entry_name/2, which requires a flat filename of alphanumerics, dashes, unde", "cvss": 8.1, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:12.600", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "livebook", "vendor": "livebook", "type": "app", "affected": [">= 0.11.0 and < 0.18.7", ">= 0.19.0 and < 0.19.9"], "fixed": "0.18.7, 0.19.9", "safe": "before 0.11.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy livebook || rpm -q livebook || livebook --version"}, {"label": "2. UPGRADE to 0.18.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade livebook"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade livebook"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.11.0 (Debian / Ubuntu)", "cmd": "apt-cache madison livebook\nsudo apt install livebook=<VERSION_BEFORE_0.11.0>\nsudo apt-mark hold livebook"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list livebook\nsudo dnf downgrade livebook-<VERSION_BEFORE_0.11.0>\nsudo dnf versionlock add livebook"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66881"}, {"t": "Vendor Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66881.html"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/1443dd23df6e7b9203b6797f0695a807aeb81dde"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/50f86982ebf36c22abeb379b55ec0f2859c83bb9"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/acf4cb8c0c79b89c795b180f061be7de2d8b5aa9"}, {"t": "Exploit, Patch", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-r4h8-2xpq-v48g"}, {"t": "Exploit, Patch", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-r4h8-2xpq-v48g"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.4854, "pinned": false}, {"id": "CVE-2026-68746", "publisher": "EEF", "title": "Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network", "summary": "Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams.\n\nA Livebook Agent or App Server connected to Livebook Teams caches the identifier of the deployment group it belongs to, and resolves that identifier against a locally cached list of deployment groups on every request in order to decide wheth", "cvss": 8.8, "sev": "HIGH", "epss": 0.008, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:14.393", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "livebook", "vendor": "livebook", "type": "app", "affected": [">= 0.19.7 and < 0.19.9"], "fixed": "0.19.9", "safe": "before 0.19.7", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy livebook || rpm -q livebook || livebook --version"}, {"label": "2. UPGRADE to 0.19.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade livebook"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade livebook"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.19.7 (Debian / Ubuntu)", "cmd": "apt-cache madison livebook\nsudo apt install livebook=<VERSION_BEFORE_0.19.7>\nsudo apt-mark hold livebook"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list livebook\nsudo dnf downgrade livebook-<VERSION_BEFORE_0.19.7>\nsudo dnf versionlock add livebook"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68746"}, {"t": "Vendor Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-68746.html"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/2d3a2c710c880abd24a2bc888d3cf5239d98cf72"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/d374e90647edbb00286bfee9182c0161d29a8e07"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/d6d0dfa746b172540442852f74de4a9deacc433b"}, {"t": "Vendor Advisory", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-74j5-6grg-g6wj"}], "cwe": ["CWE-636"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.56138, "pinned": false}, {"id": "CVE-2026-15996", "publisher": "GitHub, Inc. (Products Only)", "title": "A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated a", "summary": "A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameters. Because request parameters were parsed before routing and authentication, any POST endpoint could be used to trigger the condition, which could render", "cvss": 7.5, "sev": "HIGH", "epss": 0.00766, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T21:16:57.250", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "enterprise server", "vendor": "github", "type": "app", "affected": ["< 3.17.16", ">= 3.18.0 and < 3.18.10", ">= 3.19.0 and < 3.19.7", ">= 3.20.0 and < 3.20.3"], "fixed": "3.17.16, 3.18.10, 3.19.7, 3.20.3", "safe": "before 3.18.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-server || rpm -q enterprise-server || enterprise-server --version"}, {"label": "2. UPGRADE to 3.17.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade enterprise-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade enterprise-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.18.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-server\nsudo apt install enterprise-server=<VERSION_BEFORE_3.18.0>\nsudo apt-mark hold enterprise-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-server\nsudo dnf downgrade enterprise-server-<VERSION_BEFORE_3.18.0>\nsudo dnf versionlock add enterprise-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15996"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55024, "pinned": false}, {"id": "CVE-2026-67866", "publisher": "MITRE", "title": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi", "summary": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path", "cvss": 7.5, "sev": "HIGH", "epss": 0.0082, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.887", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67866"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.56861, "pinned": false}, {"id": "CVE-2026-67867", "publisher": "MITRE", "title": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi", "summary": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data", "cvss": 7.5, "sev": "HIGH", "epss": 0.0082, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.997", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67867"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.56862, "pinned": false}, {"id": "CVE-2026-67871", "publisher": "MITRE", "title": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi", "summary": "Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt_helper_internal.c, and toolkit_test_server", "cvss": 7.5, "sev": "HIGH", "epss": 0.0082, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:54.160", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67871"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.56862, "pinned": false}, {"id": "CVE-2026-67872", "publisher": "MITRE", "title": "An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored", "summary": "An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling", "cvss": 7.5, "sev": "HIGH", "epss": 0.00759, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:54.267", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67872"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.54765, "pinned": false}, {"id": "CVE-2026-68749", "publisher": "EEF", "title": "Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows ", "summary": "Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 matches the property name with an unbounded greedy [-\\w]+ followed by a mandatory :, so a long run of word characters not followed by a colon makes the engine give back one cha", "cvss": 7.5, "sev": "HIGH", "epss": 0.00802, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:51.720", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.3"], "fixed": "1.5.3", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68749"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-68749.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/4f4bd9eb254881462c0461fbab74b29188c2c133"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-68749"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56216, "pinned": false}, {"id": "CVE-2026-68750", "publisher": "EEF", "title": "Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an ", "summary": "Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU and memory via a flat run of sibling elements in sanitized HTML. The list clause of HtmlSanitizeEx.Traverser.traverse/2 recurses on the tail of a sibling list and then evaluates List.flatten([head] ++ tail) over the already flattened result, so every one of n siblings copies and re-wal", "cvss": 7.5, "sev": "HIGH", "epss": 0.00802, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:51.907", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.3"], "fixed": "1.5.3", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68750"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-68750.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/9f5ccedbed230930813f992a1e6906fcf485981e"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-68750"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56216, "pinned": false}, {"id": "CVE-2026-19149", "publisher": "Chrome", "title": "Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentia", "summary": "Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.113", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19149"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26854, "pinned": false}, {"id": "CVE-2026-43631", "publisher": "VulnCheck", "title": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer o", "summary": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending requests to affected endpoints while the server transitions to sleep mode, causing concurrent worker threads to dereference a freed vocab pointer that can ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:06.200", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b7492 and <= b9060"], "fixed": "newer than b9060", "safe": "before b7492", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b9060 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b7492 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b7492>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b7492>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43631"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-rce-via-llama-server"}], "cwe": ["CWE-362", "CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46624, "pinned": false}, {"id": "CVE-2026-62857", "publisher": "GitHub, Inc.", "title": "Fedify is a TypeScript library for building federated server apps powered by ActivityPub", "summary": "Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and 2.3 maintenance lines, getNodeInfo() follows an attacker-controlled links[].href value from /.well-known/nodeinfo without scheme, redirect, or private-address validation, allowing requests to loopback, link-local, cloud metadata, and private-network services and returning their response bo", "cvss": 8.8, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:12.127", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62857"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3542, "pinned": false}, {"id": "CVE-2026-64665", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user, potentially including a super admin, without knowing that user's password, because the application matched OAuth identities to accounts by email address alone. Exploitation requires OAuth to be", "cvss": 8.1, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:14.103", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64665"}], "cwe": ["CWE-287", "CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.44649, "pinned": false}, {"id": "CVE-2026-71476", "publisher": "GitHub, Inc.", "title": "Nx is a monorepo solution for TypeScript and polyglot codebases", "summary": "Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path (MITM) remote cache server can return a crafted tar archive whose entries escape the cache directory and write to arbitrary locations on the machine running Nx, which can be escalated to remote code", "cvss": 8.7, "sev": "HIGH", "epss": 0.00865, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.603", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71476"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.58267, "pinned": false}, {"id": "CVE-2026-54209", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by \ni", "summary": "Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by \nincluding the string \"(editini)\" in the file path, writing the new \npassword to the specified \"Archive.ini\" file. However, the application \ndoes not verify that the provided path actually refers to an \n\"Archive.ini\" file. If an attacker specifies a different file with \nexcessive size, a buffer overflow occurs. This vulnerability allows an ", "cvss": 8.9, "sev": "HIGH", "epss": 0.0041, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.887", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54209"}], "cwe": ["CWE-125"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34152, "pinned": false}, {"id": "CVE-2026-54218", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox", "summary": "Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various \nfiles using only obfuscation. Any user with access to the server\u2019s file \nsystem, or who can otherwise extract files from the server (see \nvulnerability\u00a0\u201cRandom File Read\u201d), can potentially obtain affected \nusers\u2019 passwords.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting wit", "cvss": 8.8, "sev": "HIGH", "epss": 0.00458, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:59.153", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54218"}], "cwe": ["CWE-321"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38789, "pinned": false}, {"id": "CVE-2026-77994", "publisher": "Joomla! Project", "title": "Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension ", "summary": "Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00386, "kev": false, "added": "2026-08-24", "pub": "2026-08-24T08:16:33.807", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77994"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3145, "pinned": false}, {"id": "CVE-2026-68586", "publisher": "VulnCheck", "title": "SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content", "summary": "SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc). While the corresponding backlink list endpoints filter publish-forbidden documents, the content endpoints (gated only by CheckAuth) do not. A publish-mode reader \u2014 including an anonymous reader when publish Basic Auth is disabled \u2014 can call these endpoints directly with ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.237", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68586"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3408, "pinned": false}, {"id": "CVE-2026-68587", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransacti", "summary": "SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints that return rendered block DOM without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a heading block ID to read full rendered content of publish-disabled documents that should be restricted.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.397", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68587"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3488, "pinned": false}, {"id": "CVE-2026-69185", "publisher": "GitHub, Inc.", "title": "Socket.IO enables bidirectional and low-latency communication for every platform", "summary": "Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This vulnerability is fixed in 4.2.7, 3.4.5, and 3.3.6.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:29.797", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69185"}], "cwe": ["CWE-20", "CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49567, "pinned": false}, {"id": "CVE-2026-69192", "publisher": "GitHub, Inc.", "title": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript", "summary": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() o", "cvss": 7.7, "sev": "HIGH", "epss": 0.0062, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:29.960", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49046, "pinned": false}, {"id": "CVE-2026-58073", "publisher": "HackerOne", "title": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a manage", "summary": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.00322, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:56.930", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58073"}], "cwe": ["CWE-288"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24037, "pinned": false}, {"id": "CVE-2026-69262", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, `DELETE /api/v1/chatflows/:id` authorized requests with checkAnyPermission('chatflows:delete,agentflows:delete'), so possession of either permission was sufficient to reach the delete path. The delete logic then resolved the target record only by id and workspaceId and did not validate the target resource type, allowing a caller with only agen", "cvss": 8.1, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:17:01.547", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69262"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/2f528ceced74afaa95fc7a282965e7788796448b"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6445"}, {"t": "Patch, Release Notes", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-p5w8-m249-4r4v"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-p5w8-m249-4r4v"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.43671, "pinned": false}, {"id": "CVE-2026-18830", "publisher": "AMZN", "title": "Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to ", "summary": "Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00507, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:49.420", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18830"}], "cwe": ["CWE-1287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42385, "pinned": false}, {"id": "CVE-2026-70473", "publisher": "GitHub, Inc.", "title": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows", "summary": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-history returns the entire server-wide upsert history instead of being scoped to the requesting user, tenant, or workspace. The response can exceed 100MB and includes sensitive configuration data, including Vector Store settings such as Qdrant Server URL and collection name. The observed behavior indicates", "cvss": 8.5, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.830", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70473"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/d81483b70c997ddf981acc9c49fbd9a02fa345cd"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6170"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fr6g-7cq8-fg82"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fr6g-7cq8-fg82"}], "cwe": ["CWE-200", "CWE-202", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.38232, "pinned": false}, {"id": "CVE-2026-70619", "publisher": "VulnCheck", "title": "Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-ad", "summary": "Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing a", "cvss": 8.8, "sev": "HIGH", "epss": 0.00657, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:17.573", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70619"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.50844, "pinned": false}, {"id": "CVE-2026-71252", "publisher": "TuranSec", "title": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/tone", "summary": "toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed INSERT/UPDATE/DELETE database operations with no authentication or authorization check, while access control was enforced only in listing views.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00511, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:28.383", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71252"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42714, "pinned": false}, {"id": "CVE-2026-71270", "publisher": "TuranSec", "title": "Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the Custo", "summary": "Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints (html/pdf, file/pdf, markdown/pdf).", "cvss": 8.6, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.327", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71270"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36047, "pinned": false}, {"id": "CVE-2026-8709", "publisher": "Progress Software Corporation", "title": "An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic ", "summary": "An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00463, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:09.820", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8709"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.39207, "pinned": false}, {"id": "CVE-2026-9193", "publisher": "Progress Software Corporation", "title": "An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 1", "summary": "An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00463, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:10.183", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9193"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.39207, "pinned": false}, {"id": "CVE-2026-20200", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack", "summary": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&nbsp;\r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the", "cvss": 8.8, "sev": "HIGH", "epss": 0.00734, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:47.180", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "unified computing system", "vendor": "cisco", "type": "app", "affected": ["4.3\\(1.230097\\)", "4.3\\(1.230124\\)", "4.3\\(1.230138\\)", "4.3\\(2.230207\\)", "4.3\\(2.230270\\)", "4.3\\(2.240002\\)", "4.3\\(3.240022\\)", "4.3\\(3.240043\\)"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-computing-system || rpm -q unified-computing-system || unified-computing-system --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20200"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU"}], "cwe": ["CWE-141"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.53909, "pinned": false}, {"id": "CVE-2026-20267", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) P", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00384, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:47.560", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["16.6.2", "16.6.3", "16.6.4", "16.6.4a", "16.6.4s", "16.6.5", "16.6.5a", "16.6.5b"], "fixed": null, "safe": "before 16.6.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20267"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31331, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco IOS XE Software Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Security%20Hardening%20Release:%20August%202026%26vs_k=1", "date": "2026-10-02"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20304", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20304 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00424, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:50.890", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20304"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.35624, "pinned": false}, {"id": "CVE-2026-20310", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20310 are related to improper link resolution before file access issues that are grouped under the Common Weakness", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00588, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:51.520", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20310"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.47424, "pinned": false}, {"id": "CVE-2026-17632", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code du", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00657, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:28.923", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17632"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.50871, "pinned": false}, {"id": "CVE-2026-18990", "publisher": "VulDB", "title": "A vulnerability was detected in letta-ai LettaBot 0.2.0", "summary": "A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00686, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T03:16:20.930", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18990"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52109, "pinned": false}, {"id": "CVE-2026-16315", "publisher": "OMICRON", "title": "OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the bac", "summary": "OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients.\nAn attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:21.840", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16315"}], "cwe": ["CWE-208"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35084, "pinned": false}, {"id": "CVE-2026-70646", "publisher": "GitHub, Inc.", "title": "aiosend is a synchronous and asynchronous Crypto Pay API client", "summary": "aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will ultimately be rejected, leading to unnecessary CPU and memory consumption. Version 3.0.7 fixes the issue. Some workarounds are available. Restrict reques", "cvss": 7.5, "sev": "HIGH", "epss": 0.00636, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:27.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70646"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49878, "pinned": false}, {"id": "CVE-2026-53985", "publisher": "VulnCheck", "title": "Ground Station prior to 0.6.0\u00a0contains an unauthenticated denial-of-service vulnerability in the Socket.IO ser", "summary": "Ground Station prior to 0.6.0\u00a0contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restart_service command. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication enforcement and a wildcard CORS policy, then emit the s", "cvss": 7.5, "sev": "HIGH", "epss": 0.00707, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:43.620", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53985"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.52908, "pinned": false}, {"id": "CVE-2026-19111", "publisher": "AMZN", "title": "Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon ", "summary": "Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a forged namespace parameter.\n\n\n\nTo remediate this issue, users should upgrade to version 0.8.3.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00519, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.410", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19111"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.43288, "pinned": false}, {"id": "CVE-2026-48086", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN promotes themselves to platform-wide GLOBAL_ADMIN through a single PUT request. The role-update handler accepts the `GLOBAL_ADMIN` enum value from any tenant admin updating their own tenant's staff. No policy check enforces that \"only an existing GLOBAL_ADMIN may grant GLOBAL_ADMIN\", so the schema vali", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00442, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.593", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48086"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.37413, "pinned": false}, {"id": "CVE-2026-63637", "publisher": "GitHub, Inc.", "title": "Dgraph is an open source distributed GraphQL database", "summary": "Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuoteArg in graphql/resolve/query_rewriter.go passes regexp filter strings into generated DQL without quoting or validating the /pattern/flags form, allowing crafted GraphQL query or mutation filters to inject DQL operators, disclose unintended nodes, or expand modification and deletion targets. This issue is fixed in version 25.3.8.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00408, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:12.330", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63637"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33924, "pinned": false}, {"id": "CVE-2026-71488", "publisher": "GitHub, Inc.", "title": "league/commonmark is a PHP library for parsing and rendering CommonMark Markdown", "summary": "league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translate between character positions and byte positions, and the Autolink extension can also copy and validate the remaining line at every URL-like prefix, allo", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.893", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71488"}], "cwe": ["CWE-407", "CWE-1050"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.49549, "pinned": false}, {"id": "CVE-2026-54204", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a \u201cpathnameroot\u201d \nparameter, which ca", "summary": "Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a \u201cpathnameroot\u201d \nparameter, which can be set to network locations using UNC paths (e.g., \n\u201c\\\\Server\\Share\u201d). The server processes these paths without validation, \nresulting in outbound connection attempts to attacker-controlled SMB \nservers. This enables unauthenticated attackers to trigger the server to\n authenticate to arbitrary SMB endpoints, potentially exposing NTLM \na", "cvss": 7.7, "sev": "HIGH", "epss": 0.00569, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.207", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54204"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.46403, "pinned": false}, {"id": "CVE-2026-58072", "publisher": "HackerOne", "title": "A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, whic", "summary": "A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00533, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:56.633", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58072"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.44241, "pinned": false}, {"id": "CVE-2026-70474", "publisher": "GitHub, Inc.", "title": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows", "summary": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up credentials by id alone with no workspaceId filter. The authorize, callback, and refresh handlers query the Credential table by id only; callback and refresh are whitelisted from authentication. This allows any authenticated user to initiate OAuth2 flows against credentials ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.977", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70474"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wch5-xp77-fxg4"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wch5-xp77-fxg4"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.40249, "pinned": false}, {"id": "CVE-2026-18810", "publisher": "VulDB", "title": "A security vulnerability has been detected in H3C NX15 V100R017", "summary": "A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack may be performed from remote. The vendor was contacted early about this disclosure.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00654, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:51.360", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18810"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.50747, "pinned": false}, {"id": "CVE-2026-59675", "publisher": "SUSE", "title": "When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enfor", "summary": "When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is bypassed for requests that pass through the audit copyReqBody path. An unauthenticated attacker can send arbitrarily large request bodies to the public lo", "cvss": 7.5, "sev": "HIGH", "epss": 0.00557, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:34.593", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59675"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.45704, "pinned": false}, {"id": "CVE-2026-10090", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat A", "summary": "A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernetes (ACM). A user with namespace-scoped \"edit\" privileges in an ACM hub namespace can create a Channel resource pointing to a Helm repository they control and a Subscription resource referencing it. The app-subscription controller fetches and applies the Helm chart contents with its own elevated autho", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00577, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T09:18:14.667", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10090"}], "cwe": ["CWE-267"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.46851, "pinned": false}, {"id": "CVE-2026-44945", "publisher": "SUSE", "title": "A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersona", "summary": "A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user\n global role can gain full administrative access to the Rancher control \nplane and transitively to all downstream clusters it manages.\n\nThis issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.0056, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T10:17:27.460", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44945"}], "cwe": ["CWE-441", "CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.45893, "pinned": false}, {"id": "CVE-2026-71255", "publisher": "TuranSec", "title": "nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identifi", "summary": "nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only against the remaining PDU size (res_size_left) and is never validated against the caller-supplied buffers_length parameter.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T12:18:57.727", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71255"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31386, "pinned": false}, {"id": "CVE-2026-70431", "publisher": "Jenkins Project", "title": "Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integra", "summary": "Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00638, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:12.773", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70431"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.49966, "pinned": false}, {"id": "CVE-2026-17624", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00676, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:27.933", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17624"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51681, "pinned": false}, {"id": "CVE-2026-17633", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code du", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00676, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:29.043", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17633"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51682, "pinned": false}, {"id": "CVE-2026-8182", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:43.823", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8182"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.50666, "pinned": false}, {"id": "CVE-2026-8478", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, du", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00632, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:45.043", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8478"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.49649, "pinned": false}, {"id": "CVE-2026-18980", "publisher": "VulDB", "title": "A vulnerability was identified in nearai ironclaw up to 0.29.1", "summary": "A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the patch is a1d7c3ba428ed575900469b207fb5668725f9a71. Applying a patch is advised to resolve this issue.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.02262, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T02:16:41.620", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18980"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": [], "fix": false, "watched": false, "epss_pct": 0.82866, "pinned": false}, {"id": "CVE-2026-18991", "publisher": "VulDB", "title": "A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64", "summary": "A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00615, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T03:16:22.130", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48833, "pinned": false}, {"id": "CVE-2026-16731", "publisher": "OMICRON", "title": "OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the bac", "summary": "OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients.\nAn attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters or inje", "cvss": 8.3, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:22.173", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16731"}], "cwe": ["CWE-208"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37332, "pinned": false}, {"id": "CVE-2026-43632", "publisher": "VulnCheck", "title": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affect", "summary": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/count_tokens) that bypass the task queue and access ctx_server.vocab directly on HTTP worker threads. Attackers can exploit a time-of-check-time-of-use race condition where the main thread destroys and frees vocab after the synchroniz", "cvss": 8.1, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:06.343", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b7492 and <= b9060"], "fixed": "newer than b9060", "safe": "before b7492", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b9060 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b7492 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b7492>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b7492>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43632"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-in-tokenization-endpoints"}], "cwe": ["CWE-367", "CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40213, "pinned": false}, {"id": "CVE-2026-67422", "publisher": "GitHub, Inc.", "title": "pymdown-extensions is a collection of extensions for the Python Markdown library", "summary": "pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways, causing catastrophic backtracking. As a result, a single untrusted Markdown line under 50 bytes rendered with markdown.markdown() in each extension's ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00608, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:21.600", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67422"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.48432, "pinned": false}, {"id": "CVE-2026-9487", "publisher": "CPANSec", "title": "XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID.\n\n_get_signed_xml() in lib/XM", "summary": "XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID.\n\n_get_signed_xml() in lib/XML/Sig.pm, called from verify(), resolves the SignedInfo Reference/@URI to a node with the XPath expression \"//*[@ID='$id']\" and returns the first node of the resulting node set. A document in which two elements share that ID value is accepted: the digest and signature are checked against whichever element comes first in document order, an", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00276, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:31.110", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "\\", "vendor": "xml\\", "type": "app", "affected": ["< 0.71"], "fixed": "0.71", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy  || rpm -q  ||  --version"}, {"label": "2. UPGRADE to 0.71 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade "}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade "}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9487"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-XML-Sig/commit/4976bde5245df69b8e02c6ae061acbd4891cd7f9.patch"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18998, "pinned": false}, {"id": "CVE-2026-61523", "publisher": "VulnCheck", "title": "WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows aut", "summary": "WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no content sanitization. Attackers can save a PHP webshell via the save_droplet handler to a predictable path inside the modules directory, enabling unauthe", "cvss": 7.2, "sev": "HIGH", "epss": 0.01189, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T18:16:40.053", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61523"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.67695, "pinned": false}, {"id": "CVE-2026-46713", "publisher": "GitHub, Inc.", "title": "Misskey is an open source, federated social media platform", "summary": "Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4.", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.0028, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:49.017", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46713"}], "cwe": ["CWE-347"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19395, "pinned": false}, {"id": "CVE-2026-67973", "publisher": "MITRE", "title": "An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via r", "summary": "An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:51.367", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67973"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41081, "pinned": false}, {"id": "CVE-2026-56848", "publisher": "HackerOne", "title": "A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2", "summary": "A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0049, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:56.207", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56848"}], "cwe": ["CWE-416"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41246, "pinned": false}, {"id": "CVE-2026-58071", "publisher": "HackerOne", "title": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied a", "summary": "A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00419, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:56.463", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58071"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35124, "pinned": false}, {"id": "CVE-2026-47619", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system fa", "summary": "NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00772, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.490", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47619"}], "cwe": ["CWE-1357"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55233, "pinned": false}, {"id": "CVE-2026-70472", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled credential parameter and load credentials by id without checking whether that credential belongs to the caller workspace. Route permissions assistants:* only check feature access. The controller passes req.query.credential straight to the service, and the service uses ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00515, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.680", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70472"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/d81483b70c997ddf981acc9c49fbd9a02fa345cd"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6170"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-chm3-vqcf-52rx"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-chm3-vqcf-52rx"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43024, "pinned": false}, {"id": "CVE-2026-16793", "publisher": "Lenovo Group Ltd.", "title": "An improper neutralization of special elements used in an operating system command vulnerability was reported ", "summary": "An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:49.463", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16793"}], "cwe": ["CWE-20", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43225, "pinned": false}, {"id": "CVE-2026-66901", "publisher": "CPANSec", "title": "Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via u", "summary": "Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON.\n\nThe URLs the library requests are read from the credentials JSON, and their hosts were not checked against the universe domain before the request. For an external_account configuration, retrieve_subject_token fetched credential_source.url with headers from the same JSON, and fetch_access_t", "cvss": 7.5, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:37.127", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66901"}], "cwe": ["CWE-201", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.43675, "pinned": false}, {"id": "CVE-2026-71235", "publisher": "TuranSec", "title": "Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed ", "summary": "Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine (re/lua.go) performs no input validation at all and preloads dangerous libraries: db (arbitrary database access), ioutil (file I/O), an HTTP client (SSRF), and filepath (traversal).", "cvss": 8.8, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.247", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71235"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43224, "pinned": false}, {"id": "CVE-2026-71243", "publisher": "TuranSec", "title": "The backmeup npm package assembles shell command strings by directly concatenating its option values (name, so", "summary": "The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination, filter) - e.g. cmd = \"mkdir -p \" + path.join(info.destination, info.name) + \"; \" - and executes the resulting string through a shell via ssh2-exec (locally via child_process, or remotely via SSH when an ssh handle is supplied), rather than using execFile/spawn with an argument array.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:27.247", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71243"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43224, "pinned": false}, {"id": "CVE-2026-61891", "publisher": "Eclipse Foundation", "title": "In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-downlo", "summary": "In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/`, `PUT /files/`) that convert a client-supplied URI directly to a filesystem path and stream the file, without confining it to the workspace or any allow-listed root. In browser (non-Electron) deployments the connection token is enforced only on WebSocket upgrades; the HTTP middleware in `@theia/cor", "cvss": 7.5, "sev": "HIGH", "epss": 0.00533, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T12:18:57.310", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "theia", "vendor": "eclipse", "type": "app", "affected": ["< 1.74.0"], "fixed": "1.74.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy theia || rpm -q theia || theia --version"}, {"label": "2. UPGRADE to 1.74.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade theia"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade theia"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61891"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/176"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/570"}], "cwe": ["CWE-22", "CWE-36", "CWE-200", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44241, "pinned": false}, {"id": "CVE-2026-71288", "publisher": "TuranSec", "title": "Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynami", "summary": "Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into an SQL ORDER BY clause with no allowlist or validation. Since ORDER BY columns cannot be bound via prepared-statement placeholders, this requires an explicit allowlist, which does not exist.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.583", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71288"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45212, "pinned": false}, {"id": "CVE-2026-71291", "publisher": "TuranSec", "title": "Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtensi", "summary": "Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allow_twig flag and a regex checking for , , or ; when true, the raw field value is compiled and rendered via with no sandboxing.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.820", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71291"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45214, "pinned": false}, {"id": "CVE-2026-39923", "publisher": "VulnCheck", "title": "Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated a", "summary": "Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle() method calls PasswordToken::findOrFail() without performing any expiry validation, allowing attackers to bypass the 24-hour token lifetime enforced only during form rendering and change any acc", "cvss": 8.1, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:55.980", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39923"}], "cwe": ["CWE-324"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36021, "pinned": false}, {"id": "CVE-2026-8446", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Prot", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects are configured with auth_type=oauth .", "cvss": 7.5, "sev": "HIGH", "epss": 0.00489, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:55.983", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8446"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282147"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41165, "pinned": false}, {"id": "CVE-2026-55523", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.web_crawl() function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blocks direct loopback and private destinations, its default httpx fallback uses httpx.Client(follow_redirects=True) and does not revalidate intermediate or final redirect targets. An attacker who can influence a U", "cvss": 7.7, "sev": "HIGH", "epss": 0.00468, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:10.690", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55523"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39583, "pinned": false}, {"id": "CVE-2026-19041", "publisher": "VulDB", "title": "A vulnerability has been found in MissionSquad mcp-api up to 1.11.8", "summary": "A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. Upgrading to version 1.11.9 is sufficient to resolve this issue. The identifier of the patch is a40f54d4533ba6618e1749383a245900ee", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.02121, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:36.223", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19041"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": [], "fix": false, "watched": false, "epss_pct": 0.81747, "pinned": false}, {"id": "CVE-2026-65570", "publisher": "Patchstack", "title": "Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.", "summary": "Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.433", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65570"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32656, "pinned": false}, {"id": "CVE-2026-18258", "publisher": "GitLab Inc.", "title": "Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scrip", "summary": "Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are queried against the global model manager instead of the request-scoped queryset", "cvss": 8.8, "sev": "HIGH", "epss": 0.00528, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:37.727", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "escriptorium", "vendor": "escriptorium", "type": "app", "affected": ["<= 26.04.1"], "fixed": "newer than 26.04.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy escriptorium || rpm -q escriptorium || escriptorium --version"}, {"label": "2. UPGRADE to newer than 26.04.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade escriptorium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade escriptorium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18258"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43904, "pinned": false}, {"id": "CVE-2026-19166", "publisher": "Chrome", "title": "Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to pot", "summary": "Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00393, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.037", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19166"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.32301, "pinned": false}, {"id": "CVE-2026-67434", "publisher": "GitHub, Inc.", "title": "PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards", "summary": "PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame report formats. As a result, running PHP_CodeSniffer over untrusted files, for example in a continuous integration pipeline that scans pull requests, or on a developer machine reviewing third par", "cvss": 7.3, "sev": "HIGH", "epss": 0.01063, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:21.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67434"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.64376, "pinned": false}, {"id": "CVE-2026-18692", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with wr", "summary": "An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution of unintended code.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00575, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.317", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "8.0.29, 8.3.8", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 8.0.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18692"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129887"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.46763, "pinned": false}, {"id": "CVE-2026-69089", "publisher": "VulnCheck", "title": "Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsaniti", "summary": "Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to RocketTheme\\Toolbox\\ResourceLocator\\UniformResourceLocator::findResource(). Because the file:// scheme branch only lexically collapses '..' segments without a realpath/containment check, an editor authoring Markdown image syntax with traversal sequences can cause arbitrary image files outside Grav's media sandbox to", "cvss": 7.5, "sev": "HIGH", "epss": 0.00459, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:29.420", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69089"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38828, "pinned": false}, {"id": "CVE-2026-41453", "publisher": "VulnCheck", "title": "Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authent", "summary": "Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrary SQL into a HAVING clause by manipulating the rotten_lead[in] query parameter, which is concatenated without parameterized binding directly into a havingRaw() call in LeadDataGrid.php. Attackers can exploit this flaw using time-based and boolean-based blind injection techniques to extract ", "cvss": 8.8, "sev": "HIGH", "epss": 0.005, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:37.213", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41453"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41932, "pinned": false}, {"id": "CVE-2026-61524", "publisher": "VulnCheck", "title": "WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation ", "summary": "WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file. Attackers can place the malicious archive through the module installation interface, causing the application to extract the webshell into a web-accessible ", "cvss": 7.2, "sev": "HIGH", "epss": 0.01025, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T18:16:40.210", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61524"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.63275, "pinned": false}, {"id": "CVE-2026-18647", "publisher": "VulDB", "title": "A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1", "summary": "A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release ap", "cvss": 7.3, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:37.620", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18647"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39893, "pinned": false}, {"id": "CVE-2026-47746", "publisher": "GitHub, Inc.", "title": "Misskey is an open source, federated social media platform", "summary": "Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing context is not shared between signature verification and subsequent processing, the application may trust information that should not be trusted, resulting in a time-of-check to time-of-use (TOCTOU) flaw. This allo", "cvss": 8.9, "sev": "HIGH", "epss": 0.00282, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:49.447", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47746"}], "cwe": ["CWE-367"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19618, "pinned": false}, {"id": "CVE-2026-58074", "publisher": "HackerOne", "title": "A vulnerability allowing a high-privileged user to execute arbitrary code on the server.", "summary": "A vulnerability allowing a high-privileged user to execute arbitrary code on the server.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00527, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:57.067", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58074"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43827, "pinned": false}, {"id": "CVE-2026-18788", "publisher": "VulDB", "title": "A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0", "summary": "A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products", "cvss": 7.3, "sev": "HIGH", "epss": 0.005, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:48.730", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18788"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41924, "pinned": false}, {"id": "CVE-2026-47620", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA ma", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00415, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.610", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.2.0"], "fixed": "newer than 1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47620"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.34708, "pinned": false}, {"id": "CVE-2026-47621", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA ma", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00415, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.733", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.1.0"], "fixed": "newer than 1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47621"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.34709, "pinned": false}, {"id": "CVE-2026-70377", "publisher": "TuranSec", "title": "imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as", "summary": "imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:41.830", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70377"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38931, "pinned": false}, {"id": "CVE-2026-70378", "publisher": "TuranSec", "title": "imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the rati", "summary": "imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to imageproc::seam_carving::shrink_width \u2014 a function that panics when given a width below 2, crashing the process.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:41.957", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70378"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38932, "pinned": false}, {"id": "CVE-2026-71202", "publisher": "TuranSec", "title": "The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions b", "summary": "The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.080", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71202"}], "cwe": ["CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38943, "pinned": false}, {"id": "CVE-2026-71241", "publisher": "TuranSec", "title": "Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_b", "summary": "Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_book are missing the @login_required decorator that protects sibling routes (/search_student, /storage) in the same file. Because card_id values are sequential integers, the entire student database can be enumerated without authentication.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00485, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.997", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71241"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40829, "pinned": false}, {"id": "CVE-2026-16022", "publisher": "Switzerland Government Common Vulnerability Program", "title": "@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality", "summary": "@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync(). A user-controlled project-name argument is inserted into the shell command without proper neutralization, allowing shell metacharacters to execute additional operating-system commands when the CLI is invoked with a crafted project name.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00817, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:20:39.450", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16022"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.56719, "pinned": false}, {"id": "CVE-2026-71281", "publisher": "TuranSec", "title": "Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~16", "summary": "Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00497, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.723", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71281"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41727, "pinned": false}, {"id": "CVE-2026-18969", "publisher": "VulDB", "title": "A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617", "summary": "A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:52.870", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18969"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.39889, "pinned": false}, {"id": "CVE-2026-18973", "publisher": "VulDB", "title": "A vulnerability has been found in heshengtao super-agent-party up to 0.4.1", "summary": "A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of the component extension_proxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any w", "cvss": 7.3, "sev": "HIGH", "epss": 0.00511, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T01:16:29.410", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18973"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42773, "pinned": false}, {"id": "CVE-2026-65542", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.", "summary": "Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00496, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.983", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65542"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41675, "pinned": false}, {"id": "CVE-2026-66708", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Total Upkeep <= 1.17.2 versions.", "summary": "Unauthenticated Broken Access Control in Total Upkeep <= 1.17.2 versions.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.793", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66708"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29844, "pinned": false}, {"id": "CVE-2026-19157", "publisher": "Chrome", "title": "Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to ", "summary": "Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00384, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.010", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19157"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.31237, "pinned": false}, {"id": "CVE-2026-48079", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, when a user navigates to the `/logout` page, the page's server-side load handler deletes the `access_token` cookie before calling `/api/auth/logout` via an internal `event.fetch()`. The internal fetch consequently runs without the auth cookie, so `apiAuthHandle` rejects it, the logout handler never executes, and `Ses", "cvss": 7.4, "sev": "HIGH", "epss": 0.00501, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48079"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.42054, "pinned": false}, {"id": "CVE-2026-70559", "publisher": "VulnCheck", "title": "Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore an", "summary": "Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session or role check. Any remote unauthenticated caller who can reach the Dinky HTTP port (8888 by default) receives the full live system configuration (54 entries on a stock v1.2.5 install) with one parameterless GET.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:26.387", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70559"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38184, "pinned": false}, {"id": "CVE-2026-54201", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  does not enforce authentication or authorization checks\n when servin", "summary": "Tobit Laboratories AG TeamDavid's Webbox  does not enforce authentication or authorization checks\n when serving these log files. As a result, attackers can obtain \nsensitive error information or internal application details, potentially\n aiding in further attacks.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no l", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00567, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:56.790", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54201"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.46332, "pinned": false}, {"id": "CVE-2026-54208", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an \nunaut", "summary": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an \nunauthenticated attacker to create or write into existing files on the \nserver with attacker-controlled content. This is possible because user \ninput is written directly to files without proper validation or \nrestriction on file types. As a result, an attacker can create files \n(e.g., .htm), containing malicious JavaScript code. When a user ac", "cvss": 8.5, "sev": "HIGH", "epss": 0.0052, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.740", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54208"}], "cwe": ["CWE-20", "CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43334, "pinned": false}, {"id": "CVE-2026-48771", "publisher": "GitHub, Inc.", "title": "ishankportfolio is a portfolio website", "summary": "ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed due to improperly secured client-side database configuration and insufficient access control policies. Applications using publicly exposed database credentials or permissive database rules may allow unauthorised users to read, modify, or abuse stored form submission data. This could impact personally identifiable information (PII)", "cvss": 8.2, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:34.013", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48771"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27904, "pinned": false}, {"id": "CVE-2026-18697", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (rou", "summary": "An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0044, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.983", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18697"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130110"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37254, "pinned": false}, {"id": "CVE-2026-15830", "publisher": "Django Software Foundation", "title": "An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18.\nGeoDjango's `django.contrib.gis.geos", "summary": "An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18.\nGeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-service when parsing deeply nested `GEOMETRYCOLLECTION` objects supplied as well-known text (WKT), well-known binary (WKB), or hex-encoded WKB, which triggers unbounded recursion and a segmentation fault in the underlying GEOS library. Spatial field lookups and the `django.contrib.gis.for", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01113, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:46.593", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "django", "vendor": "djangoproject", "type": "app", "affected": ["< 5.2.17", ">= 6.0 and < 6.0.8"], "fixed": "5.2.17, 6.0.8", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy django || rpm -q django || django --version"}, {"label": "2. UPGRADE to 5.2.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade django"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade django"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison django\nsudo apt install django=<VERSION_BEFORE_6.0>\nsudo apt-mark hold django"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list django\nsudo dnf downgrade django-<VERSION_BEFORE_6.0>\nsudo dnf versionlock add django"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15830"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.djangoproject.com/en/dev/releases/security/"}, {"t": "Patch", "u": "https://github.com/django/django/commit/6af5da31775417c610dbf9c3f1b5b8333d42daf6"}, {"t": "Patch", "u": "https://github.com/django/django/commit/9e4a3f186b6b07b483bfd9195ea06734663fcd06"}, {"t": "Patch", "u": "https://github.com/django/django/commit/ba80833fa656dd09660b97c4429331067db1b080"}, {"t": "Patch", "u": "https://github.com/django/django/commit/d2e59b77fe18de318a8272c2a7bbc798d84d1d0d"}, {"t": "Vendor Advisory", "u": "https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65743, "pinned": false, "mentions": [{"src": "Django Weblog", "group": "ecosystem", "title": "Django security releases issued: 6.1.2, 6.0.9, and 5.2.18", "url": "https://www.djangoproject.com/weblog/2026/oct/06/security-releases/", "date": "2026-10-06"}], "buzz": 1}, {"id": "CVE-2026-18901", "publisher": "VulDB", "title": "A security vulnerability has been detected in H3C NX15 V100R017", "summary": "A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00848, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T05:16:49.433", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18901"}], "cwe": ["CWE-749"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.57728, "pinned": false}, {"id": "CVE-2026-66275", "publisher": "Apache Software Foundation", "title": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial ", "summary": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:37.717", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66275"}, {"t": "Vendor Advisory", "u": "https://lists.apache.org/thread/jds59nxrgcxtlx7xl0kvl5hqt07thxzt"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50671, "pinned": false}, {"id": "CVE-2026-66276", "publisher": "Apache Software Foundation", "title": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usa", "summary": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:37.847", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66276"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/14nj0lpsqpnd3q0hw0t0tw44qvdo1jc2"}], "cwe": ["CWE-606"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50669, "pinned": false}, {"id": "CVE-2026-66277", "publisher": "Apache Software Foundation", "title": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authent", "summary": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:37.967", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-j", "vendor": "apache", "type": "app", "affected": ["< 0.35.0"], "fixed": "0.35.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-j || rpm -q qpid-proton-j || qpid-proton-j --version"}, {"label": "2. UPGRADE to 0.35.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66277"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/48tflr3sx0sxq9bcdy5rh06oy3gmwx02"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5067, "pinned": false}, {"id": "CVE-2026-67553", "publisher": "Apache Software Foundation", "title": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial ", "summary": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.223", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67553"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/hvsncmcbgjrn85crs909nf4y3dqqrywo"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50668, "pinned": false}, {"id": "CVE-2026-67554", "publisher": "Apache Software Foundation", "title": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usa", "summary": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.347", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67554"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/5ndlowz29464ytj98gz9z9ljhwnmb2hm"}], "cwe": ["CWE-606"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50669, "pinned": false}, {"id": "CVE-2026-67555", "publisher": "Apache Software Foundation", "title": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authent", "summary": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.470", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid proton-dotnet", "vendor": "apache", "type": "app", "affected": ["< 1.1.0"], "fixed": "1.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-proton-dotnet || rpm -q qpid-proton-dotnet || qpid-proton-dotnet --version"}, {"label": "2. UPGRADE to 1.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-proton-dotnet"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-proton-dotnet"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67555"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5067, "pinned": false}, {"id": "CVE-2026-67591", "publisher": "Apache Software Foundation", "title": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial ", "summary": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:38.737", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid protonj2", "vendor": "apache", "type": "app", "affected": ["< 1.2.0"], "fixed": "1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-protonj2 || rpm -q qpid-protonj2 || qpid-protonj2 --version"}, {"label": "2. UPGRADE to 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-protonj2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-protonj2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67591"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/rwmggh2bkm6qotxpdfcplht3jgw5n036"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50671, "pinned": false}, {"id": "CVE-2026-68075", "publisher": "Apache Software Foundation", "title": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial ", "summary": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.090", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68075"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/lht725jgkowmyyjl039roffg6pyvbxz0"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50668, "pinned": false}, {"id": "CVE-2026-68077", "publisher": "Apache Software Foundation", "title": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usa", "summary": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.210", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68077"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/gzc78gdrlw2711v8jzgmsto8bqvg28y8"}], "cwe": ["CWE-606"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50668, "pinned": false}, {"id": "CVE-2026-68078", "publisher": "Apache Software Foundation", "title": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authent", "summary": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.327", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68078"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/m8gs6pfp1fmbgwcjr8zsgn95hfh15f8o"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5067, "pinned": false}, {"id": "CVE-2026-68080", "publisher": "Apache Software Foundation", "title": "It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenti", "summary": "It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00653, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.443", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qpid broker-j", "vendor": "apache", "type": "app", "affected": ["< 10.1.0"], "fixed": "10.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qpid-broker-j || rpm -q qpid-broker-j || qpid-broker-j --version"}, {"label": "2. UPGRADE to 10.1.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade qpid-broker-j"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade qpid-broker-j"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68080"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/tcnrv5nhmnsrzz92o4owxgycro6llt57"}], "cwe": ["CWE-406"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5067, "pinned": false}, {"id": "CVE-2026-71264", "publisher": "TuranSec", "title": "WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN chec", "summary": "WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration (network, hardware, LED setup) to any unauthenticated client on the network.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:50.600", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71264"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25533, "pinned": false}, {"id": "CVE-2026-71279", "publisher": "TuranSec", "title": "Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an ", "summary": "Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an MQTT message (topic zigbee2mqtt/bridge/request/extension/save) into the extensions base path using path.join(basePath, name) with no sanitization. The extension handler only validates that the name ends in .js/.mjs/.cjs, writes the file, and then dynamically imports it via Node.js import, achieving remote code execution.", "cvss": 8.0, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.437", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71279"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.4658, "pinned": false}, {"id": "CVE-2026-71284", "publisher": "TuranSec", "title": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), tak", "summary": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting. Because os.system invokes a shell and no quoting (shlex.quote, list-form subprocess) is applied, an admin uploading a crafted backup archive achieves arbitrary OS command execution.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00918, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.093", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71284"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.59872, "pinned": false}, {"id": "CVE-2026-17626", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expos", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:44.783", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17626"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282147"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34971, "pinned": false}, {"id": "CVE-2026-19021", "publisher": "VulDB", "title": "A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0", "summary": "A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=delete_product. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:31.240", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19021"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36297, "pinned": false}, {"id": "CVE-2026-28111", "publisher": "Patchstack", "title": "Contributor Privilege Escalation in Forminator <= 1.56.0 versions.", "summary": "Contributor Privilege Escalation in Forminator <= 1.56.0 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:52.070", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28111"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34985, "pinned": false}, {"id": "CVE-2026-65543", "publisher": "Patchstack", "title": "Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.", "summary": "Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.110", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65543"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34804, "pinned": false}, {"id": "CVE-2026-19147", "publisher": "Chrome", "title": "Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had com", "summary": "Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.887", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19147"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21975, "pinned": false}, {"id": "CVE-2026-19148", "publisher": "Chrome", "title": "Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had", "summary": "Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.000", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19148"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21974, "pinned": false}, {"id": "CVE-2026-19164", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote", "summary": "Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.803", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19164"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26853, "pinned": false}, {"id": "CVE-2026-19170", "publisher": "Chrome", "title": "Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to poten", "summary": "Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.480", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19170"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26858, "pinned": false}, {"id": "CVE-2026-19171", "publisher": "Chrome", "title": "Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to poten", "summary": "Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.590", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19171"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26852, "pinned": false}, {"id": "CVE-2026-19175", "publisher": "Chrome", "title": "Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially p", "summary": "Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:00.040", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19175"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.26851, "pinned": false}, {"id": "CVE-2026-67621", "publisher": "VulnCheck", "title": "Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace membe", "summary": "Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert and refresh document store routes to trigger document ingestion, refresh vector database contents, consume embedding API credits, and modify knowledge b", "cvss": 7.6, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:22.717", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.4"], "fixed": "newer than 3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67621"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.35007, "pinned": false}, {"id": "CVE-2026-19196", "publisher": "VulDB", "title": "A vulnerability was found in SourceCodester Photo Share Website 1.0", "summary": "A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T06:16:56.737", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19196"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36264, "pinned": false}, {"id": "CVE-2026-49007", "publisher": "ZTE Corporation", "title": "By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credenti", "summary": "By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T08:16:46.457", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49007"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36047, "pinned": false}, {"id": "CVE-2026-18654", "publisher": "AMZN", "title": "Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and", "summary": "Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint.\n\n\n\nTo remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00291, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:17.383", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "aws command line interface", "vendor": "amazon", "type": "app", "affected": ["< 1.45.28", ">= 2.0.0 and < 2.35.3"], "fixed": "1.45.28, 2.35.3", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aws-command-line-interface || rpm -q aws-command-line-interface || aws-command-line-interface --version"}, {"label": "2. UPGRADE to 1.45.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aws-command-line-interface"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aws-command-line-interface"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aws-command-line-interface\nsudo apt install aws-command-line-interface=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold aws-command-line-interface"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aws-command-line-interface\nsudo dnf downgrade aws-command-line-interface-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add aws-command-line-interface"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18654"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-071-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/aws/aws-cli/security/advisories/GHSA-hqvf-45jj-mccq"}], "cwe": ["CWE-322"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.20531, "vendors": [{"os": "Python (pip)", "pkg": "awscli", "status": "fixed", "fixed": "1.45.28", "cmd": "pip install --upgrade \"awscli>=1.45.28\"\npip show awscli", "url": "https://github.com/advisories/GHSA-hqvf-45jj-mccq", "note": "vulnerable: <= 1.45.27"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "awscli2", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "awscli", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "awscli", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "awscli2", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "fence-agents", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3133", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-18654.html", "note": "ALAS2023-2026-3133"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3966", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-18654.html", "note": "ALAS2-2026-3966"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3966 (medium): awscli", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3966.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2AWSCLI1-2026-001 (medium): awscli", "url": "https://alas.aws.amazon.com/AL2/ALAS2AWSCLI1-2026-001.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3133 (medium): awscli-2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3133.html", "date": "2026-09-29"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-69198", "publisher": "GitHub, Inc.", "title": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript", "summary": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. That mask comes verbatim from the CIDR suffix on the parsed input, so appending a suffix such as /0 suppresses classification entirely: isLoopback(), isPri", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0048, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:30.107", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69198"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40486, "pinned": false}, {"id": "CVE-2026-69249", "publisher": "GitHub, Inc.", "title": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers", "summary": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:52.720", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69249"}], "cwe": ["CWE-400"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15772, "pinned": false}, {"id": "CVE-2026-18854", "publisher": "VulDB", "title": "A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10", "summary": "A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T00:16:59.717", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18854"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34218, "pinned": false}, {"id": "CVE-2026-18859", "publisher": "VulDB", "title": "A vulnerability was identified in ESAFENET CDG up to 20260615", "summary": "A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T01:16:44.947", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18859"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34241, "pinned": false}, {"id": "CVE-2026-71234", "publisher": "TuranSec", "title": "Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered v", "summary": "Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) > 0), without comparing it to any server-stored value.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.120", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71234"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32409, "pinned": false}, {"id": "CVE-2026-17630", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00757, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:44.923", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17630"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282147"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54724, "pinned": false}, {"id": "CVE-2026-9196", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM\u2011generated components. The application executes model\u2011generated Python code in the backend during validation prior to user approval, which may allow an attacker to trigger side effects such as outbound network access, file system interaction, or data exfiltration with the privile", "cvss": 8.1, "sev": "HIGH", "epss": 0.00527, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:48.523", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9196"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43826, "pinned": false}, {"id": "CVE-2026-18958", "publisher": "VulDB", "title": "A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191", "summary": "A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnerability is an unknown functionality of the file loginCheckTest.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not u", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:08.410", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18958"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34251, "pinned": false}, {"id": "CVE-2026-18970", "publisher": "VulDB", "title": "A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617", "summary": "A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:53.060", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18970"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3425, "pinned": false}, {"id": "CVE-2026-65551", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Contr", "summary": "Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Breakdance: from n/a before 2.7.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:18:21.417", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65551"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32408, "pinned": false}, {"id": "CVE-2026-65504", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.", "summary": "Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:14.697", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65504"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32408, "pinned": false}, {"id": "CVE-2026-65523", "publisher": "Patchstack", "title": "Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automat", "summary": "Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.737", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65523"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32409, "pinned": false}, {"id": "CVE-2026-19062", "publisher": "VulDB", "title": "A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670", "summary": "A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:53.430", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19062"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34244, "pinned": false}, {"id": "CVE-2026-19145", "publisher": "Chrome", "title": "Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbi", "summary": "Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.653", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19145"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34532, "pinned": false}, {"id": "CVE-2026-19150", "publisher": "Chrome", "title": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execu", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.223", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19150"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34536, "pinned": false}, {"id": "CVE-2026-19151", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary c", "summary": "Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.330", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19151"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34535, "pinned": false}, {"id": "CVE-2026-19162", "publisher": "Chrome", "title": "Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitr", "summary": "Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.573", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19162"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34546, "pinned": false}, {"id": "CVE-2026-19168", "publisher": "Chrome", "title": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execu", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.260", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19168"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34532, "pinned": false}, {"id": "CVE-2026-19174", "publisher": "Chrome", "title": "Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary", "summary": "Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.927", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19174"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34532, "pinned": false}, {"id": "CVE-2026-48084", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2 verification cost (about 100 milliseconds per attempt on the tested host, giving 10 attempts per second sustained). The same backend implements a workin", "cvss": 7.4, "sev": "HIGH", "epss": 0.00388, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.297", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48084"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31677, "pinned": false}, {"id": "CVE-2026-70634", "publisher": "VulnCheck", "title": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compress", "summary": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c). The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds, leaving the 64-bit Simple8b index unvalidated and the read offset attacker-controlled. Attackers with DML access to a physical compressed relation can stor", "cvss": 8.1, "sev": "HIGH", "epss": 0.00533, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:27.857", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "timescaledb", "vendor": "timescale", "type": "app", "affected": ["<= 2.29.1"], "fixed": "newer than 2.29.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy timescaledb || rpm -q timescaledb || timescaledb --version"}, {"label": "2. UPGRADE to newer than 2.29.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade timescaledb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade timescaledb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70634"}, {"t": "Patch", "u": "https://github.com/timescale/timescaledb/commit/517c13e7cc6afadb4a7deaa7a5a5a29065e5b5a3"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/timescale/timescaledb/pull/10360"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/timescaledb-out-of-bounds-read-information-disclosure-via-dictionary-compression-reverse-iterator"}], "cwe": ["CWE-125", "CWE-129"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44211, "pinned": false}, {"id": "CVE-2026-66491", "publisher": "Joomla! Project", "title": "Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of path", "summary": "Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00468, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T09:16:59.010", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66491"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39565, "pinned": false}, {"id": "CVE-2026-54202", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to a path traversal vulnerability in the \narchive crea", "summary": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to a path traversal vulnerability in the \narchive creation functionality. Because the archive path is \nuser-controlled and insufficiently validated, an attacker can manipulate\n the input to traverse directories. This allows the creation of folders \nin arbitrary locations, including sensitive directories such as \nC:\\Windows or for different users.\u00a0This issue affects TeamDavid before Rollout 5", "cvss": 8.5, "sev": "HIGH", "epss": 0.00454, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:56.927", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54202"}], "cwe": ["CWE-36"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.38441, "pinned": false}, {"id": "CVE-2025-64213", "publisher": "Patchstack", "title": "Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS Pro masterst", "summary": "Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T08:16:11.397", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-64213"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28524, "pinned": false}, {"id": "CVE-2026-69086", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read ", "summary": "SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish authentication is disabled can read JSON files outside the attribute-view directory to disclose cross-scope database content.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00532, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.960", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69086"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.44139, "pinned": false}, {"id": "CVE-2026-58139", "publisher": "VulnCheck", "title": "The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database u", "summary": "The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credentials by calling the load_aws_credentials function with the redact_secret parameter set to false, circumventing the database-wide allow_unredacted_secrets=false policy. Attackers can invoke this single function to retrieve the underlying AWS credential chain including acces", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00509, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:25.220", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58139"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42589, "pinned": false}, {"id": "CVE-2026-48113", "publisher": "GitHub, Inc.", "title": "Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH", "summary": "Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against declared remotes, but never on subsequent SSH channels that carry actual traffic. A malicious client can authenticate with a permitted remote, then open ch", "cvss": 8.5, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:39.597", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48113"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31567, "pinned": false}, {"id": "CVE-2026-69247", "publisher": "GitHub, Inc.", "title": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers", "summary": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An application that decrypts atta", "cvss": 8.2, "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:52.380", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69247"}], "cwe": ["CWE-208", "CWE-209"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18823, "pinned": false}, {"id": "CVE-2026-64631", "publisher": "HackerOne", "title": "A vulnerability allowing a low-privileged user to inject SQL and extract database contents.", "summary": "A vulnerability allowing a low-privileged user to inject SQL and extract database contents.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:58.093", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64631"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32667, "pinned": false}, {"id": "CVE-2026-47622", "publisher": "NVIDIA Corporation", "title": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error message", "summary": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00459, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:51.860", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "dynamo", "vendor": "nvidia", "type": "app", "affected": ["<= 1.2.0"], "fixed": "newer than 1.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamo || rpm -q dynamo || dynamo --version"}, {"label": "2. UPGRADE to newer than 1.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47622"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38825, "pinned": false}, {"id": "CVE-2026-65986", "publisher": "GitHub, Inc.", "title": "CVAT is an open source interactive video and image annotation tool for computer vision", "summary": "CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type (\u00a0Content-Type\u00a0) that the attacker can influence, so instead of treating an uploaded file as plain data, the victim's browser can be told to treat it as an H", "cvss": 8.5, "sev": "HIGH", "epss": 0.00405, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:36.990", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65986"}], "cwe": ["CWE-79", "CWE-434"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.33623, "pinned": false}, {"id": "CVE-2026-48912", "publisher": "Apache Software Foundation", "title": "Improper Input Validation vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\n ", "summary": "Improper Input Validation vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\n A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete other users' uploaded files by supplying their file URLs.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0047, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:57.213", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48912"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/b9jnttmspd9kp4vgbvb32dcqb4201flq"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39715, "pinned": false}, {"id": "CVE-2026-50749", "publisher": "Apache Software Foundation", "title": "Improper Authorization vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAny ", "summary": "Improper Authorization vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAny authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0047, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:57.790", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "answer", "vendor": "apache", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy answer || rpm -q answer || answer --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade answer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade answer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50749"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ogk461yr4w9o95k15bkjxk2kpbkrbnln"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39715, "pinned": false}, {"id": "CVE-2026-8183", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot \" sequences ( /.. /) to v i ew arbitrary files on the system.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00561, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:43.943", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8183"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282647"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.45927, "pinned": false}, {"id": "CVE-2026-9201", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application validates component code using a truncated SHA\u2011256 hash. Because the hash comparison relies on only a portion of the digest, an attacker can craft malici", "cvss": 8.8, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:48.657", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9201"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282646"}], "cwe": ["CWE-326"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30288, "pinned": false}, {"id": "CVE-2026-64640", "publisher": "Apache Software Foundation", "title": "Apache Polaris did not consistently validate storage locations supplied during table and view registration.\n\nA", "summary": "Apache Polaris did not consistently validate storage locations supplied during table and view registration.\n\nAn authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying that the file was within the catalog's allowed storage locations.\n\nIf the catalog's un", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00486, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T09:16:36.797", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "polaris", "vendor": "apache", "type": "app", "affected": ["<= 1.6.0"], "fixed": "newer than 1.6.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy polaris || rpm -q polaris || polaris --version"}, {"label": "2. UPGRADE to newer than 1.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade polaris"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade polaris"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64640"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40984, "pinned": false}, {"id": "CVE-2026-28140", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.", "summary": "Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:52.707", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28140"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27015, "pinned": false}, {"id": "CVE-2026-66712", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.", "summary": "Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:24.307", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66712"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27015, "pinned": false}, {"id": "CVE-2026-19144", "publisher": "Chrome", "title": "Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially explo", "summary": "Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.537", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19144"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26858, "pinned": false}, {"id": "CVE-2026-19169", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowe", "summary": "Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.363", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19169"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26858, "pinned": false}, {"id": "CVE-2026-48080", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the `GET /api/tenants/{id}` endpoint returns the full tenant record to any authenticated `TENANT_ADMIN` of that tenant, including the `databaseUrl` field. This field contains the live PostgreSQL connection string the application uses to connect to that tenant's database. In the tested official `docker-compose.prod.ym", "cvss": 8.0, "sev": "HIGH", "epss": 0.00469, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.703", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48080"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39623, "pinned": false}, {"id": "CVE-2026-12070", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to an arbitrary file deletion \nvulnerability in the se", "summary": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to an arbitrary file deletion \nvulnerability in the send email, fax, SMS, etc. functionality. By \nspecifying an @@COMMENTFILE command in the form field scjob, any file on\n the system can be deleted.\u00a0This issue affects TeamDavid before Rollout 528.\n\n\n\n\nStarting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer e", "cvss": 8.4, "sev": "HIGH", "epss": 0.00397, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:55.997", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12070"}], "cwe": ["CWE-73"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32774, "pinned": false}, {"id": "CVE-2026-54200", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to a local file inclusion vulnerability in\n the send e", "summary": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to a local file inclusion vulnerability in\n the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field\u00a0'scjob', files can be attached to a message, \nwhich can then be downloaded by an authenticated user. A filter is in \nplace that restricts access to the David con-fig folder and the user \nfolder. However, this filter can be bypassed by specifying an a", "cvss": 8.4, "sev": "HIGH", "epss": 0.00401, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:56.640", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54200"}], "cwe": ["CWE-73"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.33259, "pinned": false}, {"id": "CVE-2026-18691", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access t", "summary": "An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to be transmitted in a less-protected form, potentially allowing that credential to be recovered. If recovered, the credential could be used to authenticate", "cvss": 8.8, "sev": "HIGH", "epss": 0.00355, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:22.903", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18691"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130264"}], "cwe": ["CWE-757"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28062, "pinned": false}, {"id": "CVE-2026-18568", "publisher": "CPANSec", "title": "XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns tr", "summary": "XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check.\n\nverify in lib/XML/Sig.pm counts the `//dsig:Signature` elements into `$numsigs` and iterates over them, but two paths reach `next` before any digest or key check runs: a `SignedInfo/Reference/@URI` that resolves to no element while `$numsigs` is greater than 1, and, when", "cvss": 7.5, "sev": "HIGH", "epss": 0.00319, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T16:16:28.560", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "\\", "vendor": "xml\\", "type": "app", "affected": [">= 0.29 and < 0.72"], "fixed": "0.72", "safe": "before 0.29", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy  || rpm -q  ||  --version"}, {"label": "2. UPGRADE to 0.72 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade "}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade "}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.29 (Debian / Ubuntu)", "cmd": "apt-cache madison \nsudo apt install =<VERSION_BEFORE_0.29>\nsudo apt-mark hold "}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list \nsudo dnf downgrade -<VERSION_BEFORE_0.29>\nsudo dnf versionlock add "}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18568"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-XML-Sig/commit/ef22cfed1ac0f29b316d17eb79cf6480e03ae16a.patch"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23638, "pinned": false}, {"id": "CVE-2026-18655", "publisher": "AMZN", "title": "Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server", "summary": "Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unauthenticated actor (via prompt injection) to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a crafted endpoint controlled through a broker hostname introduced in the MCP client context.\n\n\n\nTo remediate this issue, users should upgrade to v", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00423, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:17.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18655"}], "cwe": ["CWE-923"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.35551, "pinned": false}, {"id": "CVE-2026-18646", "publisher": "VulDB", "title": "A weakness has been identified in danpros HTMLy up to 3.1.1", "summary": "A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00767, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:37.457", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18646"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.55088, "pinned": false}, {"id": "CVE-2026-52521", "publisher": "MITRE", "title": "A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL comma", "summary": "A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00401, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:40.503", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52521"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.3319, "pinned": false}, {"id": "CVE-2026-55739", "publisher": "TuranSec", "title": "Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ", "summary": "Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and ->hasCompany(->company_id). CustomerPolicy's view/update/delete methods omit the company-ownership check entirely, checking only the blanket ability. Route-model-bound customer lookups and the bulk Customer::deleteCustomers method are similarly unscoped (self::find with no company filter).", "cvss": 8.3, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:33.903", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55739"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30149, "pinned": false}, {"id": "CVE-2026-71206", "publisher": "TuranSec", "title": "Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns th", "summary": "Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.587", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71206"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.3015, "pinned": false}, {"id": "CVE-2026-71242", "publisher": "TuranSec", "title": "Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-notes) with no company-", "summary": "Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-notes) with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify ->hasCompany(->company_id). Any authenticated user of one company can read, edit, or delete another company's notes by ID.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:27.123", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71242"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30148, "pinned": false}, {"id": "CVE-2026-71292", "publisher": "TuranSec", "title": "Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whi", "summary": "Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not present in the per-controller whitelist array: , which is then placed into %s with only backtick-quoting and no escaping.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.943", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71292"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.46598, "pinned": false}, {"id": "CVE-2026-20124", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allo", "summary": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP &mdash; Versions 1, 2c, and 3. An attacker could exploit this vulnerability by send", "cvss": 7.7, "sev": "HIGH", "epss": 0.00501, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:46.643", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "ios xe", "vendor": "cisco", "type": "os", "affected": ["3.13.9s", "3.13.10s", "3.16.6bs", "3.16.7as", "3.16.7bs", "3.16.7s", "3.16.8s", "3.16.9s"], "fixed": null, "safe": "before 3.13.9s", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20124"}, {"t": "Mitigation, Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD"}], "cwe": ["CWE-772"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.4203, "pinned": false}, {"id": "CVE-2026-18953", "publisher": "AMZN", "title": "Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-tra", "summary": "Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter.\n\n\n\nTo remediate this issue, users should upgrade to version 0.1.5 or later.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:07.770", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "aws transform mcp server", "vendor": "amazon", "type": "app", "affected": [">= 0.1.0 and < 0.1.5"], "fixed": "0.1.5", "safe": "before 0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show aws-transform-mcp-server"}, {"label": "2. UPGRADE to 0.1.5", "cmd": "pip install --upgrade \"aws-transform-mcp-server>=0.1.5\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.1.0", "cmd": "pip index versions aws-transform-mcp-server\npip install \"aws-transform-mcp-server<0.1.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18953"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-075-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/awslabs/mcp/security/advisories/GHSA-66mr-jr63-2jgw"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.07483, "pinned": false}, {"id": "CVE-2026-65547", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.", "summary": "Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.603", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65547"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.28305, "pinned": false}, {"id": "CVE-2026-65569", "publisher": "Patchstack", "title": "Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.", "summary": "Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.307", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65569"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.2829, "pinned": false}, {"id": "CVE-2026-18359", "publisher": "GitLab Inc.", "title": "Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 a", "summary": "Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metadata service, via the mets_uri or iiif_uri parameter of POST /api/documents/{pk}/imports/, because the IMPORT_ALLOWED_DOMAINS setting defaults to '*' and no address filtering, redirect cap or timeout is ap", "cvss": 8.5, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:38.223", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "escriptorium", "vendor": "escriptorium", "type": "app", "affected": ["<= 26.04.1"], "fixed": "newer than 26.04.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy escriptorium || rpm -q escriptorium || escriptorium --version"}, {"label": "2. UPGRADE to newer than 26.04.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade escriptorium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade escriptorium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18359"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27803, "pinned": false}, {"id": "CVE-2026-19176", "publisher": "Chrome", "title": "Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised ", "summary": "Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00505, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:00.150", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19176"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42303, "pinned": false}, {"id": "CVE-2026-48075", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the `add-to-tunnel` endpoint creates a new appointment row in any client tunnel without any caller authentication. A request that supplies any valid `tunnelId` and any valid `emailHash` (the two need not belong to the same tunnel) results in an inserted appointment with `status = \"CONFIRMED\"`, attacker-controlled cip", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:09.977", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48075"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35228, "pinned": false}, {"id": "CVE-2026-71445", "publisher": "CIRCL", "title": "AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint", "summary": "AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using str(res[0]).\n\nIf attacker-controlled input was included in the generated error message, a crafted request could cause arbitrary HTML or JavaScript to be reflected in the response without appropriate output encoding.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.163", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71445"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32673, "pinned": false}, {"id": "CVE-2026-18690", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an", "summary": "An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:22.757", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18690"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130481"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33788, "pinned": false}, {"id": "CVE-2025-49935", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through < 8.3.2.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:15:39.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-49935"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.40223, "pinned": false}, {"id": "CVE-2026-18610", "publisher": "VulDB", "title": "A vulnerability was detected in NewType WebEIP up to 3.0", "summary": "A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIP_Com_FileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00678, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:36.120", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18610"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.5178, "pinned": false}, {"id": "CVE-2026-69243", "publisher": "GitHub, Inc.", "title": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python", "summary": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the comp", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00443, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:42.113", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243"}], "cwe": ["CWE-444"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37525, "pinned": false}, {"id": "CVE-2026-69244", "publisher": "GitHub, Inc.", "title": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python", "summary": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigger a DoS in the client. The vulnerable path was error message construction in aiohttp/_http_parser.pyx, where an llhttp error-position pointer was used t", "cvss": 7.1, "sev": "HIGH", "epss": 0.00528, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:42.273", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244"}], "cwe": ["CWE-125", "CWE-400", "CWE-416"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.43878, "pinned": false}, {"id": "CVE-2026-48115", "publisher": "GitHub, Inc.", "title": "Misskey is an open source, federated social media platform", "summary": "Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in the Server Announcements API where insufficient permission checks allow attackers to access limited portions of data that they normally couldn't view. This vulnerability occurs whether or not federation is enabled. This issue has been fixed in version 2026.5.4.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00421, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:49.593", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48115"}], "cwe": ["CWE-285"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35417, "pinned": false}, {"id": "CVE-2026-18657", "publisher": "AMZN", "title": "An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthen", "summary": "An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in the directory.\n\n\n\nTo remediate this issue, users should upgrade to version 2.10.0 or higher.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00233, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:50.570", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "kiro cli", "vendor": "amazon", "type": "app", "affected": ["< 2.10.0"], "fixed": "2.10.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kiro-cli || rpm -q kiro-cli || kiro-cli --version"}, {"label": "2. UPGRADE to 2.10.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kiro-cli"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kiro-cli"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18657"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-074-aws/"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13382, "pinned": false}, {"id": "CVE-2026-54416", "publisher": "TuranSec", "title": "Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed b", "summary": "Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar'), checked against the last 4-5 characters of the filename.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00499, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:33.637", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54416"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.41907, "pinned": false}, {"id": "CVE-2026-70376", "publisher": "TuranSec", "title": "Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/fun", "summary": "Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, with no per-request anti-CSRF token anywhere in the admin area.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00201, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:41.703", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70376"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.09435, "pinned": false}, {"id": "CVE-2026-14574", "publisher": "Eclipse Foundation", "title": "In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia", "summary": "In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` recursively merges preference values without rejecting prototype-related keys (`__proto__`, `constructor`, `prototype`). Because this function is invoked by `PreferenceServiceImpl.doResolve` for every preference resolution across scopes (default, user, workspace, folder), a crafted preference value in a workspace settings file (`.t", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00395, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:25.030", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "theia", "vendor": "eclipse", "type": "app", "affected": [">= 0.7.0 and < 1.74.0"], "fixed": "1.74.0", "safe": "before 0.7.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy theia || rpm -q theia || theia --version"}, {"label": "2. UPGRADE to 1.74.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade theia"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade theia"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison theia\nsudo apt install theia=<VERSION_BEFORE_0.7.0>\nsudo apt-mark hold theia"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list theia\nsudo dnf downgrade theia-<VERSION_BEFORE_0.7.0>\nsudo dnf versionlock add theia"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14574"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/157"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/567"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/567"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.32547, "pinned": false}, {"id": "CVE-2026-71232", "publisher": "TuranSec", "title": "MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in", "summary": "MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.", "cvss": 7.2, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:25.873", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71232"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.44653, "pinned": false}, {"id": "CVE-2026-71239", "publisher": "TuranSec", "title": "DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Temp", "summary": "DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor with no sanitization, in at least three locations: message_previews.py builds an f-string embedding message.subject/message.content directly into a Template call; email_creators.py passes eml_message.subject directly as a template string to Template; and helpers.py contains the same f-string interpolation pattern.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71239"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.32139, "pinned": false}, {"id": "CVE-2026-71271", "publisher": "TuranSec", "title": "Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a re", "summary": "Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified \u2014 unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/html_meta.go, which does.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.447", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71271"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.24636, "pinned": false}, {"id": "CVE-2026-71285", "publisher": "TuranSec", "title": "Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurab", "summary": "Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a <script> block rendered on every public status page. A siteId value such as , once saved by an editor/admin, executes arbitrary JavaScript for every unauthenticated visitor of the public /status/<slug> page, enabling session-cookie theft and full page takeover.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.210", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71285"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.31015, "pinned": false}, {"id": "CVE-2026-15587", "publisher": "GoogleCloud", "title": "Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platf", "summary": "Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header.\n\n\n\n\nThis vulnerability was patched with version 6.3.85, and no customer action is needed.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00229, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:51.147", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15587"}], "cwe": ["CWE-346"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.1299, "pinned": false}, {"id": "CVE-2026-7327", "publisher": "Progress Software Corporation", "title": "An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLo", "summary": "An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-side data when it is accessed by a higher-privileged user.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00393, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:09.077", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7327"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3236, "pinned": false}, {"id": "CVE-2026-9203", "publisher": "Progress Software Corporation", "title": "A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an au", "summary": "A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:10.437", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9203"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26381, "pinned": false}, {"id": "CVE-2026-17617", "publisher": "IBM Corporation", "title": "IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to", "summary": "IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00336, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:44.543", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "application gateway operator", "vendor": "ibm", "type": "app", "affected": [">= 22.2.0 and <= 26.6.0"], "fixed": "newer than 26.6.0", "safe": "before 22.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-gateway-operator || rpm -q application-gateway-operator || application-gateway-operator --version"}, {"label": "2. UPGRADE to newer than 26.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade application-gateway-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade application-gateway-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison application-gateway-operator\nsudo apt install application-gateway-operator=<VERSION_BEFORE_22.2.0>\nsudo apt-mark hold application-gateway-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-gateway-operator\nsudo dnf downgrade application-gateway-operator-<VERSION_BEFORE_22.2.0>\nsudo dnf versionlock add application-gateway-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17617"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282296"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25776, "pinned": false}, {"id": "CVE-2026-20312", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage of sensitive information issues that are grouped under the Common Weakness ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:52.093", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20312"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.22285, "pinned": false}, {"id": "CVE-2026-20313", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20313 are related to Improper link resolution before file access issues that are grouped under the Common Weakness", "cvss": 7.7, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:52.437", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20313"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.34956, "pinned": false}, {"id": "CVE-2026-70432", "publisher": "Jenkins Project", "title": "A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier a", "summary": "A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00297, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:12.903", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70432"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21208, "pinned": false}, {"id": "CVE-2026-9205", "publisher": "IBM Corporation", "title": "IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the\u00a0ensure_fernet_key() functio", "summary": "IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the\u00a0ensure_fernet_key() function.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00302, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:49.193", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9205"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282648"}], "cwe": ["CWE-338"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21736, "pinned": false}, {"id": "CVE-2026-18597", "publisher": "Foxit", "title": "The PDF creation feature of Foxit PDF Services API supports referencing external files", "summary": "The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00313, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:29.633", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18597"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.23003, "pinned": false}, {"id": "CVE-2026-19039", "publisher": "VulDB", "title": "A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5", "summary": "A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The attack requires a local approach. The actual existence of this vulnerability is currently in question. This product adopts a rolling release strategy to", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01196, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:17:27.980", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19039"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.67873, "pinned": false}, {"id": "CVE-2026-65541", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.", "summary": "Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.857", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65541"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21666, "pinned": false}, {"id": "CVE-2026-65549", "publisher": "Patchstack", "title": "Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.", "summary": "Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00539, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.877", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65549"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.44623, "pinned": false}, {"id": "CVE-2026-66425", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Gutena Forms \u2013 Contact Form, Survey Form, Feedback Form, Booking Form", "summary": "Unauthenticated Broken Authentication in Gutena Forms \u2013 Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00417, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.803", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66425"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34941, "pinned": false}, {"id": "CVE-2026-66695", "publisher": "Patchstack", "title": "Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.", "summary": "Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00406, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.607", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66695"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33807, "pinned": false}, {"id": "CVE-2026-19154", "publisher": "Chrome", "title": "Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had c", "summary": "Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00347, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.660", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19154"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27098, "pinned": false}, {"id": "CVE-2026-64663", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, manipulating user-supplied input incorporated into Antlers templates could result in the loss of content and assets, on sites whose templates pass untrusted input into affected areas, and exploitation did not require authentication. This issue is fixed in versions 5.74.1 and 6.24.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:13.820", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64663"}], "cwe": ["CWE-470"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32608, "pinned": false}, {"id": "CVE-2026-64677", "publisher": "GitHub, Inc.", "title": "Anki is a program for creating and reviewing flashcards", "summary": "Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read local files through directory traversal. This issue is fixed in version 25.09.3.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.01018, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:14.250", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64677"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.63041, "pinned": false}, {"id": "CVE-2026-65680", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized atta", "summary": "Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00387, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:08.277", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "onedrive", "vendor": "microsoft", "type": "app", "affected": ["< 26.095.0519.0003"], "fixed": "26.095.0519.0003", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy onedrive || rpm -q onedrive || onedrive --version"}, {"label": "2. UPGRADE to 26.095.0519.0003 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade onedrive"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade onedrive"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65680"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65680"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31613, "pinned": false}, {"id": "CVE-2026-18089", "publisher": "CPANSec", "title": "Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the r", "summary": "Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured.\n\nverify_xml in Net::SAML2::Role::VerifyXML runs \"return if !$anchors && !$cacert;\" as soon as the XML::Sig check succeeds, and that check uses the X.509 certificate taken from the response's own dsig:KeyInfo/dsig:X509Certificate element, so an unanchored respon", "cvss": 7.5, "sev": "HIGH", "epss": 0.00234, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:24.890", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "net\\", "vendor": "timlegge", "type": "app", "affected": ["< 0.86"], "fixed": "0.86", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy net || rpm -q net || net --version"}, {"label": "2. UPGRADE to 0.86 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18089"}], "cwe": ["CWE-295", "CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.13536, "pinned": false}, {"id": "CVE-2026-18092", "publisher": "CPANSec", "title": "Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because n", "summary": "Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtree.\n\nnew_from_xml reads the NameID, attribute values, SessionIndex, audience and other identity fields with document-wide XPath, such as //saml:Assertion/saml:AttributeStatement/saml:Attribute and //saml:Subject/saml:NameID, which select the first mat", "cvss": 8.1, "sev": "HIGH", "epss": 0.00337, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:25.030", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "net\\", "vendor": "timlegge", "type": "app", "affected": ["< 0.86"], "fixed": "0.86", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy net || rpm -q net || net --version"}, {"label": "2. UPGRADE to 0.86 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18092"}, {"t": "Patch", "u": "https://github.com/perl-net-saml2/perl-Net-SAML2/commit/201fead7f42b83f40c84bf4a311a25b09acd18f9.patch"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2593, "pinned": false}, {"id": "CVE-2026-18642", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta", "summary": "Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection.\n\nThis issue affects eta-otp-lock: before 1.0.4.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00373, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:26.123", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18642"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.30115, "pinned": false}, {"id": "CVE-2026-15337", "publisher": "Django Software Foundation", "title": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\n`django.utils.translation.check_for_", "summary": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\n`django.utils.translation.check_for_language()` is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory. Such codes reach the function through the `django.views.i18n.set_language()` view, which is not routed by default. The consumed memory is bounded, s", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0059, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:46.453", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "django", "vendor": "djangoproject", "type": "app", "affected": ["< 5.2.17", ">= 6.0 and < 6.0.8"], "fixed": "5.2.17, 6.0.8", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy django || rpm -q django || django --version"}, {"label": "2. UPGRADE to 5.2.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade django"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade django"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison django\nsudo apt install django=<VERSION_BEFORE_6.0>\nsudo apt-mark hold django"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list django\nsudo dnf downgrade django-<VERSION_BEFORE_6.0>\nsudo dnf versionlock add django"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15337"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.djangoproject.com/en/dev/releases/security/"}, {"t": "Patch", "u": "https://github.com/django/django/commit/224dbc832586ad5cfb0237c2ff30d14baeaddc6f"}, {"t": "Patch", "u": "https://github.com/django/django/commit/27137e655e442e81095f1f8f77ff3870d9fdf169"}, {"t": "Patch", "u": "https://github.com/django/django/commit/5b3523d29be25948e1dd90b3863a002f00fc865f"}, {"t": "Patch", "u": "https://github.com/django/django/commit/c72a5dbb64d0777f3f471f1be94e8b2ca91e0959"}, {"t": "Vendor Advisory", "u": "https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47514, "pinned": false}, {"id": "CVE-2026-18656", "publisher": "AMZN", "title": "An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthe", "summary": "An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory.\n\n\n\nTo remediate this issue, users should upgrade to version 1.0.228 or higher.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00224, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:50.410", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "kiro ide", "vendor": "amazon", "type": "app", "affected": ["< 1.0.228"], "fixed": "1.0.228", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kiro-ide || rpm -q kiro-ide || kiro-ide --version"}, {"label": "2. UPGRADE to 1.0.228 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kiro-ide"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kiro-ide"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18656"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-074-aws/"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.12315, "pinned": false}, {"id": "CVE-2026-71274", "publisher": "TuranSec", "title": "OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChann", "summary": "OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/http_fns.c with no HTML encoding.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00281, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.850", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71274"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19519, "pinned": false}, {"id": "CVE-2026-71280", "publisher": "TuranSec", "title": "go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain ", "summary": "go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP validation (no IsLoopback, IsPrivate, IsUnspecified, or IsLinkLocalUnicast checks).", "cvss": 8.5, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.573", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71280"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21709, "pinned": false}, {"id": "CVE-2026-55524", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on the initially supplied URL, allowing the protection to be bypassed so the tool connects to attacker-chosen internal destinations. The check resolves the hostname once with socket.gethostbyname and rejects private/loopback/link-local results, but then passes the URL to a fetcher using httpx.Client(follow_redirects=True) (or urll", "cvss": 7.5, "sev": "HIGH", "epss": 0.00242, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:10.847", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55524"}], "cwe": ["CWE-367", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.14505, "pinned": false}, {"id": "CVE-2026-66298", "publisher": "EEF", "title": "Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to ", "summary": "Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart.\n\nLivebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed, cross-origin iframe specifically because that JavaScript is untrusted. The trusted iframe shell in iframe/priv/static/iframe/v5.html forwards every keydo", "cvss": 8.8, "sev": "HIGH", "epss": 0.00267, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:12.203", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "livebook", "vendor": "livebook", "type": "app", "affected": [">= 0.5.0 and < 0.18.7", ">= 0.19.0 and < 0.19.9"], "fixed": "0.18.7, 0.19.9", "safe": "before 0.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy livebook || rpm -q livebook || livebook --version"}, {"label": "2. UPGRADE to 0.18.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade livebook"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade livebook"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison livebook\nsudo apt install livebook=<VERSION_BEFORE_0.5.0>\nsudo apt-mark hold livebook"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list livebook\nsudo dnf downgrade livebook-<VERSION_BEFORE_0.5.0>\nsudo dnf versionlock add livebook"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66298"}, {"t": "Vendor Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66298.html"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/296318ffdfa6e5ed7b18ad8d5a5b2af90f3cd728"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/5980e5c6b71036806b3bf54101eb1d6c0f50f19c"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/a552ce8f99ad348ea37061394dc950a0cebdb33e"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-68c2-prqg-x62g"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17799, "pinned": false}, {"id": "CVE-2026-18974", "publisher": "VulDB", "title": "A vulnerability was found in heshengtao super-agent-party up to 0.4.1", "summary": "A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component execute_tool_manually Endpoint. The manipulation of the argument tool_name/tool_params results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00532, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T01:16:29.587", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18974"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.44148, "pinned": false}, {"id": "CVE-2026-19044", "publisher": "VulDB", "title": "A flaw has been found in LeeSinLiang godot-mcp 0.1.0", "summary": "A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component create_scene/add_node. This manipulation of the argument projectPath causes command injection. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:48.910", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19044"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.64937, "pinned": false}, {"id": "CVE-2026-19045", "publisher": "VulDB", "title": "A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24", "summary": "A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:49.550", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19045"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.64938, "pinned": false}, {"id": "CVE-2026-28141", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:52.830", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28141"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39536, "pocs": [{"kind": "nuclei", "name": "NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28141.yaml"}], "pinned": false}, {"id": "CVE-2026-65559", "publisher": "Patchstack", "title": "Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.", "summary": "Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:17.933", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65559"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.39086, "pinned": false}, {"id": "CVE-2026-19047", "publisher": "VulDB", "title": "A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24", "summary": "A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component ludus_cli_execute. Performing a manipulation of the argument command/args results in command injection. The attack needs to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:41.510", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19047"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.64937, "pinned": false}, {"id": "CVE-2026-19137", "publisher": "Chrome", "title": "Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had ", "summary": "Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.690", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19137"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21978, "pinned": false}, {"id": "CVE-2026-19138", "publisher": "Chrome", "title": "Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who ", "summary": "Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.813", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19138"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2473, "pinned": false}, {"id": "CVE-2026-19140", "publisher": "Chrome", "title": "Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised t", "summary": "Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.047", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19140"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21977, "pinned": false}, {"id": "CVE-2026-19141", "publisher": "Chrome", "title": "Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who ", "summary": "Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.160", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19141"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21977, "pinned": false}, {"id": "CVE-2026-19152", "publisher": "Chrome", "title": "Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attack", "summary": "Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.437", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19152"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2198, "pinned": false}, {"id": "CVE-2026-19153", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remot", "summary": "Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.1, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.547", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19153"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24824, "pinned": false}, {"id": "CVE-2026-19155", "publisher": "Chrome", "title": "Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromi", "summary": "Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.777", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19155"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21977, "pinned": false}, {"id": "CVE-2026-19163", "publisher": "Chrome", "title": "Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had ", "summary": "Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.690", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19163"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21977, "pinned": false}, {"id": "CVE-2026-19172", "publisher": "Chrome", "title": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised", "summary": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.703", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19172"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21974, "pinned": false}, {"id": "CVE-2026-19173", "publisher": "Chrome", "title": "Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had comprom", "summary": "Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.813", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19173"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24202, "pinned": false}, {"id": "CVE-2026-19177", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote att", "summary": "Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:00.263", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19177"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24245, "pinned": false}, {"id": "CVE-2026-48083", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the `/api/log` endpoint accepts unauthenticated POST requests, applies no schema validation to the message body, writes attacker-controlled content directly into the application's stdout log, interprets newline characters as real line breaks, and enforces no size or rate limits. Three independent abuse modes follow: ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00364, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:11.143", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48083"}], "cwe": ["CWE-117"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29115, "pinned": false}, {"id": "CVE-2026-63725", "publisher": "VulnCheck", "title": "sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 b", "summary": "sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a tar shell command by string-concatenating the backup directory path $this->path directly into the command line ('tar czf ' . $backupFileApp . ' ' . BASE_PATH . ' --exclude \\\"' . $this->path . '\\\" 2>&1') and passes the result to PHP's exec() with no application of escapeshellarg() and no validation of the path against a safe charac", "cvss": 7.2, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:12.480", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63725"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37633, "pinned": false}, {"id": "CVE-2026-69088", "publisher": "VulnCheck", "title": "Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in", "summary": "Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall() only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing rights (admin.pages, not super-admin or admin.pages_twig) can plant a directive in a page's form-field frontmatter that invokes an arbitrary public s", "cvss": 8.1, "sev": "HIGH", "epss": 0.00295, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:29.253", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69088"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21081, "pinned": false}, {"id": "CVE-2026-69097", "publisher": "VulnCheck", "title": "GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inje", "summary": "GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00268, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:30.677", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.53"], "fixed": "3.1.53", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.53", "cmd": "pip install --upgrade \"gitpython>=3.1.53\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69097"}, {"t": "Exploit, Mitigation", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2"}, {"t": "Exploit, Mitigation", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.17941, "pinned": false}, {"id": "CVE-2026-66296", "publisher": "EEF", "title": "Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected", "summary": "Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler.\n\nOaskit.ErrorHandler.Default.format_reason/4 and Oaskit.ErrorHandler.Default.reason_to_html/1 in lib/oaskit/error_handler/default.ex render request-validation failures as an HTML page whenever the request's Accept header contains html, interpolating request-controlled strings into ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00367, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:25.720", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "oaskit", "vendor": "lud", "type": "app", "affected": [">= 0.1.0 and < 0.14.1"], "fixed": "0.14.1", "safe": "before 0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy oaskit || rpm -q oaskit || oaskit --version"}, {"label": "2. UPGRADE to 0.14.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade oaskit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade oaskit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison oaskit\nsudo apt install oaskit=<VERSION_BEFORE_0.1.0>\nsudo apt-mark hold oaskit"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list oaskit\nsudo dnf downgrade oaskit-<VERSION_BEFORE_0.1.0>\nsudo dnf versionlock add oaskit"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66296"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66296.html"}, {"t": "Patch", "u": "https://github.com/lud/oaskit/commit/b70c6b2eaf0b11bdd0bbb21b8a87dbb3d46918a1"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/lud/oaskit/security/advisories/GHSA-h7xw-x8wr-xpcc"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-66296"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/lud/oaskit/security/advisories/GHSA-h7xw-x8wr-xpcc"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.29393, "pinned": false}, {"id": "CVE-2026-13229", "publisher": "Fluid Attacks", "title": "Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment c", "summary": "Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00427, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:41.890", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13229"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35967, "pinned": false}, {"id": "CVE-2026-69702", "publisher": "VulnCheck", "title": "SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authe", "summary": "SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated frame_content_size field in the frame header. Attackers can store a base64-encoded Zstandard payload declaring an arbitrarily large decompressed size in a retry task argument, causing the JVM to attempt an unbounded array allocation", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00548, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:53.980", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69702"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4516, "pinned": false}, {"id": "CVE-2026-47682", "publisher": "GitHub, Inc.", "title": "CVAT is an open source interactive video and image annotation tool for computer vision", "summary": "CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that's been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server's filesystem. This issue has been fixed in version 2.65.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00454, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:51.747", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47682"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.3844, "pinned": false}, {"id": "CVE-2026-48154", "publisher": "GitHub, Inc.", "title": "GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful APIs", "summary": "GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful APIs. In versions prior to 1.12.2 nMemorySecret2FA contains a race condition due to an unsynchronized package-level map used to store 2FA secrets. Multiple HTTP handlers in handler/login.go and handler/twoFA.go read from and write to this map concurrently, and because Go's runtime treats unsynchronized concurrent map access as an unrecoverable fatal", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:52.017", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48154"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32869, "pinned": false}, {"id": "CVE-2026-13227", "publisher": "Fluid Attacks", "title": "An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0  due to insufficient", "summary": "An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0  due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities.\n\nThis issue affects ERPNext: before 15.115.0, before 16.26.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00427, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:35.140", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13227"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35967, "pinned": false}, {"id": "CVE-2026-70620", "publisher": "VulnCheck", "title": "Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileg", "summary": "Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00459, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:17.727", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70620"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38852, "pinned": false}, {"id": "CVE-2026-55707", "publisher": "MITRE", "title": "In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subn", "summary": "In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scope behavior for victim routers.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00427, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:37.903", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55707"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.35965, "pinned": false}, {"id": "CVE-2026-0516", "publisher": "SonicWALL, Inc.", "title": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote a", "summary": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:20:33.670", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0516"}], "cwe": ["CWE-644"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26538, "pinned": false}, {"id": "CVE-2026-71272", "publisher": "TuranSec", "title": "Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname vi", "summary": "Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPort(host, port) using the original hostname rather than the already-validated IP address.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00257, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.573", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71272"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.16404, "pinned": false}, {"id": "CVE-2026-66451", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.", "summary": "Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00328, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.340", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66451"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24658, "pinned": false}, {"id": "CVE-2026-66452", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.", "summary": "Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.460", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66452"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25214, "pinned": false}, {"id": "CVE-2026-48076", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. The new-client booking flow in versions 1.0.1 and prior consists of three calls: `bootstrap-challenge` (returns a 16-bit PoW challenge with `difficulty=4` leading hex zeroes), `bootstrap-verify` (validates the PoW and issues a Bearer booking access token), and `create-new-client` (consumes the token and creates the tunnel and first appointm", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.127", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48076"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25214, "pinned": false}, {"id": "CVE-2026-70635", "publisher": "VulnCheck", "title": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows ", "summary": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow dictionary-index type and bypasses index validation checks in bulk text dictionary decompression. Attackers with direct DML access to a non-frozen physical compres", "cvss": 7.1, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:28.003", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "timescaledb", "vendor": "timescale", "type": "app", "affected": ["<= 2.29.1"], "fixed": "newer than 2.29.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy timescaledb || rpm -q timescaledb || timescaledb --version"}, {"label": "2. UPGRADE to newer than 2.29.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade timescaledb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade timescaledb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70635"}, {"t": "Patch", "u": "https://github.com/timescale/timescaledb/commit/517c13e7cc6afadb4a7deaa7a5a5a29065e5b5a3"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/timescale/timescaledb/pull/10360"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/timescaledb-out-of-bounds-read-dos-via-bulk-dictionary-decompression-negative-index"}], "cwe": ["CWE-125", "CWE-129"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3762, "pinned": false}, {"id": "CVE-2025-11184", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31\nallows an authorized attacker t", "summary": "Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31\nallows an authorized attacker to plant arbitrary JavaScript code in the page", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2025-10-13", "pub": "2025-10-13T10:15:46.123", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11184"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35261, "pinned": false}, {"id": "CVE-2026-48061", "publisher": "GitHub, Inc.", "title": "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework", "summary": "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header and supplying an X-Forwarded-Host header set to a whitelisted domain. The AllowedHostsMiddleware trusts the X-Forwarded-Host header as a fallback when the Host header is absent. Since X-Forwarded-Host is a client-controllable header, this enables host header injection a", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00375, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:39.303", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48061"}], "cwe": ["CWE-644"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.30309, "pinned": false}, {"id": "CVE-2026-66065", "publisher": "GitHub, Inc.", "title": "Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined po", "summary": "Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted, so a malicious cloned repo can still reach arbitrary command execution by shipping a .env (auto-loaded at import, with no review step). The CVE-2026-47211 fix added _UNTRUSTED_ENV_DENYLIST ", "cvss": 8.4, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:41.193", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66065"}], "cwe": ["CWE-15", "CWE-94"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14319, "pinned": false}, {"id": "CVE-2026-69248", "publisher": "GitHub, Inc.", "title": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers", "summary": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography's verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00244, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:52.550", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69248"}], "cwe": ["CWE-295"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.14697, "pinned": false}, {"id": "CVE-2026-71191", "publisher": "MITRE", "title": "In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered", "summary": "In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy from an arbitrary source object using the signer's authorization context. The attacker can read any object the signer has access to, provided the target", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00564, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:40.180", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71191"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.46174, "pinned": false}, {"id": "CVE-2026-0931", "publisher": "M-Files Corporation", "title": "Denial-of-service vulnerability in M-Files Server versions before\u00a026.5.16015.3 allows an authenticated admin u", "summary": "Denial-of-service vulnerability in M-Files Server versions before\u00a026.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00409, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T10:17:26.860", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0931"}], "cwe": ["CWE-1286"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34105, "pinned": false}, {"id": "CVE-2026-7646", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, includi", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00499, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:55.860", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7646"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282147"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.419, "pinned": false}, {"id": "CVE-2026-7658", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inj", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00508, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:43.580", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7658"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282647"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.42541, "pinned": false}, {"id": "CVE-2026-64599", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: amlogic - avoid double cleanup in", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: amlogic - avoid double cleanup in meson_crypto_probe()\n\nWhen meson_allocate_chanlist() fails after a partial allocation, it already\nunwinds the allocated chanlist state through its local error path.\nmeson_crypto_probe() then jump to error_flow and calls\nmeson_free_chanlist() again, causing the same per-flow resources to be torn\ndown twice. In the reproduced failure path,", "cvss": 7.8, "sev": "HIGH", "epss": 0.00117, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:35.603", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64599"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.01578, "pinned": false}, {"id": "CVE-2026-70637", "publisher": "VulnCheck", "title": "LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers t", "summary": "LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication. The control thread closes data_socket and file_fd descriptors while worker threads concurrently operate on the same fields in worker_thread_cleanup, allowing stale file descriptors to be reassigned by the OS and subsequently used by worker threads", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00365, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:27.613", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70637"}], "cwe": ["CWE-820"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.29146, "pinned": false}, {"id": "CVE-2026-18277", "publisher": "GitLab Inc.", "title": "Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 all", "summary": "Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is placed in get_context_data() and therefore runs only on the GET rendering path", "cvss": 7.1, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:38.100", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "escriptorium", "vendor": "escriptorium", "type": "app", "affected": ["<= 26.04.1"], "fixed": "newer than 26.04.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy escriptorium || rpm -q escriptorium || escriptorium --version"}, {"label": "2. UPGRADE to newer than 26.04.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade escriptorium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade escriptorium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18277"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3441, "pinned": false}, {"id": "CVE-2026-66829", "publisher": "EEF", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitiz", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker's choosing via a <meta http-equiv=\"refresh\"> element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied <meta> elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so i", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00566, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:49.450", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.3"], "fixed": "1.5.3", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66829"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66829.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/9f7e38be51edc38f132dfe994f37af5cf5e0e76f"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-66829"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.46286, "pinned": false}, {"id": "CVE-2026-48071", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the PIN-type challenge throttle uses `emailHash` as the only key. The throttle rows live in the central `challenge_throttle` table, which is shared across all tenants. Every tenant's `/api/tenants/{id}/appointments/verify-challenge` endpoint increments the same row when a PIN response fails, and every tenant's `/api/", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:09.680", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48071"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32647, "pinned": false}, {"id": "CVE-2026-48077", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at `/api/tenants/{id}/appointments/{appointmentId}` performs no authorization check before returning the appointment record. Any party who knows or obtains a valid appointment UUID receives the full row, including channel and agent IDs, time and timezone, status, and the AES-GCM ciphertext components ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00434, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.267", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48077"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.36683, "pinned": false}, {"id": "CVE-2026-70633", "publisher": "VulnCheck", "title": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Goril", "summary": "TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray. Attackers with DML access to a compressed hypertable can trigger an unsigned integer wraparound in the reverse iterator bucket index computation, causing a rea", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00513, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:27.710", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "timescaledb", "vendor": "timescale", "type": "app", "affected": ["<= 2.29.1"], "fixed": "newer than 2.29.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy timescaledb || rpm -q timescaledb || timescaledb --version"}, {"label": "2. UPGRADE to newer than 2.29.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade timescaledb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade timescaledb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70633"}, {"t": "Patch", "u": "https://github.com/timescale/timescaledb/commit/517c13e7cc6afadb4a7deaa7a5a5a29065e5b5a3"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/timescale/timescaledb/pull/10360"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/timescaledb-out-of-bounds-read-dos-via-gorilla-compression-reverse-iterator"}], "cwe": ["CWE-125", "CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.42916, "pinned": false}, {"id": "CVE-2026-70640", "publisher": "VulnCheck", "title": "llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Androi", "summary": "llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llama_context. Attackers can exploit this by performing heap spray with attacker-controlled data containing a fake vtable to hijack the vtable pointer at offset +0x30, causing llam", "cvss": 7.0, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:28.927", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b1886 and <= b7445"], "fixed": "newer than b7445", "safe": "before b1886", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b7445 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b1886 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b1886>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b1886>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70640"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch", "u": "https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388"}, {"t": "Patch, Release Notes", "u": "https://github.com/ggml-org/llama.cpp/releases/tag/b7446"}], "cwe": ["CWE-362", "CWE-476"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.14265, "pinned": false}, {"id": "CVE-2026-71437", "publisher": "GitHub, Inc.", "title": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts", "summary": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulnerable to prototype pollution when a diagram defines a group with an id of __proto__. Because the group id is used directly as an object property key without validation, an attacker who can supply diagram text can pollute Object.prototype, potentially affecting the behavio", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00503, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:30.713", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71437"}], "cwe": ["CWE-1321"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.42182, "pinned": false}, {"id": "CVE-2026-66492", "publisher": "Joomla! Project", "title": "Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitatio", "summary": "Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00557, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T09:16:59.167", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66492"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.45699, "pinned": false}, {"id": "CVE-2026-72712", "publisher": "VulnCheck", "title": "Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers", "summary": "Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00499, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:23.550", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72712"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41916, "pinned": false}, {"id": "CVE-2026-18688", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-boun", "summary": "An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00399, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:22.620", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18688"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129617"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33034, "pinned": false}, {"id": "CVE-2026-18693", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write p", "summary": "An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server accessing memory outside its intended bounds, potentially causing a server crash (denial of service), exposure of limited memory contents, or memory corrupti", "cvss": 7.6, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.450", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18693"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129994"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26261, "pinned": false}, {"id": "CVE-2026-18694", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileg", "summary": "An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memory outside its intended bounds. This could result in a server crash (denial of service) and may expose a limited amount of server process memory.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00399, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.580", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18694"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://jira.mongodb.org/browse/SERVER-130188"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33035, "pinned": false}, {"id": "CVE-2026-18706", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue ag", "summary": "An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, execution of unintended code.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00467, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:25.360", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 8.3.0 and < 8.3.8"], "fixed": "8.3.8", "safe": "before 8.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 8.3.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_8.3.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_8.3.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18706"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-128551"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39503, "pinned": false}, {"id": "CVE-2026-47764", "publisher": "GitHub, Inc.", "title": "pdm is a Python package and dependency manager supporting the latest PEP standards", "summary": "pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A", "cvss": 8.4, "sev": "HIGH", "epss": 0.00197, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:51.093", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47764"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08903, "pinned": false}, {"id": "CVE-2026-70475", "publisher": "GitHub, Inc.", "title": "Flowise is a drag & drop user interface to build a customized large language model flow", "summary": "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware that protects other execution endpoints. Any authenticated user, regardless of assigned permissions, can modify execution state, data, and metadata of any execution in their workspace, enabling privilege escalatio", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:54.170", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70475"}, {"t": "Patch", "u": "https://github.com/FlowiseAI/Flowise/commit/96a9b23b5a103b362a0ee1368d04636755be1bed"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/pull/6409"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fm2f-4339-4p2f"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fm2f-4339-4p2f"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.38756, "pinned": false}, {"id": "CVE-2026-70593", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBase and theme storage name handling. This issue is fixed in version 6.54.1.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:17.290", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70593"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34439, "pinned": false}, {"id": "CVE-2026-71205", "publisher": "TuranSec", "title": "changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with ", "summary": "changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout (no rate-limiting library is present in requirements.txt).", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.463", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71205"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.17579, "pinned": false}, {"id": "CVE-2026-12762", "publisher": "IBM Corporation", "title": "IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obta", "summary": "IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:49.600", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "business automation insights", "vendor": "ibm", "type": "app", "affected": ["24.0.0", "24.0.0 interim_fix001", "24.0.0 interim_fix002", "24.0.0 interim_fix003", "24.0.0 interim_fix004", "24.0.0 interim_fix005", "24.0.0 interim_fix006", "24.0.0 interim_fix007"], "fixed": null, "safe": "before 24.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-automation-insights || rpm -q business-automation-insights || business-automation-insights --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 24.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-automation-insights\nsudo apt install business-automation-insights=<VERSION_BEFORE_24.0.0>\nsudo apt-mark hold business-automation-insights"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-automation-insights\nsudo dnf downgrade business-automation-insights-<VERSION_BEFORE_24.0.0>\nsudo dnf versionlock add business-automation-insights"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12762"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282605"}], "cwe": ["CWE-538"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33297, "pinned": false}, {"id": "CVE-2026-70429", "publisher": "Jenkins Project", "title": "Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names in", "summary": "Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups with names that case-insensitively match other characters to impersonate other users or be granted their permissions in some circumstances.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00419, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:12.560", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "jenkins", "vendor": "jenkins", "type": "app", "affected": ["< 2.568.2", "< 2.576"], "fixed": "2.568.2, 2.576", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jenkins || rpm -q jenkins || jenkins --version"}, {"label": "2. UPGRADE to 2.568.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jenkins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jenkins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70429"}, {"t": "Vendor Advisory", "u": "https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3924"}], "cwe": ["CWE-178"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.3514, "pinned": false}, {"id": "CVE-2026-70439", "publisher": "Jenkins Project", "title": "Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers la", "summary": "Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.713", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70439"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1758, "pinned": false}, {"id": "CVE-2026-19019", "publisher": "VulDB", "title": "A security flaw has been discovered in poco-ai poco-agent up to 0.5.4", "summary": "A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult. The exploit has been released to the public and may b", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00489, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:30.830", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19019"}], "cwe": ["CWE-459"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41207, "pinned": false}, {"id": "CVE-2026-19038", "publisher": "VulDB", "title": "A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0", "summary": "A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshot_element Tool. Such manipulation of the argument output_name leads to path traversal. The attack can be executed remotely. Upgrading to version 1.1.1 is capable of addressing this issue. The name of the patch is 1102172c9adec4a619e241efd6bfb74f5b1f4332. Upgradin", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00496, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:17:27.803", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19038"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4168, "pinned": false}, {"id": "CVE-2026-28146", "publisher": "Patchstack", "title": "Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2", "summary": "Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00443, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.087", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28146"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37499, "pinned": false}, {"id": "CVE-2026-66843", "publisher": "EEF", "title": "Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sa", "summary": "Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an <object> element in sanitized HTML. object is the one URI-bearing element in lib/html_sanitize_ex/scrubber/html5.ex never registered through allow_tag_with_uri_attributes/3, and its only guard is a prefix match on lower", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00512, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:49.627", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.3"], "fixed": "1.5.3", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66843"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66843.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/bec27fec4de99e40c68c4285a610e09e791a3eaf"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-66843"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.4281, "pinned": false}, {"id": "CVE-2026-19142", "publisher": "Chrome", "title": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a use", "summary": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.293", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19142"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21974, "pinned": false}, {"id": "CVE-2026-19158", "publisher": "Chrome", "title": "Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who conv", "summary": "Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.123", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19158"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21975, "pinned": false}, {"id": "CVE-2026-19159", "publisher": "Chrome", "title": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a use", "summary": "Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.230", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19159"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21975, "pinned": false}, {"id": "CVE-2026-48081", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN can store `javascript:` URLs in the tenant `links` configuration (`website`, `imprint`, `privacyStatement`). These values are returned to the patient-facing landing page via `/api/public`, hydrated into the SvelteKit Button component, and rendered as `<a href=\"javascript:...\">` elements without URL-sch", "cvss": 8.1, "sev": "HIGH", "epss": 0.00244, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.850", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48081"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14764, "pinned": false}, {"id": "CVE-2026-61632", "publisher": "GitHub, Inc.", "title": "PyMdown Extensions is a set of extensions for the Python-Markdown markdown project", "summary": "PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by <img src=\"...\"> by joining the src onto the configured base_path with os.path.normpath and opening the result directly, without verifying that the resolved path stays inside base_path. As a result, an src cont", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00403, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:11.410", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61632"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33421, "pinned": false}, {"id": "CVE-2026-71434", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow through a form's assets or files field, and for assets fields, files could be stored on a public, web-accessible disk, though the application's global uplo", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:30.260", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71434"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34348, "pinned": false}, {"id": "CVE-2026-71446", "publisher": "CIRCL", "title": "AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view", "summary": "AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding.\n\nAn attacker who can cause a specially crafted URL to be recorded in the crawler history can inject JavaScript syntax into the stored URL value. The payload remains stored by AIL and is subsequently included ", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.317", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71446"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32671, "pinned": false}, {"id": "CVE-2026-71447", "publisher": "CIRCL", "title": "AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for cha", "summary": "AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts.\n\nThe affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers:\n\nonclick=\"translateMessageToPreferredLanguage('{{ message['id'] }}', '{{ mess_id_escape }}', this)\"\n\nand:\n\nonclick=\"translatePostToPreferredLanguage('{{ post['id'] }}', '{{ post_id_escape }}', this)\"\n", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.460", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71447"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32671, "pinned": false}, {"id": "CVE-2026-71554", "publisher": "GitHub, Inc.", "title": "h2 is a pure-Python implementation of a HTTP/2 protocol stack", "summary": "h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request carries two Host header lines, providing a request smuggling primitive. This issue is fixed in version 4.4.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.403", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71554"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35054, "pinned": false}, {"id": "CVE-2026-66493", "publisher": "Joomla! Project", "title": "Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitatio", "summary": "Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00468, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T09:16:59.300", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66493"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39567, "pinned": false}, {"id": "CVE-2026-9169", "publisher": "Switzerland Government Common Vulnerability Program", "title": "DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to exec", "summary": "DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a required dependency is not found locally.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T09:16:59.430", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9169"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05824, "pinned": false}, {"id": "CVE-2026-54205", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm)\n accepts a ", "summary": "Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm)\n accepts a \u201cpathname\u201d parameter, which can be set to network locations \nusing UNC paths (e.g., \u201c\\\\Server\\Share\u201d). The server processes these \npaths without validation, resulting in outbound connection attempts to \nattacker-controlled SMB servers. This enables authenticated attackers to\n trigger the server to authenticate to arbitrary SMB endpoints, ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00491, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.347", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54205"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4128, "pinned": false}, {"id": "CVE-2026-54206", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc", "summary": "Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a \n@@INCLUDE command, which can be set to network locations using UNC paths\n (e.g., \u201c\\\\Server\\Share\u201d). The server processes these paths without \nvalidation, resulting in outbound connection attempts to \nattacker-controlled SMB servers. This enables authenticated attackers to\n trigger the server to authenticate to arbitrary SMB endpoints, \npotentially e", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00491, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.477", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54206"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4128, "pinned": false}, {"id": "CVE-2026-54207", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (\u201c!ArcEntryMove\u201d) accepts \nan arbitrary", "summary": "Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (\u201c!ArcEntryMove\u201d) accepts \nan arbitrary path, which can be set to network locations using UNC paths\n (e.g., \u201c\\\\Server\\Share\u201d). The server processes these paths without \nvalidation, resulting in outbound connection attempts to \nattacker-controlled SMB servers. This enables au-thenticated attackers \nto trigger the server to authenticate to arbitrary SMB endpoints, \npotentially e", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00491, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:57.610", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54207"}], "cwe": ["CWE-20", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41279, "pinned": false}, {"id": "CVE-2026-16637", "publisher": "CERT/CC", "title": "OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHost", "summary": "OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00457, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T14:16:57.033", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16637"}], "cwe": ["CWE-201", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38661, "pinned": false}, {"id": "CVE-2026-68585", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpo", "summary": "SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID to retrieve the title, notebook, path, root ID, and icon of documents administrators marked as excluded from publishing.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:28.097", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68585"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24331, "pinned": false}, {"id": "CVE-2026-47211", "publisher": "GitHub, Inc.", "title": "Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined po", "summary": "Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code execution and potential system takeover. The vulnerability stems from Ouroboros loading the .env file from the current working directory. Execution-affecting en", "cvss": 8.4, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:24.030", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47211"}], "cwe": ["CWE-426"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08357, "pinned": false}, {"id": "CVE-2026-47781", "publisher": "GitHub, Inc.", "title": "PDM is a Python package and dependency manager", "summary": "PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code before any command is parsed. This happens because load_plugins() runs during Core.init() and adds .pdm-plugins via site.addsitedir(), which processes .pth f", "cvss": 8.4, "sev": "HIGH", "epss": 0.00187, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:51.240", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47781"}], "cwe": ["CWE-94", "CWE-829"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0791, "pinned": false}, {"id": "CVE-2026-70471", "publisher": "GitHub, Inc.", "title": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows", "summary": "Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.540", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70471"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8r8h-6vcc-xhrv"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.34425, "pinned": false}, {"id": "CVE-2026-51400", "publisher": "MITRE", "title": "An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fi", "summary": "An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c", "cvss": 8.4, "sev": "HIGH", "epss": 0.00181, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:36.433", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "vim", "vendor": "vim", "type": "app", "affected": ["<= 9.2.0389"], "fixed": "newer than 9.2.0389", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vim || rpm -q vim || vim --version"}, {"label": "2. UPGRADE to newer than 9.2.0389 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vim"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vim"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51400"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07311, "pinned": false}, {"id": "CVE-2026-55747", "publisher": "TuranSec", "title": "The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.jo", "summary": "The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this affects an illustrative cookbook example rather than a core library API; applications that copy this pattern into production are affected.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00349, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:34.037", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55747"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27285, "pinned": false}, {"id": "CVE-2026-71276", "publisher": "TuranSec", "title": "Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/htt", "summary": "Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolates it directly into raw SQL queries via fmt.Sprintf in both the PostgreSQL reader (readers/postgres/messages.go: ) and the TimescaleDB reader (readers/timescale/messages.go, same pattern), enabling SQL injection by any authenticated user able to query channel messages.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.080", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71276"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.24146, "pinned": false}, {"id": "CVE-2026-18531", "publisher": "IBM Corporation", "title": "IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due t", "summary": "IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00378, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:54.290", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "maximo application suite", "vendor": "ibm", "type": "app", "affected": [">= 9.0 and < 9.0.28", ">= 9.1 and < 9.1.20", "9.2"], "fixed": "9.0.28, 9.1.20", "safe": "before 9.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy maximo-application-suite || rpm -q maximo-application-suite || maximo-application-suite --version"}, {"label": "2. UPGRADE to 9.0.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade maximo-application-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade maximo-application-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0 (Debian / Ubuntu)", "cmd": "apt-cache madison maximo-application-suite\nsudo apt install maximo-application-suite=<VERSION_BEFORE_9.0>\nsudo apt-mark hold maximo-application-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list maximo-application-suite\nsudo dnf downgrade maximo-application-suite-<VERSION_BEFORE_9.0>\nsudo dnf versionlock add maximo-application-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18531"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282362"}], "cwe": ["CWE-330"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30578, "pinned": false}, {"id": "CVE-2026-39924", "publisher": "VulnCheck", "title": "Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a ", "summary": "Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a victim changes their password, because the access_tokens table is never cleared on password change events. The TokensClearer::clearPasswordTokens() function only removes rows from the password_tokens table while leaving all active session cookies and API bearer tokens intact, inclu", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:56.137", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39924"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30057, "pinned": false}, {"id": "CVE-2026-70448", "publisher": "Jenkins Project", "title": "Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XX", "summary": "Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.687", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70448"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.24262, "pinned": false}, {"id": "CVE-2026-8470", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 us", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for identical seeds, allowing attackers to reproduce encryption keys and decrypt stored API keys and authentication tokens.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00111, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:44.823", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8470"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282648"}], "cwe": ["CWE-327"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.01244, "pinned": false}, {"id": "CVE-2026-18996", "publisher": "VulDB", "title": "A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12", "summary": "A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component run_command Handler. Such manipulation leads to incorrect privilege assignment. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early throu", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T05:16:42.087", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18996"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35947, "pinned": false}, {"id": "CVE-2026-19008", "publisher": "VulDB", "title": "A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1", "summary": "A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component apply_patch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00435, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:30.087", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.36721, "pinned": false}, {"id": "CVE-2026-19040", "publisher": "VulDB", "title": "A flaw has been found in MissionSquad mcp-api up to 1.11.9", "summary": "A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to fix this issue. This patch is called f068ab4ad6f0907ac7001b995588c2673f11a755. You should upgrade the affected component.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:36.043", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19040"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35947, "pinned": false}, {"id": "CVE-2026-65554", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in AnsPress \u2013 Question and answer 4.4.4 versions.", "summary": "Subscriber Broken Access Control in AnsPress \u2013 Question and answer 4.4.4 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:17.677", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65554"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.26074, "pinned": false}, {"id": "CVE-2026-66470", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.", "summary": "Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.720", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66470"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.23878, "pinned": false}, {"id": "CVE-2026-18275", "publisher": "GitLab Inc.", "title": "Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.", "summary": "Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True related field whose queryset restriction was applied to the ManyRelatedField instead of its child_relation and therefore had no effect", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:37.853", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "escriptorium", "vendor": "escriptorium", "type": "app", "affected": ["<= 26.04.1"], "fixed": "newer than 26.04.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy escriptorium || rpm -q escriptorium || escriptorium --version"}, {"label": "2. UPGRADE to newer than 26.04.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade escriptorium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade escriptorium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18275"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.31994, "pinned": false}, {"id": "CVE-2026-43622", "publisher": "VulnCheck", "title": "llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper wher", "summary": "llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00231, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:42.883", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b1886 and <= b7445"], "fixed": "newer than b7445", "safe": "before b1886", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b7445 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b1886 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b1886>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b1886>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43622"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch", "u": "https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388"}, {"t": "Patch, Release Notes", "u": "https://github.com/ggml-org/llama.cpp/releases/tag/b7446"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/llama-cpp-b1886-b7445-double-free-via-llama-android-cpp"}], "cwe": ["CWE-415", "CWE-762"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13137, "pinned": false}, {"id": "CVE-2026-68747", "publisher": "EEF", "title": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerabili", "summary": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to inject CSS at-rules, including an import of a remote stylesheet, into a page served to other users. HtmlSanitizeEx.Scrubber.CSS.scrub/1 applies its property and value allowlist through a Regex.replace over substrings matching a property: value d", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00448, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:51.533", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.4"], "fixed": "1.5.4", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68747"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-68747.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/0b9f9ad63a7529d4f2c3c1134c371adc3e654308"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-68747"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37994, "pinned": false}, {"id": "CVE-2026-19143", "publisher": "Chrome", "title": "Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allo", "summary": "Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)", "cvss": 8.6, "sev": "HIGH", "epss": 0.00129, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.423", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19143"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02335, "pinned": false}, {"id": "CVE-2026-19165", "publisher": "Chrome", "title": "Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user", "summary": "Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.920", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19165"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17534, "pinned": false}, {"id": "CVE-2026-43628", "publisher": "VulnCheck", "title": "llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the ", "summary": "llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dry_allowed_length set to INT32_MIN to the /v1/completions or /v1/chat/completions endpoints. Attackers can exploit this vulnerability to crash the server with SIGSEGV causing denial of service for all connected user", "cvss": 7.8, "sev": "HIGH", "epss": 0.00234, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:05.777", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b3978 and <= b9058"], "fixed": "newer than b9058", "safe": "before b3978", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b9058 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b3978 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b3978>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b3978>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43628"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/llama-cpp-b3978-b9058-integer-underflow-via-dry-sampler"}], "cwe": ["CWE-125", "CWE-191"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1355, "pinned": false}, {"id": "CVE-2026-50159", "publisher": "GitHub, Inc.", "title": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts", "summary": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text can inject arbitrary CSS into the rendered page, potentially altering the appearance or behavior of unrelated page elements. This issue is fixed in versio", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00603, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:17.180", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50159"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.48188, "pinned": false}, {"id": "CVE-2026-64662", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could view content from entries they did not have permission to view, including entry content and custom field values, from any collection and including unpublished entries, through the navigation endpoint, though no data could be modified. This issue is fixed in versions 5.74.1 and 6.24.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00415, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:13.673", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64662"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34747, "pinned": false}, {"id": "CVE-2026-70557", "publisher": "VulnCheck", "title": "diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField ", "summary": "diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck(), returns true unconditionally, so any authenticated user (including a zero-role account) can read @JsonIgnore-annotated secret fields such as IamAccount.authSecret and IamAccount.secretSalt for every ac", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:26.077", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70557"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31399, "pinned": false}, {"id": "CVE-2026-70638", "publisher": "VulnCheck", "title": "llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrappe", "summary": "llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validation, causing heap buffer allocation to wrap and allocate insufficient memory. Attackers can exploit this by providing a crafted n_seq_max value through a malicious model file or JNI call to trigger heap c", "cvss": 7.8, "sev": "HIGH", "epss": 0.00231, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:28.633", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b1886 and <= b7445"], "fixed": "newer than b7445", "safe": "before b1886", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b7445 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b1886 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b1886>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b1886>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70638"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch", "u": "https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388"}, {"t": "Patch, Release Notes", "u": "https://github.com/ggml-org/llama.cpp/releases/tag/b7446"}], "cwe": ["CWE-122", "CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13137, "pinned": false}, {"id": "CVE-2026-18695", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaF", "summary": "An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.717", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18695"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129460"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33333, "pinned": false}, {"id": "CVE-2026-18696", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default priv", "summary": "An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.004, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:23.853", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18696"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130139"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33158, "pinned": false}, {"id": "CVE-2026-18699", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cau", "summary": "An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connected clients and in-flight operations.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.270", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18699"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130266"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33331, "pinned": false}, {"id": "CVE-2026-18700", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to ", "summary": "An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result in a server crash, leading to a denial of service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.417", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18700"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130117"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33333, "pinned": false}, {"id": "CVE-2026-18701", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause t", "summary": "An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.580", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18701"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130111"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33332, "pinned": false}, {"id": "CVE-2026-69087", "publisher": "VulnCheck", "title": "The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability", "summary": "The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect() accepts external URLs without origin validation. When a form blueprint defines a redirect target such as redirect: \"{{ form.value('next') }}\" using an attacker-controllable field, an unauthenticated form submitter can supply", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T14:16:29.103", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69087"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2952, "pinned": false}, {"id": "CVE-2026-68930", "publisher": "GitHub, Inc.", "title": "Russh is a Rust SSH client & server library", "summary": "Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in russh/src/server/encrypted.rs, server_read_authenticated, and the exec_request callback. Version 0.62.5 fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:44.843", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68930"}], "cwe": ["CWE-666", "CWE-696", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30374, "pinned": false}, {"id": "CVE-2026-18631", "publisher": "VulDB", "title": "A vulnerability was identified in jeequan jeepay up to 3.2.9", "summary": "A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00397, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:16.577", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18631"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32714, "pinned": false}, {"id": "CVE-2026-18632", "publisher": "VulDB", "title": "A security flaw has been discovered in langgenius dify up to 1.14.2", "summary": "A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/code_executor/jinja2/jinja2_transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used in a template engine. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was conta", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00393, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:16.757", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18632"}], "cwe": ["CWE-791", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32256, "pinned": false}, {"id": "CVE-2026-18644", "publisher": "VulDB", "title": "A vulnerability was identified in danpros HTMLy up to 3.1.1", "summary": "A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00542, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:17.210", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18644"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.44776, "pinned": false}, {"id": "CVE-2026-62354", "publisher": "Apache Software Foundation", "title": "Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows c", "summary": "Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation methods with alternative settings. Apache NiFi installations that do not implement different levels of authorization for viewing and modifying Parameter ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00454, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T20:17:25.530", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "nifi", "vendor": "apache", "type": "app", "affected": [">= 1.10.0 and < 2.11.0"], "fixed": "2.11.0", "safe": "before 1.10.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nifi || rpm -q nifi || nifi --version"}, {"label": "2. UPGRADE to 2.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nifi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nifi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.10.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nifi\nsudo apt install nifi=<VERSION_BEFORE_1.10.0>\nsudo apt-mark hold nifi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nifi\nsudo dnf downgrade nifi-<VERSION_BEFORE_1.10.0>\nsudo dnf versionlock add nifi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62354"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/l17xcnnf1rm7qljmypyjxmh62cx4o4wj"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38456, "pinned": false}, {"id": "CVE-2026-18645", "publisher": "VulDB", "title": "A security flaw has been discovered in danpros HTMLy up to 3.1.1", "summary": "A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any w", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00542, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:37.283", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18645"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.44775, "pinned": false}, {"id": "CVE-2026-18775", "publisher": "VulDB", "title": "A vulnerability has been found in NousResearch hermes-agent up to 0.16.0", "summary": "A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browser_snapshot of the file tools/browser_tool.py of the component Browser Tooling. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00378, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:48.287", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30575, "pinned": false}, {"id": "CVE-2026-48121", "publisher": "GitHub, Inc.", "title": "@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses Mongo", "summary": "@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable are passed into MongoDB find() queries in MongoDBSaver.getTuple() without type enforcement. If an attacker supplies an object payload (such as MongoDB operators $gt or $ne) i", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:55.267", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48121"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28011, "pinned": false}, {"id": "CVE-2026-64634", "publisher": "HackerOne", "title": "A vulnerability allowing local privilege escalation to the Reporter service context.", "summary": "A vulnerability allowing local privilege escalation to the Reporter service context.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00144, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:58.347", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64634"}], "cwe": ["CWE-269"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03363, "pinned": false}, {"id": "CVE-2026-71192", "publisher": "MITRE", "title": "In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy", "summary": "In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true. An\nattacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a server-side copy from another tenant's private object. The source object authorization is bypassed because the S3API middleware has already authorized the ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00439, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:40.333", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71192"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3714, "pinned": false}, {"id": "CVE-2026-55998", "publisher": "SUSE", "title": "The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token", "summary": "The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00343, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:34.460", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55998"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.266, "pinned": false}, {"id": "CVE-2026-49331", "publisher": "Red Hat, Inc.", "title": "A flaw was found in openshift/oauth-proxy", "summary": "A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to the upstream application without stripping them. An unauthenticated attacker can inject forged identity headers on whitelisted paths.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:57.330", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49331"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07732, "pinned": false}, {"id": "CVE-2026-7657", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplet", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00375, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:15.890", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7657"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282650"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30315, "pinned": false}, {"id": "CVE-2026-9081", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) ", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider. The function accepts a user-supplied OLLAMA_BASE_URL parameter and passes it directly to requests.get() without validation, scheme/host allowlisting, or filtering of private IP ranges (loopback, RFC1918, link-local addresses).", "cvss": 7.1, "sev": "HIGH", "epss": 0.00306, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:16.130", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9081"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282650"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22236, "pinned": false}, {"id": "CVE-2026-9130", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent tha", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/*, ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00297, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:46.797", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9130"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282647"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21263, "pinned": false}, {"id": "CVE-2026-55522", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow \"include\" feature is vulnerable to code execution. Workflow._execute_include() implicitly imports and runs an included recipe's tools.py via a raw importlib.util.spec_from_file_location() and spec.loader.exec_module() call, without honoring the PRAISONAI_ALLOW_TEMPLATE_TOOLS/PRAISONAI_ALLOW_LOCAL_TO", "cvss": 7.8, "sev": "HIGH", "epss": 0.00224, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:10.453", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55522"}], "cwe": ["CWE-94", "CWE-426", "CWE-829"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1232, "pinned": false}, {"id": "CVE-2026-18959", "publisher": "VulDB", "title": "A flaw has been found in yushine InnoShop up to 0.8.2", "summary": "A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php of the component Files Endpoint. This manipulation causes path traversal. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00542, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T21:16:58.003", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18959"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.44775, "pinned": false}, {"id": "CVE-2026-19024", "publisher": "HDFG", "title": "NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of servi", "summary": "NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the \"defined\" flag set together with a negative size field, which is not normalized to the library's \"undefined\" sentinel and reaches H5T_path_find with a NULL datatype.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.343", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19024"}], "cwe": ["CWE-476"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05845, "pinned": false}, {"id": "CVE-2026-18993", "publisher": "VulDB", "title": "A vulnerability was detected in NousResearch hermes-agent up to 0.16.0", "summary": "A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T05:16:41.380", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3021, "pinned": false}, {"id": "CVE-2026-55978", "publisher": "CSA", "title": "An improper access control vulnerability in\u00a0CatchPulse\u00a0could allow a non-administrative local\u202fattacker to conn", "summary": "An improper access control vulnerability in\u00a0CatchPulse\u00a0could allow a non-administrative local\u202fattacker to connect to an unrestricted kernel filter communication port and bypass\u00a0CatchPulse's\u00a0security policy enforcement.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00148, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T10:16:43.910", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55978"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0365, "pinned": false}, {"id": "CVE-2026-28169", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.", "summary": "Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.223", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28169"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.249, "pinned": false}, {"id": "CVE-2026-32469", "publisher": "Patchstack", "title": "Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.", "summary": "Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00329, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.333", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32469"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24764, "pinned": false}, {"id": "CVE-2026-66683", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.", "summary": "Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.600", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66683"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24903, "pinned": false}, {"id": "CVE-2026-66684", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.", "summary": "Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.723", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66684"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24908, "pinned": false}, {"id": "CVE-2026-66685", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.", "summary": "Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.853", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66685"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24911, "pinned": false}, {"id": "CVE-2026-66370", "publisher": "EEF", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitiz", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an <input> element in sanitized HTML. HTML's form attribute associates an input with any form on the page by its id even when the input si", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00403, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:48.420", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "htmlsanitizeex", "vendor": "rrrene", "type": "app", "affected": [">= 0.3.1 and < 1.5.3"], "fixed": "1.5.3", "safe": "before 0.3.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy htmlsanitizeex || rpm -q htmlsanitizeex || htmlsanitizeex --version"}, {"label": "2. UPGRADE to 1.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade htmlsanitizeex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade htmlsanitizeex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.3.1 (Debian / Ubuntu)", "cmd": "apt-cache madison htmlsanitizeex\nsudo apt install htmlsanitizeex=<VERSION_BEFORE_0.3.1>\nsudo apt-mark hold htmlsanitizeex"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list htmlsanitizeex\nsudo dnf downgrade htmlsanitizeex-<VERSION_BEFORE_0.3.1>\nsudo dnf versionlock add htmlsanitizeex"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66370"}, {"t": "Patch, Third Party Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66370.html"}, {"t": "Patch", "u": "https://github.com/rrrene/html_sanitize_ex/commit/a1e804ed997e780ea71d14393cf2f701330553a6"}, {"t": "Patch, Third Party Advisory", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-66370"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33408, "pinned": false}, {"id": "CVE-2026-19156", "publisher": "Chrome", "title": "Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user", "summary": "Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.0025, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:57.893", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19156"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15484, "pinned": false}, {"id": "CVE-2026-43627", "publisher": "VulnCheck", "title": "llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() funct", "summary": "llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundari", "cvss": 7.8, "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:05.633", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b1283 and <= b9058"], "fixed": "newer than b9058", "safe": "before b1283", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b9058 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b1283 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b1283>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b1283>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43627"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Mitigation, Patch", "u": "https://www.vulncheck.com/advisories/llama-cpp-b1283-b9058-integer-overflow-in-llama-batch-init-function"}], "cwe": ["CWE-190", "CWE-680"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09499, "pinned": false}, {"id": "CVE-2026-48078", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the unauthenticated `/api/tenants/{id}/schedule` endpoint returns every non-archived channel for a tenant regardless of the channel's `isPublic` flag. Channels marked `isPublic = false` are intended to be invisible to public callers; the dashboard creates them deliberately to hide internal-only services from the pati", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00343, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.420", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48078"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26599, "pinned": false}, {"id": "CVE-2026-71436", "publisher": "GitHub, Inc.", "title": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts", "summary": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulnerable to an infinite loop denial of service in the setXAxisRangeData function when configuring an X-Axis with invalid parameters. Because each loop iteration appends an element to an array, this generally causes a RangeError to appear after a few seconds, but it may instea", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00581, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:30.563", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71436"}], "cwe": ["CWE-835", "CWE-1325"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.47068, "pinned": false}, {"id": "CVE-2026-71439", "publisher": "GitHub, Inc.", "title": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts", "summary": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CPU usage and freeze the rendering webpage or JavaScript process for long periods of time, potentially until the process is killed from memory exhaustion. This issue is fixed in version 11.16.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00528, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.023", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71439"}], "cwe": ["CWE-606", "CWE-1322"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.43878, "pinned": false}, {"id": "CVE-2026-18705", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to", "summary": "An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00363, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:25.207", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18705"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129618"}], "cwe": ["CWE-807"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28974, "pinned": false}, {"id": "CVE-2026-18243", "publisher": "HP Inc.", "title": "Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow una", "summary": "Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:33.610", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18243"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20213, "pinned": false}, {"id": "CVE-2026-18606", "publisher": "VulDB", "title": "A weakness has been identified in Razer RzUpdateService 1.10.14.0", "summary": "A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\\Program Files (x86)\\Razer\\RzUpdateEngineService\\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument lpThreadParameter can lead to improper privilege management. The attack requires local access. The exploit has been made available to the public and could be used ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:35.727", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18606"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05083, "pinned": false}, {"id": "CVE-2026-59913", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication", "summary": "Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00167, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T19:16:48.193", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.1005"], "fixed": "2.3.0.1005", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.1005 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59913"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490035/dsa-2026-319"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.05642, "pinned": false}, {"id": "CVE-2026-41447", "publisher": "VulnCheck", "title": "FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to exe", "summary": "FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\\Program Files (x86)\\Common Files\\SSL\\ directory path. Attackers can write a malicious OpenSSL configuration file referencing an attacker-controlled DLL to achieve code execution at startup process privilege level when FirmaCheck.exe runs automatically at syste", "cvss": 7.8, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:38.947", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41447"}], "cwe": ["CWE-426"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05824, "pinned": false}, {"id": "CVE-2026-18774", "publisher": "VulDB", "title": "A flaw has been found in NousResearch hermes-agent up to 0.16.0", "summary": "A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_image of the file agent/image_gen_provider.py of the component xAI Image Generation Provider. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:48.127", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27126, "pinned": false}, {"id": "CVE-2026-69704", "publisher": "VulnCheck", "title": "Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by pas", "summary": "Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized database operations including data deletion and extraction.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:54.280", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69704"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25283, "pinned": false}, {"id": "CVE-2026-51401", "publisher": "MITRE", "title": "An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fi", "summary": "An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c", "cvss": 7.7, "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:36.567", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "vim", "vendor": "vim", "type": "app", "affected": ["<= 9.2.0389"], "fixed": "newer than 9.2.0389", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vim || rpm -q vim || vim --version"}, {"label": "2. UPGRADE to newer than 9.2.0389 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vim"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vim"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51401"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09581, "pinned": false}, {"id": "CVE-2026-18818", "publisher": "VulDB", "title": "A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26", "summary": "A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by th", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00365, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T23:16:51.300", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18818"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29149, "pinned": false}, {"id": "CVE-2026-71203", "publisher": "TuranSec", "title": "changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller'", "summary": "changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.203", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71203"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22968, "pinned": false}, {"id": "CVE-2026-71261", "publisher": "TuranSec", "title": "dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata ", "summary": "dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_CUE_POINT_BYTES; on 32-bit builds this truncation causes the pre-allocated extra metadata capacity to be computed incorrectly.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:50.233", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71261"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06501, "pinned": false}, {"id": "CVE-2026-71266", "publisher": "TuranSec", "title": "tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material fil", "summary": "tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:50.843", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71266"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06502, "pinned": false}, {"id": "CVE-2026-71293", "publisher": "TuranSec", "title": "Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an expli", "summary": "Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-factor recovery codes with no access restriction.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00372, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:54.060", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71293"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29948, "pinned": false}, {"id": "CVE-2026-12410", "publisher": "NortonLifeLock Inc.", "title": "Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a l", "summary": "Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T15:16:35.833", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12410"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06551, "pinned": false}, {"id": "CVE-2026-7326", "publisher": "Progress Software Corporation", "title": "A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0", "summary": "A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00214, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:08.930", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "marklogic server", "vendor": "progress", "type": "app", "affected": ["< 11.3.6", ">= 12.0.0 and < 12.0.3"], "fixed": "11.3.6, 12.0.3", "safe": "before 12.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marklogic-server || rpm -q marklogic-server || marklogic-server --version"}, {"label": "2. UPGRADE to 11.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marklogic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marklogic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison marklogic-server\nsudo apt install marklogic-server=<VERSION_BEFORE_12.0.0>\nsudo apt-mark hold marklogic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marklogic-server\nsudo dnf downgrade marklogic-server-<VERSION_BEFORE_12.0.0>\nsudo dnf versionlock add marklogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7326"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11178, "pinned": false}, {"id": "CVE-2026-18927", "publisher": "VulDB", "title": "A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce61", "summary": "A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the function storeProfileImage of the file student_profile_pic.php of the component Shared Upload Helper. Executing a manipulation of the argument choose_file can lead to unrestricted upload. The attack can be executed remotely. The exploit has been publicly disclosed and may be", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:46.240", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18927"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27127, "pinned": false}, {"id": "CVE-2026-10547", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/buil", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized workflow execution, or denial of service.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00405, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:19.847", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10547"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282647"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33615, "pinned": false}, {"id": "CVE-2026-18485", "publisher": "National Instruments", "title": "There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.\u00a0\u00a0This may", "summary": "There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.\u00a0\u00a0This may allow a local, authenticated user to escalate privileges and execute arbitrary code.\u00a0\u00a0This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00167, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:29.170", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18485"}], "cwe": ["CWE-1285"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05674, "pinned": false}, {"id": "CVE-2026-18976", "publisher": "VulDB", "title": "A vulnerability was determined in NousResearch hermes-agent up to 0.16.0", "summary": "A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the component disabled_toolsets Handler. This manipulation causes incorrect privilege assignment. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T02:16:41.430", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29266, "pinned": false}, {"id": "CVE-2026-18992", "publisher": "VulDB", "title": "A vulnerability was detected in zhayujie CowAgent up to 2.1.1", "summary": "A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carried out remotely. The exploit is now public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T05:16:41.157", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18992"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29253, "pinned": false}, {"id": "CVE-2026-18997", "publisher": "VulDB", "title": "A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12", "summary": "A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded y", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T06:16:32.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18997"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29271, "pinned": false}, {"id": "CVE-2026-18998", "publisher": "VulDB", "title": "A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12", "summary": "A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_task Tool. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded ye", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T06:16:32.790", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18998"}], "cwe": ["CWE-266", "CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29261, "pinned": false}, {"id": "CVE-2026-19005", "publisher": "VulDB", "title": "A vulnerability was detected in nanocoai NanoClaw up to 2.0.64", "summary": "A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T07:16:29.583", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29257, "pinned": false}, {"id": "CVE-2026-19006", "publisher": "VulDB", "title": "A vulnerability was found in mf-yang openclaw-cn 2026.2.5", "summary": "A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T07:16:29.780", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29256, "pinned": false}, {"id": "CVE-2026-19007", "publisher": "VulDB", "title": "A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1", "summary": "A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/reply/reply-elevated.ts. This manipulation causes improper privilege management. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T07:16:29.947", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29265, "pinned": false}, {"id": "CVE-2026-28082", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:51.770", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28082"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1561, "pinned": false}, {"id": "CVE-2026-28143", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:52.963", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28143"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15665, "pinned": false}, {"id": "CVE-2026-28177", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.527", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28177"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15612, "pinned": false}, {"id": "CVE-2026-28180", "publisher": "Patchstack", "title": "Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 ver", "summary": "Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.937", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28180"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.2296, "pinned": false}, {"id": "CVE-2026-32548", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.", "summary": "Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:54.497", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32548"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22957, "pinned": false}, {"id": "CVE-2026-61961", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:12.950", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61961"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15669, "pinned": false}, {"id": "CVE-2026-61963", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:14.190", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61963"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15669, "pinned": false}, {"id": "CVE-2026-61964", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:14.323", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61964"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15669, "pinned": false}, {"id": "CVE-2026-65513", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.233", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65513"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.156, "pinned": false}, {"id": "CVE-2026-65517", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:15.483", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65517"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.156, "pinned": false}, {"id": "CVE-2026-65544", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.233", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65544"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15599, "pinned": false}, {"id": "CVE-2026-65545", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:16.360", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65545"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15661, "pinned": false}, {"id": "CVE-2026-65560", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.060", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65560"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1565, "pinned": false}, {"id": "CVE-2026-65565", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:18.183", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65565"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15684, "pinned": false}, {"id": "CVE-2026-66439", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:19.937", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66439"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15599, "pinned": false}, {"id": "CVE-2026-66440", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WPIDE \u2013 File Manager & Code Editor <= 3.5.7 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WPIDE \u2013 File Manager & Code Editor <= 3.5.7 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.057", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66440"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15602, "pinned": false}, {"id": "CVE-2026-66457", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.590", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66457"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15623, "pinned": false}, {"id": "CVE-2026-66663", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:20.977", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66663"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15608, "pinned": false}, {"id": "CVE-2026-66664", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.103", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66664"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1562, "pinned": false}, {"id": "CVE-2026-66690", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.230", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66690"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1563, "pinned": false}, {"id": "CVE-2026-66694", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.483", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66694"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15663, "pinned": false}, {"id": "CVE-2026-66699", "publisher": "Patchstack", "title": "Custom role Broken Access Control in Dokan <= 5.0.10 versions.", "summary": "Custom role Broken Access Control in Dokan <= 5.0.10 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.853", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66699"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20894, "pinned": false}, {"id": "CVE-2026-66701", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.", "summary": "Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.987", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66701"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20897, "pinned": false}, {"id": "CVE-2026-66705", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.423", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66705"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1566, "pinned": false}, {"id": "CVE-2026-66707", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.670", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66707"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15659, "pinned": false}, {"id": "CVE-2026-66711", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:24.187", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66711"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15659, "pinned": false}, {"id": "CVE-2026-11803", "publisher": "Autodesk", "title": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerabil", "summary": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:44.967", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "revit", "vendor": "autodesk", "type": "app", "affected": [">= 2024 and < 2024.3.6", ">= 2025 and < 2025.4.6", ">= 2026 and < 2026.5", ">= 2027 and < 2027.2"], "fixed": "2024.3.6, 2025.4.6, 2026.5, 2027.2", "safe": "before 2024", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy revit || rpm -q revit || revit --version"}, {"label": "2. UPGRADE to 2024.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade revit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade revit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2024 (Debian / Ubuntu)", "cmd": "apt-cache madison revit\nsudo apt install revit=<VERSION_BEFORE_2024>\nsudo apt-mark hold revit"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list revit\nsudo dnf downgrade revit-<VERSION_BEFORE_2024>\nsudo dnf versionlock add revit"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11803"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08545, "pinned": false}, {"id": "CVE-2026-19065", "publisher": "VulDB", "title": "A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0", "summary": "A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file upload_files.php. This manipulation causes unrestricted upload. The attack may be initiated remotely.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:53.773", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19065"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27119, "pinned": false}, {"id": "CVE-2026-1289", "publisher": "Autodesk", "title": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability", "summary": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:00.373", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "revit", "vendor": "autodesk", "type": "app", "affected": [">= 2024 and < 2024.3.6", ">= 2025 and < 2025.4.6", ">= 2026 and < 2026.5", ">= 2027 and < 2027.2"], "fixed": "2024.3.6, 2025.4.6, 2026.5, 2027.2", "safe": "before 2024", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy revit || rpm -q revit || revit --version"}, {"label": "2. UPGRADE to 2024.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade revit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade revit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2024 (Debian / Ubuntu)", "cmd": "apt-cache madison revit\nsudo apt install revit=<VERSION_BEFORE_2024>\nsudo apt-mark hold revit"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list revit\nsudo dnf downgrade revit-<VERSION_BEFORE_2024>\nsudo dnf versionlock add revit"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-1289"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08545, "pinned": false}, {"id": "CVE-2026-7406", "publisher": "Autodesk", "title": "A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer D", "summary": "A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.837", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "advance steel", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advance-steel || rpm -q advance-steel || advance-steel --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade advance-steel"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade advance-steel"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison advance-steel\nsudo apt install advance-steel=<VERSION_BEFORE_2027>\nsudo apt-mark hold advance-steel"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advance-steel\nsudo dnf downgrade advance-steel-<VERSION_BEFORE_2027>\nsudo dnf versionlock add advance-steel"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad || rpm -q autocad || autocad --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad\nsudo apt install autocad=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad\nsudo dnf downgrade autocad-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad architecture", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-architecture || rpm -q autocad-architecture || autocad-architecture --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-architecture"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-architecture"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-architecture\nsudo apt install autocad-architecture=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-architecture"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-architecture\nsudo dnf downgrade autocad-architecture-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-architecture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad electrical", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-electrical || rpm -q autocad-electrical || autocad-electrical --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-electrical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-electrical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-electrical\nsudo apt install autocad-electrical=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-electrical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-electrical\nsudo dnf downgrade autocad-electrical-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-electrical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad lt", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-lt || rpm -q autocad-lt || autocad-lt --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-lt"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-lt"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-lt\nsudo apt install autocad-lt=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-lt"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-lt\nsudo dnf downgrade autocad-lt-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-lt"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad map 3d", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-map-3d || rpm -q autocad-map-3d || autocad-map-3d --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-map-3d"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-map-3d"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-map-3d\nsudo apt install autocad-map-3d=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-map-3d"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-map-3d\nsudo dnf downgrade autocad-map-3d-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-map-3d"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7406"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012"}], "cwe": ["CWE-822"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08544, "pinned": false}, {"id": "CVE-2026-8325", "publisher": "Autodesk", "title": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerabi", "summary": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:33.243", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "revit", "vendor": "autodesk", "type": "app", "affected": [">= 2024 and < 2024.3.6", ">= 2025 and < 2025.4.6", ">= 2026 and < 2026.5", ">= 2027 and < 2027.2"], "fixed": "2024.3.6, 2025.4.6, 2026.5, 2027.2", "safe": "before 2024", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy revit || rpm -q revit || revit --version"}, {"label": "2. UPGRADE to 2024.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade revit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade revit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2024 (Debian / Ubuntu)", "cmd": "apt-cache madison revit\nsudo apt install revit=<VERSION_BEFORE_2024>\nsudo apt-mark hold revit"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list revit\nsudo dnf downgrade revit-<VERSION_BEFORE_2024>\nsudo dnf versionlock add revit"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8325"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08543, "pinned": false}, {"id": "CVE-2026-19189", "publisher": "VulDB", "title": "A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0", "summary": "A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\\Windows\\System32\\drivers\\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege management. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T03:16:18.450", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19189"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05082, "pinned": false}, {"id": "CVE-2026-45198", "publisher": "imaginationtech", "title": "Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, m", "summary": "Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory.\n\n\n\nThe GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00176, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T03:16:19.810", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-45198"}], "cwe": ["CWE-822"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06782, "pinned": false}, {"id": "CVE-2026-19193", "publisher": "VulDB", "title": "A flaw has been found in Jiangmin Antivirus 21", "summary": "A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T05:17:01.710", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19193"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05082, "pinned": false}, {"id": "CVE-2026-19195", "publisher": "VulDB", "title": "A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39", "summary": "A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T05:17:01.890", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19195"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05081, "pinned": false}, {"id": "CVE-2026-15570", "publisher": "Vestel", "title": "An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefu", "summary": "An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue requests to unintended loopback/internal destinations, including 127.0.0.1 addresses. In demonstrated scenarios, requests initiated through the SmartCenter", "cvss": 7.1, "sev": "HIGH", "epss": 0.00258, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T14:16:56.890", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15570"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1658, "pinned": false}, {"id": "CVE-2026-59912", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Contr", "summary": "Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T19:16:48.050", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.1005"], "fixed": "2.3.0.1005", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.1005 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59912"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490035/dsa-2026-319"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03792, "pinned": false}, {"id": "CVE-2026-18737", "publisher": "VulnCheck", "title": "Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arb", "summary": "Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated direction value in the orderBy query parameter of the tag statistics endpoint. Attackers can craft a malicious direction string containing SQL subqueries that flows unsanitized into a Doctrine QueryBuilder ORDER BY clause, enabling time-based, boolean-oracle, and error-based extraction of s", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:38.240", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18737"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21663, "pinned": false}, {"id": "CVE-2026-15920", "publisher": "Django Software Foundation", "title": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\n`django.contrib.admin.utils.display_", "summary": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\n`django.contrib.admin.utils.display_for_field()` renders `URLField` values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin pages, which allows cross-site scripting against staff users who click the link.\r\nExploitation requires the unsafe value to already be stored in th", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:46.733", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "django", "vendor": "djangoproject", "type": "app", "affected": [">= 5.2 and < 5.2.17", ">= 6.0 and < 6.0.8"], "fixed": "5.2.17, 6.0.8", "safe": "before 5.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy django || rpm -q django || django --version"}, {"label": "2. UPGRADE to 5.2.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade django"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade django"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.2 (Debian / Ubuntu)", "cmd": "apt-cache madison django\nsudo apt install django=<VERSION_BEFORE_5.2>\nsudo apt-mark hold django"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list django\nsudo dnf downgrade django-<VERSION_BEFORE_5.2>\nsudo dnf versionlock add django"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15920"}, {"t": "Patch, Vendor Advisory", "u": "https://docs.djangoproject.com/en/dev/releases/security/"}, {"t": "Patch", "u": "https://github.com/django/django/commit/13debb622a32720bda1bccda7622fd14fbf3931b"}, {"t": "Patch", "u": "https://github.com/django/django/commit/47511a21026cdd721d8fbf8571cc079bc38bb46d"}, {"t": "Patch", "u": "https://github.com/django/django/commit/5a260d309a4c8010c2ebda24eb758a5d95e2508a"}, {"t": "Patch", "u": "https://github.com/django/django/commit/b9adb81339cc418f8f56b1050cca6dfec3ab6349"}, {"t": "Vendor Advisory", "u": "https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"}], "cwe": ["CWE-83"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27961, "pinned": false}, {"id": "CVE-2026-70592", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database backup filename, leading to integrity and availability issues. The database export endpoint failed to reject path separators in the caller-supplied filename. This issue is fixed in version 6.54.1.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00437, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:17.140", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70592"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3694, "pinned": false}, {"id": "CVE-2026-18896", "publisher": "VulDB", "title": "A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0", "summary": "A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T02:16:37.593", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18896"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23345, "pinned": false}, {"id": "CVE-2026-71204", "publisher": "TuranSec", "title": "changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merg", "summary": "changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.0032, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:42.327", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71204"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23766, "pinned": false}, {"id": "CVE-2026-19020", "publisher": "VulDB", "title": "A weakness has been identified in itsourcecode Hospital Management System 1.0", "summary": "A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:31.053", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19020"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25316, "pinned": false}, {"id": "CVE-2026-19067", "publisher": "VulDB", "title": "A security flaw has been discovered in itsourcecode Hospital Management System 1.0", "summary": "A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipulation of the argument editid results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:54.110", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19067"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25316, "pinned": false}, {"id": "CVE-2026-19068", "publisher": "VulDB", "title": "A weakness has been identified in itsourcecode Hospital Management System 1.0", "summary": "A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:54.333", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19068"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25317, "pinned": false}, {"id": "CVE-2026-19069", "publisher": "VulDB", "title": "A security vulnerability has been detected in itsourcecode Hospital Management System 1.0", "summary": "A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:54.523", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19069"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25317, "pinned": false}, {"id": "CVE-2026-19070", "publisher": "VulDB", "title": "A vulnerability was detected in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:54.693", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19070"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25317, "pinned": false}, {"id": "CVE-2026-19071", "publisher": "VulDB", "title": "A flaw has been found in itsourcecode Hospital Management System 1.0", "summary": "A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:54.883", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19071"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25318, "pinned": false}, {"id": "CVE-2026-19127", "publisher": "postiz", "title": "An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorizati", "summary": "An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflows. By exploiting insufficient cryptographic validation or lack of server-side state verification on promotional/lifetime-deal (LTD) redemption codes, an unauthenticated attacker can forge valid redemption tokens or replay existing single-use codes to activate permanent, tier-highest paid subscriptions without a financial transa", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.557", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19127"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22358, "pinned": false}, {"id": "CVE-2026-71435", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, the default (\"automagic\") form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients. This issue is fixed in versions 5.74.3 and 6.24.2.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:30.423", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71435"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26008, "pinned": false}, {"id": "CVE-2026-71478", "publisher": "GitHub, Inc.", "title": "league/commonmark is a PHP library for parsing and rendering CommonMark Markdown", "summary": "league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a javascript: URL that browsers discard before parsing the scheme, causing the browser to still execute the script even when the unsafe-link filter is enabled. Thi", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:31.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71478"}], "cwe": ["CWE-79", "CWE-86", "CWE-692"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28012, "pinned": false}, {"id": "CVE-2026-19190", "publisher": "VulDB", "title": "A weakness has been identified in StableBit Scanner 2.6.13.4088", "summary": "A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\\Program Files (x86)\\StableBit\\Scanner\\Service\\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0016, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T04:17:21.367", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19190"}], "cwe": ["CWE-266", "CWE-275"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04738, "pinned": false}, {"id": "CVE-2026-19191", "publisher": "VulDB", "title": "A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687", "summary": "A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\\Program Files\\StableBit\\DrivePool\\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried out locally. The exploit has been disclosed publicly and may be used.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T05:17:01.313", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19191"}], "cwe": ["CWE-266", "CWE-275"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04722, "pinned": false}, {"id": "CVE-2026-19192", "publisher": "VulDB", "title": "A vulnerability was detected in DeepCool DisplayService 1.2.12", "summary": "A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\\DeepCool\\resources\\service\\x64\\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit is now public and may be used.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T05:17:01.517", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19192"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04722, "pinned": false}, {"id": "CVE-2026-49008", "publisher": "ZTE Corporation", "title": "By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the", "summary": "By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T09:16:58.880", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49008"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21505, "pinned": false}, {"id": "CVE-2026-12071", "publisher": "Switzerland Government Common Vulnerability Program", "title": "The Webbox of TeamDavid by\u00a0Tobit Laboratories AG\u00a0constructs redirect URLs using user-supplied input, \nwhich is", "summary": "The Webbox of TeamDavid by\u00a0Tobit Laboratories AG\u00a0constructs redirect URLs using user-supplied input, \nwhich is appended to the redirect target in a 302 HTTP response. By \nusing URL-encoded characters such as \u201c%2e\u201d (representing a dot), an \nattacker can manipulate the portion of the URL following the top-level \ndomain (TLD). If a similar, registerable TLD exists (for example, if \n\u201c.com\u201d is the application\u2019s domain, and \u201c.company\u201d is available for ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:56.297", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12071"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38791, "pinned": false}, {"id": "CVE-2026-54199", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to HTTP header injection through the \nrequest body in ", "summary": "Tobit Laboratories AG TeamDavid's Webbox  is vulnerable to HTTP header injection through the \nrequest body in the application's link storing functionality \n(//ServerClient_celink.htm), which is appended to the redirect target in\n the 302 HTTP response. If a line feed is added, this will also be added\n to the redirect link, resulting in the ability to control the response \nheaders.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting with Ro", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00445, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:56.500", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54199"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37685, "pinned": false}, {"id": "CVE-2026-54214", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the \n\u201ccTyp", "summary": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the \n\u201ccType\u201d URL parameter, which allows arbitrary modification of the \nContent-Type header in HTTP responses. Because the parameter does not \nproperly restrict control characters such as URL-encoded newlines \n(\u201c%0a\u201d) or colons, attackers can inject additional headers including \nextra Location headers into the server\u2019s response. This results e.g. i", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.637", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54214"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38789, "pinned": false}, {"id": "CVE-2026-54215", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox  contains an open redirect vulnerability via the \n\u201creplyUrl\u201d paramete", "summary": "Tobit Laboratories AG TeamDavid's Webbox  contains an open redirect vulnerability via the \n\u201creplyUrl\u201d parameter. An attacker can exploit this vulnerability to \ncraft a URL within the application that, when visited, redirects the \nuser\u2019s browser to an arbitrary third-party site. This can be abused for \nphishing attacks, where users receive a trusted domain link but are \nredirected to a phishing website.\u00a0This issue affects TeamDavid before Rollout ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.763", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54215"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3879, "pinned": false}, {"id": "CVE-2026-54216", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) \nvulnerab", "summary": "Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) \nvulnerability. By sending a specially crafted link including an \narbitrary path, an XSS payload or the parameter \u201cEntryInfo\u201d, and the \nparameter \u201c!templateName=entryMail\u201d, an attacker can cause the payload \nto execute in the victim\u2019s browser when they click the link.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting with Rollout 528 (Jun", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00453, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:58.893", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54216"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38415, "pinned": false}, {"id": "CVE-2026-54217", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability", "summary": "Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An \nattacker can send an email containing malicious JavaScript code. When a \nuser accesses the email, the stored cross-site scripting is triggered.\u00a0This issue affects TeamDavid before Rollout 528.\n\nStarting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed throu", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00437, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T10:16:59.027", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54217"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37001, "pinned": false}, {"id": "CVE-2026-73219", "publisher": "GitHub, Inc.", "title": "CVAT is an open source interactive video and image annotation tool for computer vision", "summary": "CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch automatic annotation request to RequestViewSet.create with inconsistent task and job IDs, and because the task ID determines the single active request slot, block automatic annotation for another task whose ID is known. This issue is fixed in version 2.72.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:27.447", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73219"}], "cwe": ["CWE-1288"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39385, "pinned": false}, {"id": "CVE-2026-18687", "publisher": "MongoDB, Inc.", "title": "MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain re", "summary": "MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00234, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:22.467", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "8.0.29, 8.3.8", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 8.0.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18687"}, {"t": "Vendor Advisory", "u": "https://jira.mongodb.org/browse/SERVER-130628"}], "cwe": ["CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13544, "pinned": false}, {"id": "CVE-2026-18738", "publisher": "VulnCheck", "title": "Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated ", "summary": "Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering characters such as =, +, -, or @. Attackers can craft a single unauthenticated request against any short URL to embed DDE or WEBSERVICE formula payloads int", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00493, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:38.377", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18738"}], "cwe": ["CWE-1236"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41488, "pinned": false}, {"id": "CVE-2026-46714", "publisher": "GitHub, Inc.", "title": "Misskey is an open source, federated social media platform", "summary": "Misskey is an open source, federated social media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contain a vulnerability that can cause the Misskey web client to slow down or crash when it applies a malformed theme. This issue has been fixed in version 2026.5.4.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00445, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:49.167", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46714"}], "cwe": ["CWE-674"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37682, "pinned": false}, {"id": "CVE-2026-70594", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted. This issue is fixed in version 6.54.1.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00244, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:17.423", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70594"}], "cwe": ["CWE-384"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14718, "pinned": false}, {"id": "CVE-2026-13477", "publisher": "IBM Corporation", "title": "IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated", "summary": "IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00492, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:49.863", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "qradar security information and event manager", "vendor": "ibm", "type": "app", "affected": ["7.5.0", "7.5.0 update_pack_1", "7.5.0 update_pack_10", "7.5.0 update_pack_11", "7.5.0 update_pack_12", "7.5.0 update_pack_13", "7.5.0 update_pack_13_interim_fix_01", "7.5.0 update_pack_13_interim_fix_02"], "fixed": null, "safe": "before 7.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy qradar-security-information-and-event-manager || rpm -q qradar-security-information-and-event-manager || qradar-security-information-and-event-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison qradar-security-information-and-event-manager\nsudo apt install qradar-security-information-and-event-manager=<VERSION_BEFORE_7.5.0>\nsudo apt-mark hold qradar-security-information-and-event-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list qradar-security-information-and-event-manager\nsudo dnf downgrade qradar-security-information-and-event-manager-<VERSION_BEFORE_7.5.0>\nsudo dnf versionlock add qradar-security-information-and-event-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13477"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282395"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41397, "pinned": false}, {"id": "CVE-2026-63457", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.", "summary": "A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00269, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:31.703", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "integrated lights-out 6 firmware", "vendor": "hpe", "type": "os", "affected": ["< 1.78"], "fixed": "1.78", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63457"}, {"t": "Patch, Vendor Advisory", "u": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05090en_us&docLocale=en_US"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18048, "pinned": false}, {"id": "CVE-2026-66732", "publisher": "VulnCheck", "title": "Sonic 3 A.I.R", "summary": "Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for the connection. An on-path attacker who can observe cleartext UDP traffic can inject arbitrary packets into any established session by forging the two-by", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:18:21.773", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66732"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06253, "pinned": false}, {"id": "CVE-2026-64993", "publisher": "Dell", "title": "Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collect", "summary": "Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00236, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:37.033", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "rvtools", "vendor": "dell", "type": "app", "affected": ["< 4.8.1"], "fixed": "4.8.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rvtools || rpm -q rvtools || rvtools --version"}, {"label": "2. UPGRADE to 4.8.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rvtools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rvtools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64993"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-in/000494748/dsa-2026-325-security-update-for-dell-rvtools-vulnerability"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13818, "pinned": false}, {"id": "CVE-2026-18497", "publisher": "CERT/CC", "title": "A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is ", "summary": "A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbtt__GetGlyphShapeTT() function within the nothings stb_truetype.h library when parsing malformed TTF (TrueType Font) files. The vulnerability resides in the glyph data parsing path.\r\n\r\nAn attacker can craft a malformed TTF file with an inflated endPtsOfContours value", "cvss": 7.1, "sev": "HIGH", "epss": 0.00194, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T15:16:59.707", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18497"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08567, "pinned": false}, {"id": "CVE-2026-18702", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modif", "summary": "An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring unauthorized activity, or degrade operational monitoring by causing excessive log volume.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00275, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.743", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18702"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130198"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18889, "pinned": false}, {"id": "CVE-2026-18605", "publisher": "VulDB", "title": "A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10", "summary": "A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. Performing a manipulation results in uncontrolled search path. The attack requires a local approach. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks. The vendor ", "cvss": 7.0, "sev": "HIGH", "epss": 0.0016, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:35.540", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18605"}], "cwe": ["CWE-426", "CWE-427"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0478, "pinned": false}, {"id": "CVE-2026-18718", "publisher": "VulnCheck", "title": "Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attac", "summary": "Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-supplied project, SwiftDemanglerAnalyzer restores the persisted Swift binary directory from project state and SwiftNativeDemangler executes the resolved binary without integrity or signature ", "cvss": 7.0, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:36.447", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18718"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06573, "pinned": false}, {"id": "CVE-2026-47763", "publisher": "GitHub, Inc.", "title": "pdm is a Python package and dependency manager supporting the latest PEP standards", "summary": "pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite the symlink targets. This creates an arbitrary file clobber primitive relative to the privileges of the invoking user. Config.__init__() resolves the proj", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:52.107", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47763"}], "cwe": ["CWE-61"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08904, "pinned": false}, {"id": "CVE-2026-70588", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T21:16:38.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70588"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35908, "pinned": false}, {"id": "CVE-2026-70589", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no longer active. This issue is fixed in version 6.54.1.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:16.707", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70589"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18158, "pinned": false}, {"id": "CVE-2026-18903", "publisher": "VulDB", "title": "A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4", "summary": "A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious de", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00517, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:37.710", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18903"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.43179, "pinned": false}, {"id": "CVE-2026-66839", "publisher": "JPCERT/CC", "title": "NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element ", "summary": "NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00198, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:38.980", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66839"}], "cwe": ["CWE-428"], "vector": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09097, "pinned": false}, {"id": "CVE-2026-71283", "publisher": "TuranSec", "title": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), cal", "summary": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00434, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:52.970", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71283"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.36641, "pinned": false}, {"id": "CVE-2026-71286", "publisher": "TuranSec", "title": "The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes it", "summary": "The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00263, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:53.330", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71286"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17143, "pinned": false}, {"id": "CVE-2026-20289", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low", "summary": "A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.\r\n\r\nThis vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:49.733", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "roomos", "vendor": "cisco", "type": "os", "affected": [">= 26.0.1.2 and < 26.7.2.2"], "fixed": "26.7.2.2", "safe": "before 26.0.1.2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "roomos cloud", "vendor": "cisco", "type": "os", "affected": ["< 11.39.1.3", ">= 26.0.1.2 and < 26.7.1.12"], "fixed": "11.39.1.3, 26.7.1.12", "safe": "before 26.0.1.2", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20289"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.25064, "pinned": false}, {"id": "CVE-2026-20311", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r", "summary": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:51.893", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20311"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15826, "pinned": false}, {"id": "CVE-2026-66885", "publisher": "EEF", "title": "Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a ", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity.\n\nWhen Livebook is configured to use Livebook Teams for identity, Livebook.ZTA.LivebookTeams.handle_request/4 in lib/livebook/zta/livebook_teams.ex handles the OAuth-style callback carrying a teams_identity marker and a code parameter. The clause exchanges that code", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:13.007", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "livebook", "vendor": "livebook", "type": "app", "affected": [">= 0.15.0 and < 0.18.7", ">= 0.19.0 and < 0.19.9"], "fixed": "0.18.7, 0.19.9", "safe": "before 0.15.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy livebook || rpm -q livebook || livebook --version"}, {"label": "2. UPGRADE to 0.18.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade livebook"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade livebook"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.15.0 (Debian / Ubuntu)", "cmd": "apt-cache madison livebook\nsudo apt install livebook=<VERSION_BEFORE_0.15.0>\nsudo apt-mark hold livebook"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list livebook\nsudo dnf downgrade livebook-<VERSION_BEFORE_0.15.0>\nsudo dnf versionlock add livebook"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66885"}, {"t": "Vendor Advisory", "u": "https://cna.erlef.org/cves/CVE-2026-66885.html"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/21c16168263275541a6e076d0c31852c40e09a18"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/33a052daa386c4ce08a9c39a07fc90f353ff6a51"}, {"t": "Patch", "u": "https://github.com/livebook-dev/livebook/commit/6ed2e213e9d5a19a70d7fcad5a8d616622cd2084"}, {"t": "Vendor Advisory", "u": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-pvvw-28fw-c6fg"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13577, "pinned": false}, {"id": "CVE-2026-19026", "publisher": "HDFG", "title": "H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without va", "summary": "H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.617", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19026"}], "cwe": ["CWE-476", "CWE-1284"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08677, "pinned": false}, {"id": "CVE-2026-19027", "publisher": "HDFG", "title": "The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic func", "summary": "The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5\nprior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap read, and in constrained cases disclosure of adjacent heap memory into decompressed dataset values, via a crafted HDF5 file whose N-Bit f", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:53.253", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19027"}], "cwe": ["CWE-125"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08677, "pinned": false}, {"id": "CVE-2026-19028", "publisher": "HDFG", "title": "H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to\u00a02.3.0 computes the data length to checksum by subtr", "summary": "H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to\u00a02.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t underflow. This allows attackers to cause a denial of service (massively out-of-bounds read and application crash in H5_checksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk sm", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:53.427", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19028"}], "cwe": ["CWE-125", "CWE-190", "CWE-1284"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08678, "pinned": false}, {"id": "CVE-2026-28178", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.673", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28178"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12382, "pinned": false}, {"id": "CVE-2026-61959", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:57.020", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61959"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12374, "pinned": false}, {"id": "CVE-2026-66688", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.107", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66688"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12382, "pinned": false}, {"id": "CVE-2026-66703", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.", "summary": "Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.273", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66703"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1239, "pinned": false}, {"id": "CVE-2026-19139", "publisher": "Chrome", "title": "Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to per", "summary": "Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)", "cvss": 7.4, "sev": "HIGH", "epss": 0.0009, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.930", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19139"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.00432, "pinned": false}, {"id": "CVE-2026-48082", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at `/api/tenants/{id}/appointments/bootstrap-challenge` issues a SHA-256 proof-of-work with `difficulty=4` hex zeros, equivalent to 16 bits of work. Modern hardware solves this in under 200 milliseconds, providing essentially no friction against automated abuse of the patient booking ", "cvss": 3.7, "sev": "LOW", "epss": 0.00386, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:10.997", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48082"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31507, "pinned": false}, {"id": "CVE-2026-49746", "publisher": "imaginationtech", "title": "Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read ke", "summary": "Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.\n\n\n\nIncorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00153, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T03:16:20.057", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49746"}], "cwe": ["CWE-823"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04113, "pinned": false}, {"id": "CVE-2026-24349", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unif", "summary": "A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that coul", "cvss": 7.1, "sev": "HIGH", "epss": 0.00057, "kev": false, "added": "2026-06-09", "pub": "2026-06-09T10:16:42.967", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "simatic wincc unified pc runtime", "vendor": "siemens", "type": "app", "affected": [">= 16 and <= 20", "21", "21 update1"], "fixed": "newer than 20", "safe": "before 16", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy simatic-wincc-unified-pc-runtime || rpm -q simatic-wincc-unified-pc-runtime || simatic-wincc-unified-pc-runtime --version"}, {"label": "2. UPGRADE to newer than 20 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade simatic-wincc-unified-pc-runtime"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade simatic-wincc-unified-pc-runtime"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16 (Debian / Ubuntu)", "cmd": "apt-cache madison simatic-wincc-unified-pc-runtime\nsudo apt install simatic-wincc-unified-pc-runtime=<VERSION_BEFORE_16>\nsudo apt-mark hold simatic-wincc-unified-pc-runtime"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list simatic-wincc-unified-pc-runtime\nsudo dnf downgrade simatic-wincc-unified-pc-runtime-<VERSION_BEFORE_16>\nsudo dnf versionlock add simatic-wincc-unified-pc-runtime"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24349"}, {"t": "Mitigation, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-063511.html"}], "cwe": ["CWE-313"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 4e-05, "pinned": false}, {"id": "CVE-2026-64630", "publisher": "HackerOne", "title": "A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report li", "summary": "A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:57.963", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64630"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27526, "pinned": false}, {"id": "CVE-2026-18856", "publisher": "VulDB", "title": "A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33", "summary": "A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. This manipulation of the argument filename causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.34 will fix this", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T01:16:44.757", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18856"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32659, "pinned": false}, {"id": "CVE-2026-66344", "publisher": "JPCERT/CC", "title": "NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element", "summary": "NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T06:16:38.783", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66344"}], "cwe": ["CWE-427"], "vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06061, "pinned": false}, {"id": "CVE-2026-70447", "publisher": "Jenkins Project", "title": "Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read p", "summary": "Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.570", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70447"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.18251, "pinned": false}, {"id": "CVE-2026-7869", "publisher": "IBM Corporation", "title": "IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v", "summary": "IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server's filesystem.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T19:17:43.700", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "langflow", "vendor": "langflow", "type": "app", "affected": [">= 1.0.0 and < 1.11.0"], "fixed": "1.11.0", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy langflow || rpm -q langflow || langflow --version"}, {"label": "2. UPGRADE to 1.11.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade langflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade langflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison langflow\nsudo apt install langflow=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold langflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list langflow\nsudo dnf downgrade langflow-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add langflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7869"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282647"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23622, "pinned": false}, {"id": "CVE-2026-18954", "publisher": "AMZN", "title": "Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.1", "summary": "Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic.\n\n\n\nTo remediate this issue, users should upgrade to version 1.0.12 or later.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:08.233", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "documentdb mcp server", "vendor": "amazon", "type": "app", "affected": ["< 1.0.12"], "fixed": "1.0.12", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show documentdb-mcp-server"}, {"label": "2. UPGRADE to 1.0.12", "cmd": "pip install --upgrade \"documentdb-mcp-server>=1.0.12\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18954"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-076-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/awslabs/mcp/security/advisories/GHSA-j694-4m5j-w8hc"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.04624, "pinned": false}, {"id": "CVE-2026-19023", "publisher": "HDFG", "title": "Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows", "summary": "Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00168, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.187", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19023"}], "cwe": ["CWE-822"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05845, "pinned": false}, {"id": "CVE-2026-19025", "publisher": "HDFG", "title": "H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chun", "summary": "H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/data", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00168, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T23:16:53.483", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19025"}], "cwe": ["CWE-369"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05845, "pinned": false}, {"id": "CVE-2026-18968", "publisher": "VulDB", "title": "A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f", "summary": "A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information fo", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00449, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T00:16:52.187", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18968"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38022, "pinned": false}, {"id": "CVE-2026-18995", "publisher": "VulDB", "title": "A flaw has been found in netease-youdao LobsterAI 2026.6.10", "summary": "A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0049, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T05:16:41.653", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18995"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41229, "pinned": false}, {"id": "CVE-2026-28172", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.", "summary": "Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.377", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28172"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0225, "pinned": false}, {"id": "CVE-2026-18487", "publisher": "Fedora Project", "title": "A flaw was found in Epiphany", "summary": "A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon (for example, [https://trusted.com:80@attacker.com/](https://trusted.com:80@attacker.com/)), the address bar and security menus will display the safe website (trusted.com) but it will actually load the attacker website (attacker.com) on the scr", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:50.250", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18487"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26009, "pinned": false}, {"id": "CVE-2026-54717", "publisher": "GitHub, Inc.", "title": "Silverstripe CMS is an open source content management system", "summary": "Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:44.543", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54717"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26011, "pinned": false}, {"id": "CVE-2026-17264", "publisher": "ICS-CERT", "title": "Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled h", "summary": "Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00481, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T00:16:30.600", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17264"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.40543, "pinned": false}, {"id": "CVE-2026-12261", "publisher": "huntr.dev", "title": "A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and mode", "summary": "A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as `corpora/` and `taggers/` instead of package-isolated roots, and validates package integrity only after the archive has been written and extracted. This design flaw enables one package to overwrite another package's trusted resources within the same names", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T07:16:26.377", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "nltk", "vendor": "nltk", "type": "app", "affected": ["<= 3.9.4"], "fixed": "newer than 3.9.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nltk || rpm -q nltk || nltk --version"}, {"label": "2. UPGRADE to newer than 3.9.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nltk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nltk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12261"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.10777, "pinned": false}, {"id": "CVE-2026-18704", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges", "summary": "An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:25.050", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 8.3.0 and < 8.3.8"], "fixed": "8.3.8", "safe": "before 8.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 8.3.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_8.3.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_8.3.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18704"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-129936"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09776, "pinned": false}, {"id": "CVE-2026-18709", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improper", "summary": "An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:25.827", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18709"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130544"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08723, "pinned": false}, {"id": "CVE-2025-62058", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethem", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2025-10-22", "pub": "2025-10-22T15:16:04.930", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-62058"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06725, "pinned": false}, {"id": "CVE-2026-40717", "publisher": "Dell", "title": "Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following", "summary": "Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T18:16:38.907", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "monitor driver", "vendor": "dell", "type": "app", "affected": ["1.0.0.0"], "fixed": null, "safe": "before 1.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy monitor-driver || rpm -q monitor-driver || monitor-driver --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison monitor-driver\nsudo apt install monitor-driver=<VERSION_BEFORE_1.0.0.0>\nsudo apt-mark hold monitor-driver"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list monitor-driver\nsudo dnf downgrade monitor-driver-<VERSION_BEFORE_1.0.0.0>\nsudo dnf versionlock add monitor-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40717"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04607, "pinned": false}, {"id": "CVE-2026-49131", "publisher": "VulnCheck", "title": "OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attacker", "summary": "OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized description value is persisted and later rendered through the default cell formatter in opnsense_bootgrid.js, which assigns raw cell content to innerHTM", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:39.750", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49131"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20333, "pinned": false}, {"id": "CVE-2026-67616", "publisher": "VulnCheck", "title": "Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the dra", "summary": "Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only session authentication to create unauthorized drafts that appear in the administrative drafts queue.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0044, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:50.810", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67616"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37248, "pinned": false}, {"id": "CVE-2026-47487", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the m", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:50.490", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.02"], "fixed": "newer than 26.02", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.02 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47487"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13562, "pinned": false}, {"id": "CVE-2026-71273", "publisher": "TuranSec", "title": "OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET", "summary": "OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.720", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71273"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06498, "pinned": false}, {"id": "CVE-2026-70595", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. This vulnerability is fixed in 6.54.1.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00277, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:03.323", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70595"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19094, "pinned": false}, {"id": "CVE-2026-20028", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remot", "summary": "A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker.\r\n\r\nThis vulnerability is due to an incorrect mapping of network connections to user accounts. An attacker with at least user-level credentials could exploit this vulnerability by sending crafted network traffic to an affected device. A successful exp", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00346, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:46.427", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20028"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26962, "pinned": false}, {"id": "CVE-2026-21766", "publisher": "HCL Software", "title": "The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects cre", "summary": "The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. \u00a0Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs.\u00a0 This only affects applications using the default login portlet.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T20:17:08.627", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21766"}], "cwe": ["CWE-522", "CWE-532"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21003, "pinned": false}, {"id": "CVE-2026-28179", "publisher": "Patchstack", "title": "Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.", "summary": "Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:16:53.800", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28179"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14329, "pinned": false}, {"id": "CVE-2026-66686", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 vers", "summary": "Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.973", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66686"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05646, "pinned": false}, {"id": "CVE-2026-66706", "publisher": "Patchstack", "title": "Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.", "summary": "Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:23.547", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66706"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14334, "pinned": false}, {"id": "CVE-2026-19146", "publisher": "Chrome", "title": "Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had", "summary": "Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00308, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:56.770", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19146"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2246, "pinned": false}, {"id": "CVE-2026-69113", "publisher": "VulnCheck", "title": "Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows ", "summary": "Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without permission by supplying an arbitrary videoId in the request body. Attackers can inject comments into private video recordings belonging to other users, trigger comment notification emails to the video owner, and enumerate valid video IDs through response differences.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00273, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:18:17.847", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69113"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18723, "pinned": false}, {"id": "CVE-2026-56608", "publisher": "HCL Software", "title": "HCL iControl is affected by Missing Access Control vulnerability", "summary": "HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.", "cvss": 3.7, "sev": "LOW", "epss": 0.00273, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T13:18:52.257", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["3.2.0"], "fixed": null, "safe": "before 3.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_3.2.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_3.2.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56608"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18631, "pinned": false}, {"id": "CVE-2026-56609", "publisher": "HCL Software", "title": "HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability", "summary": "HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T13:18:52.400", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "icontrol", "vendor": "hcltech", "type": "app", "affected": ["3.2.0"], "fixed": null, "safe": "before 3.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy icontrol || rpm -q icontrol || icontrol --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison icontrol\nsudo apt install icontrol=<VERSION_BEFORE_3.2.0>\nsudo apt-mark hold icontrol"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list icontrol\nsudo dnf downgrade icontrol-<VERSION_BEFORE_3.2.0>\nsudo dnf versionlock add icontrol"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56609"}, {"t": "Vendor Advisory", "u": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564"}], "cwe": ["CWE-327"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.04201, "pinned": false}, {"id": "CVE-2026-15430", "publisher": "CERT/CC", "title": "Improper access control in the IRP_MJ_WRITE command interface in\r\nWellbia XIGNCODE3 xhunter2.sys, version 2026", "summary": "Improper access control in the IRP_MJ_WRITE command interface in\r\nWellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to\r\nNT AUTHORITY\\SYSTEM, extract credentials from PPL-protected\r\nlsass.exe, and terminate PPL-protected security processes.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T16:16:28.123", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15430"}], "cwe": ["CWE-269", "CWE-284", "CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04062, "pinned": false}, {"id": "CVE-2026-18736", "publisher": "VulnCheck", "title": "Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause", "summary": "Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public hosts that redirect to internal targets, including loopback addresses, link-local ranges, and cloud metadata endpoints such as 169.254.169.254, to exfil", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00305, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:38.093", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18736"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22096, "pinned": false}, {"id": "CVE-2026-66300", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "SNOMED International Snowstorm contains a reflected XSS vulnerability within the \"Web Route\" redirection funct", "summary": "SNOMED International Snowstorm contains a reflected XSS vulnerability within the \"Web Route\" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.0032, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T19:16:51.970", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66300"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2381, "pinned": false}, {"id": "CVE-2026-70590", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Depending on the database used, leaked hashes may not have had the correct c", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00323, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:16.850", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70590"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24152, "pinned": false}, {"id": "CVE-2026-20294", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenti", "summary": "A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system.\r\n\r\nThis vulnerability is due to insufficient access control enforcement for specific template types that are not included in the encryption allowlist. A low-privileged attacker could exploit this vulnerability by viewing logs on the local system or o", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00134, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:49.877", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20294"}], "cwe": ["CWE-319"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02646, "pinned": false}, {"id": "CVE-2026-19064", "publisher": "VulDB", "title": "A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0", "summary": "A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:53.603", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19064"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30194, "pinned": false}, {"id": "CVE-2026-19066", "publisher": "VulDB", "title": "A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0", "summary": "A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file view_students.php. Such manipulation of the argument class_group leads to authorization bypass. The attack may be launched remotely.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:53.943", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19066"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30193, "pinned": false}, {"id": "CVE-2026-71430", "publisher": "GitHub, Inc.", "title": "node-re2 provides RE2 regular expression bindings for Node.js", "summary": "node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLocalChecked without checking for the empty MaybeLocal that V8 returns when the resulting string or buffer exceeds V8's maximum string length. When a global replace uses an output amplifying replacement template, the result can grow quadratically with the input size, and ", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:29.963", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71430"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04516, "pinned": false}, {"id": "CVE-2026-18698", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an", "summary": "An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00244, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.120", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 7.0.0 and < 7.0.40", ">= 8.0.0 and < 8.0.29", ">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "7.0.40, 8.0.29, 8.3.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 7.0.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18698"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-130481"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14754, "pinned": false}, {"id": "CVE-2026-8833", "publisher": "Checkmk GmbH", "title": "Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p", "summary": "Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another user interacts with the crafted link.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-06-08", "pub": "2026-06-08T13:16:33.900", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "checkmk", "vendor": "checkmk", "type": "app", "affected": ["2.2.0", "2.2.0 b1", "2.2.0 b2", "2.2.0 b3", "2.2.0 b4", "2.2.0 b5", "2.2.0 b6", "2.2.0 b7"], "fixed": null, "safe": "before 2.2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy checkmk || rpm -q checkmk || checkmk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison checkmk\nsudo apt install checkmk=<VERSION_BEFORE_2.2.0>\nsudo apt-mark hold checkmk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list checkmk\nsudo dnf downgrade checkmk-<VERSION_BEFORE_2.2.0>\nsudo dnf versionlock add checkmk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8833"}, {"t": "Vendor Advisory", "u": "https://checkmk.com/werk/20002"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14041, "pinned": false}, {"id": "CVE-2026-16792", "publisher": "Lenovo Group Ltd.", "title": "An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) ", "summary": "An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:49.317", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16792"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01311, "pinned": false}, {"id": "CVE-2026-70591", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on internal hosts. This issue is fixed in version 6.54.1.", "cvss": 4.1, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T22:17:16.997", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70591"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29323, "pinned": false}, {"id": "CVE-2026-71201", "publisher": "MITRE", "title": "In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgro", "summary": "In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T07:16:39.813", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71201"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19526, "pinned": false}, {"id": "CVE-2026-71210", "publisher": "TuranSec", "title": "Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, ch", "summary": "Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, checks the resolved IP against private-range rules, but then issues the actual outbound HTTP request using the original hostname, which the underlying async transport re-resolves independently.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:43.240", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71210"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12965, "pinned": false}, {"id": "CVE-2026-14304", "publisher": "Eclipse Foundation", "title": "In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20", "summary": "In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists.\n\n\n\nIf this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, includi", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:24.887", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "accessibility tools framework", "vendor": "eclipse", "type": "app", "affected": [">= 0.5.0 and <= 1.6.0"], "fixed": "newer than 1.6.0", "safe": "before 0.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy accessibility-tools-framework || rpm -q accessibility-tools-framework || accessibility-tools-framework --version"}, {"label": "2. UPGRADE to newer than 1.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade accessibility-tools-framework"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade accessibility-tools-framework"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison accessibility-tools-framework\nsudo apt install accessibility-tools-framework=<VERSION_BEFORE_0.5.0>\nsudo apt-mark hold accessibility-tools-framework"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list accessibility-tools-framework\nsudo dnf downgrade accessibility-tools-framework-<VERSION_BEFORE_0.5.0>\nsudo dnf versionlock add accessibility-tools-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "michecker", "vendor": "soumu", "type": "app", "affected": ["< 3.2.0"], "fixed": "3.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy michecker || rpm -q michecker || michecker --version"}, {"label": "2. UPGRADE to 3.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade michecker"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade michecker"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14304"}, {"t": "Vendor Advisory", "u": "https://eclipse.dev/actf/downloads/tools/miChecker/vulnerability.html"}, {"t": "Vendor Advisory", "u": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/151"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12915, "pinned": false}, {"id": "CVE-2026-71275", "publisher": "TuranSec", "title": "OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into", "summary": "OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, \"<h3>OTA requested for %s!</h3>\", tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?host=<script>alert(1)</script> to execute JavaScript in an authenticated admin's browser when they click a malicious link.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T13:24:51.967", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71275"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12574, "pinned": false}, {"id": "CVE-2026-70437", "publisher": "Jenkins Project", "title": "Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time ", "summary": "Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook bearer token.", "cvss": 3.7, "sev": "LOW", "epss": 0.00269, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.460", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70437"}], "cwe": ["CWE-208"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18094, "pinned": false}, {"id": "CVE-2026-70440", "publisher": "Jenkins Project", "title": "Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field v", "summary": "Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.813", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70440"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12573, "pinned": false}, {"id": "CVE-2026-70441", "publisher": "Jenkins Project", "title": "Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build ", "summary": "Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Create or Item/Configure permission.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.930", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70441"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12588, "pinned": false}, {"id": "CVE-2026-8166", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Sof", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc. E-Logo Purchasing Portal allows Stored XSS.\n\nThis issue affects e-Logo Purchasing Portal: before 1.52.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T12:16:28.293", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8166"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12586, "pinned": false}, {"id": "CVE-2026-18276", "publisher": "GitLab Inc.", "title": "Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authen", "summary": "Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event stream and observe another user's segmentation, transcription, import, export and training activity via the object_cls and object_pk values of a join-room message, which are passed to group_add without an access check", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:37.977", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "escriptorium", "vendor": "escriptorium", "type": "app", "affected": ["<= 26.04.1"], "fixed": "newer than 26.04.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy escriptorium || rpm -q escriptorium || escriptorium --version"}, {"label": "2. UPGRADE to newer than 26.04.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade escriptorium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade escriptorium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18276"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28375, "pinned": false}, {"id": "CVE-2026-64664", "publisher": "GitHub, Inc.", "title": "Statamic is a Laravel and Git powered content management system (CMS)", "summary": "Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view users, though the endpoint only exposed user existence and not any other user data. This issue is fixed in versions 5.74.1 and 6.24.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:13.960", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64664"}], "cwe": ["CWE-200", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26527, "pinned": false}, {"id": "CVE-2026-71497", "publisher": "GitHub, Inc.", "title": "jsoup is a Java library for working with real-world HTML", "summary": "jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting i", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00296, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.043", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71497"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21099, "pinned": false}, {"id": "CVE-2026-16027", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Server-Side request forgery (SSRF) vulnerability in Revenue Administration T\u00fcrkiye's E-Signature allows Server", "summary": "Server-Side request forgery (SSRF) vulnerability in Revenue Administration T\u00fcrkiye's E-Signature allows Server Side Request Forgery.\n\nThis issue affects T\u00fcrkiye's E-Signature: from 2.4.4.0 before 2.5.1.0.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T08:16:46.023", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16027"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14234, "pinned": false}, {"id": "CVE-2026-49006", "publisher": "ZTE Corporation", "title": "By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS", "summary": "By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00249, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T08:16:46.323", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49006"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1535, "pinned": false}, {"id": "CVE-2026-18648", "publisher": "VulDB", "title": "A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305", "summary": "A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument _display_name results in path traversal. The attack is only possible with local access. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0021, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:37.797", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18648"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10682, "pinned": false}, {"id": "CVE-2026-49132", "publisher": "VulnCheck", "title": "OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attacker", "summary": "OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary HTML or JavaScript by embedding payloads in the certificate description field via the trust certificate API. The unsanitized description value is persisted and later rendered in the Dashboard Certificates widget through Certificates.js, which interpolates the raw value into HTML attribute and text content sinks witho", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T21:16:39.900", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49132"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07661, "pinned": false}, {"id": "CVE-2026-18853", "publisher": "VulDB", "title": "A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android", "summary": "A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0021, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T00:16:59.547", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18853"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10681, "pinned": false}, {"id": "CVE-2026-71240", "publisher": "TuranSec", "title": "DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_requi", "summary": "DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_required or staff_member_required, and it redirects to a caller-supplied next_url GET parameter after only checking secure_url(next_url), which merely verifies the target host matches the current site's domain (blocking only cross-domain redirects) while allowing any same-site path with no authentication required to reach the view.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00326, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:26.873", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71240"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24455, "pinned": false}, {"id": "CVE-2026-70596", "publisher": "GitHub, Inc.", "title": "Ghost is a Node.js content management system", "summary": "Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature_image_caption that could be used to hijack another staff user's Ghost Admin session, resulting in privilege escalation. This issue is fixed in 6.54.1.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:17:03.463", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70596"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23488, "pinned": false}, {"id": "CVE-2026-20308", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r", "summary": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface of an affected device. A successful exploit could allow the at", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0032, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T17:16:51.280", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20308"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23741, "pinned": false}, {"id": "CVE-2026-19058", "publisher": "VulDB", "title": "A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2", "summary": "A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:52.730", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19058"}], "cwe": ["CWE-74", "CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08708, "pinned": false}, {"id": "CVE-2026-19060", "publisher": "VulDB", "title": "A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2", "summary": "A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00196, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:53.070", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19060"}], "cwe": ["CWE-74", "CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08794, "pinned": false}, {"id": "CVE-2026-70639", "publisher": "VulnCheck", "title": "llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI", "summary": "llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger a null context condition, causing a SIGSEGV crash that terminates the Android application process and results in denial of service.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:28.783", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b1886 and <= b7445"], "fixed": "newer than b7445", "safe": "before b1886", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b7445 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b1886 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b1886>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b1886>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70639"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch", "u": "https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388"}, {"t": "Patch, Release Notes", "u": "https://github.com/ggml-org/llama.cpp/releases/tag/b7446"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08691, "pinned": false}, {"id": "CVE-2026-7405", "publisher": "Autodesk", "title": "A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause a", "summary": "A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.707", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "advance steel", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advance-steel || rpm -q advance-steel || advance-steel --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade advance-steel"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade advance-steel"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison advance-steel\nsudo apt install advance-steel=<VERSION_BEFORE_2027>\nsudo apt-mark hold advance-steel"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advance-steel\nsudo dnf downgrade advance-steel-<VERSION_BEFORE_2027>\nsudo dnf versionlock add advance-steel"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad || rpm -q autocad || autocad --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad\nsudo apt install autocad=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad\nsudo dnf downgrade autocad-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad architecture", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-architecture || rpm -q autocad-architecture || autocad-architecture --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-architecture"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-architecture"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-architecture\nsudo apt install autocad-architecture=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-architecture"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-architecture\nsudo dnf downgrade autocad-architecture-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-architecture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad electrical", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-electrical || rpm -q autocad-electrical || autocad-electrical --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-electrical"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-electrical"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-electrical\nsudo apt install autocad-electrical=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-electrical"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-electrical\nsudo dnf downgrade autocad-electrical-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-electrical"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad lt", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-lt || rpm -q autocad-lt || autocad-lt --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-lt"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-lt"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-lt\nsudo apt install autocad-lt=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-lt"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-lt\nsudo dnf downgrade autocad-lt-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-lt"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "autocad map 3d", "vendor": "autodesk", "type": "app", "affected": [">= 2027 and < 2027.1"], "fixed": "2027.1", "safe": "before 2027", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy autocad-map-3d || rpm -q autocad-map-3d || autocad-map-3d --version"}, {"label": "2. UPGRADE to 2027.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade autocad-map-3d"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade autocad-map-3d"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2027 (Debian / Ubuntu)", "cmd": "apt-cache madison autocad-map-3d\nsudo apt install autocad-map-3d=<VERSION_BEFORE_2027>\nsudo apt-mark hold autocad-map-3d"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list autocad-map-3d\nsudo dnf downgrade autocad-map-3d-<VERSION_BEFORE_2027>\nsudo dnf versionlock add autocad-map-3d"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7405"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05084, "pinned": false}, {"id": "CVE-2026-18784", "publisher": "VulDB", "title": "A vulnerability was found in o6 open62541 up to 1.5.5", "summary": "A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:48.473", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18784"}], "cwe": ["CWE-119", "CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06223, "pinned": false}, {"id": "CVE-2026-18785", "publisher": "VulDB", "title": "A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b", "summary": "A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of the file examples/custom_datatype/client_types_custom.c. Executing a manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The project closed the issue report, stating that this is not the official way", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T17:16:48.650", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18785"}], "cwe": ["CWE-119", "CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04639, "pinned": false}, {"id": "CVE-2026-70433", "publisher": "Jenkins Project", "title": "Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read pe", "summary": "Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.030", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70433"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18242, "pinned": false}, {"id": "CVE-2026-70436", "publisher": "Jenkins Project", "title": "Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and ear", "summary": "Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to read files in workspaces they are not authorized to access.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.350", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70436"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20877, "pinned": false}, {"id": "CVE-2026-70438", "publisher": "Jenkins Project", "title": "A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers w", "summary": "A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.583", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70438"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18252, "pinned": false}, {"id": "CVE-2026-70442", "publisher": "Jenkins Project", "title": "Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context fo", "summary": "Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.030", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70442"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18252, "pinned": false}, {"id": "CVE-2026-70443", "publisher": "Jenkins Project", "title": "Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credent", "summary": "Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.137", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70443"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18252, "pinned": false}, {"id": "CVE-2026-70444", "publisher": "Jenkins Project", "title": "A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers ", "summary": "A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.237", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70444"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20982, "pinned": false}, {"id": "CVE-2026-70445", "publisher": "Jenkins Project", "title": "Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read", "summary": "Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.347", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70445"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18251, "pinned": false}, {"id": "CVE-2026-70446", "publisher": "Jenkins Project", "title": "Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read perm", "summary": "Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:14.443", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70446"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18251, "pinned": false}, {"id": "CVE-2026-55980", "publisher": "CSA", "title": "A denial-of-service vulnerability in\u00a0CatchPulse\u00a0could allow an attacker to conduct a stack buffer overrun atta", "summary": "A denial-of-service vulnerability in\u00a0CatchPulse\u00a0could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T10:16:44.247", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55980"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03306, "pinned": false}, {"id": "CVE-2026-66678", "publisher": "Patchstack", "title": "Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.", "summary": "Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.353", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66678"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1823, "pinned": false}, {"id": "CVE-2026-66692", "publisher": "Patchstack", "title": "Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : M\u00e9thodes de livraison pour WooCommer", "summary": "Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : M\u00e9thodes de livraison pour WooCommerce <= 2.10.0 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.357", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66692"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18253, "pinned": false}, {"id": "CVE-2026-66696", "publisher": "Patchstack", "title": "Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.", "summary": "Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:22.730", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66696"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2098, "pinned": false}, {"id": "CVE-2026-19054", "publisher": "VulDB", "title": "A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71", "summary": "A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/readFile/writeFile/deleteFile of the file src/core/repository.ts of the component Repositories File API. Performing a manipulation of the argument filePath results in path traversal. The attack is only possible with local access. Continious delivery with rolling releases is used by this product. Theref", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:52.560", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19054"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06296, "pinned": false}, {"id": "CVE-2026-19108", "publisher": "VulDB", "title": "A vulnerability was found in MZ Automation libiec61850 up to 1.6.1", "summary": "A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identifie", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:55.057", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19108"}], "cwe": ["CWE-119", "CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0464, "pinned": false}, {"id": "CVE-2026-71555", "publisher": "GitHub, Inc.", "title": "PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton", "summary": "PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context (e.g., target=\"_blank\") retain a window.opener reference back to the originating PILOS tab. A malicious destination page reached this way can use window.opener to navigate or manipulate the original PIL", "cvss": 4.1, "sev": "MEDIUM", "epss": 0.00293, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.553", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71555"}], "cwe": ["CWE-1022"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2073, "pinned": false}, {"id": "CVE-2026-45204", "publisher": "imaginationtech", "title": "Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB acces", "summary": "Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path.\n\n\n\nNull pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions, platform instability and denial of service.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T03:16:19.943", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-45204"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04176, "pinned": false}, {"id": "CVE-2026-19206", "publisher": "VulDB", "title": "A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1", "summary": "A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_values/sv_subscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to mitiga", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T14:16:59.020", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19206"}], "cwe": ["CWE-119", "CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06224, "pinned": false}, {"id": "CVE-2026-48790", "publisher": "GitHub, Inc.", "title": "Turso CLI is the command line interface (CLI) to the open-source database Turso", "summary": "Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.json` using Viper's default `configPermissions` of `0o644`, leaving the credential file world-readable on standard Linux and macOS systems. Any other local UID on the host can read the file and recover the platform JWT, which grants full Turso platform access scoped to the user's organization", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00149, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:34.167", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48790"}], "cwe": ["CWE-276", "CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03767, "pinned": false}, {"id": "CVE-2026-18604", "publisher": "VulDB", "title": "A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android", "summary": "A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T17:16:35.353", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18604"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03437, "pinned": false}, {"id": "CVE-2026-16791", "publisher": "Lenovo Group Ltd.", "title": "A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and be", "summary": "A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.", "cvss": 3.9, "sev": "LOW", "epss": 0.00126, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T20:16:49.130", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16791"}], "cwe": ["CWE-377"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.02086, "pinned": false}, {"id": "CVE-2026-55996", "publisher": "SUSE", "title": "A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher", "summary": "A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured, dynamiclistener automatically appended to each serving certificate any hostname presented via Server Name Indication (SNI) in incoming TLS requests.\n\n\n\nAn unauthenti", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:34.173", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55996"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.148, "pinned": false}, {"id": "CVE-2026-55979", "publisher": "CSA", "title": "An improper access control check in\u00a0CatchPulse's\u00a0named pipe communication interface could allow an attacker to", "summary": "An improper access control check in\u00a0CatchPulse's\u00a0named pipe communication interface could allow an attacker to invoke\u00a0CatchPulse\u00a0functions.\u00a0This\u00a0is limited to operations that enforce more restrictive security policies.", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T10:16:44.127", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55979"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.026, "pinned": false}, {"id": "CVE-2026-16316", "publisher": "OMICRON", "title": "OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values ", "summary": "OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect overall system availability or the processing of other traffic types, and the process is automatically restarted, and the failure is immediately reported", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T14:16:22.020", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16316"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14259, "pinned": false}, {"id": "CVE-2026-19160", "publisher": "Chrome", "title": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromis", "summary": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)", "cvss": 3.1, "sev": "LOW", "epss": 0.00399, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.343", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19160"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33049, "pinned": false}, {"id": "CVE-2026-71498", "publisher": "GitHub, Inc.", "title": "node-re2 provides RE2 regular expression bindings for Node.js", "summary": "node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated (incomplete) multi-byte UTF-8 sequence could cause the native binding to read past the end of the allocated buffer while attempting to decode the final, incomplete code point. This could result in an out-of-bounds read and potential disclosure of adjacent memory contents. This issue is fixed in version 1.26.1", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:32.207", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71498"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06499, "pinned": false}, {"id": "CVE-2026-18915", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Invocation of process using visible sensitive information vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologie", "summary": "Invocation of process using visible sensitive information vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting.\n\nThis issue affects eta-otp-lock: before 1.0.4.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T08:16:29.937", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18915"}], "cwe": ["CWE-214"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03401, "pinned": false}, {"id": "CVE-2026-71212", "publisher": "TuranSec", "title": "xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/scanner.py and dow", "summary": "xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/scanner.py and downloader.py) by appending the user-provided or scanned URL as a bare trailing positional argument, with no '--' end-of-options marker and no scheme validation anywhere in the codebase.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T08:16:43.503", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71212"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04634, "pinned": false}, {"id": "CVE-2026-15656", "publisher": "IBM Corporation", "title": "IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or se", "summary": "IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00187, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:51.290", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "maximo application suite", "vendor": "ibm", "type": "app", "affected": [">= 9.0 and < 9.0.28", ">= 9.1 and < 9.1.20", "9.2"], "fixed": "9.0.28, 9.1.20", "safe": "before 9.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy maximo-application-suite || rpm -q maximo-application-suite || maximo-application-suite --version"}, {"label": "2. UPGRADE to 9.0.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade maximo-application-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade maximo-application-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.0 (Debian / Ubuntu)", "cmd": "apt-cache madison maximo-application-suite\nsudo apt install maximo-application-suite=<VERSION_BEFORE_9.0>\nsudo apt-mark hold maximo-application-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list maximo-application-suite\nsudo dnf downgrade maximo-application-suite-<VERSION_BEFORE_9.0>\nsudo dnf versionlock add maximo-application-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15656"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282362"}], "cwe": ["CWE-614"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07868, "pinned": false}, {"id": "CVE-2026-70435", "publisher": "Jenkins Project", "title": "A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read", "summary": "A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00188, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.237", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70435"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07969, "pinned": false}, {"id": "CVE-2026-18909", "publisher": "ELAN Microelectronics", "title": "A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp", "summary": "A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarded to ETD.sys where it is used as a loop counter for a stack buffer copy without destination size validation. A local attacker with standard user privil", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00111, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T05:16:40.937", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18909"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01285, "pinned": false}, {"id": "CVE-2026-19161", "publisher": "Chrome", "title": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromis", "summary": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)", "cvss": 3.1, "sev": "LOW", "epss": 0.0032, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:58.457", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19161"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23832, "pinned": false}, {"id": "CVE-2026-8029", "publisher": "ZTE Corporation", "title": "The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT s", "summary": "The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the theft of local privacy data.", "cvss": 3.9, "sev": "LOW", "epss": 0.00206, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T09:18:16.187", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8029"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10052, "pinned": false}, {"id": "CVE-2026-66681", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.", "summary": "Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00142, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T15:17:21.473", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66681"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03185, "pinned": false}, {"id": "CVE-2026-18703", "publisher": "MongoDB, Inc.", "title": "An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user accoun", "summary": "An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T19:17:24.900", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": [">= 8.2.0 and <= 8.2.12", ">= 8.3.0 and < 8.3.8"], "fixed": "8.3.8", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. UPGRADE to 8.3.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mongodb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mongodb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold mongodb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "mongodb", "vendor": "mongodb", "type": "app", "affected": ["9.0.0 alpha0", "9.0.0 alpha1", "9.1.0 alpha0"], "fixed": null, "safe": "before 9.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mongodb || rpm -q mongodb || mongodb --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mongodb\nsudo apt install mongodb=<VERSION_BEFORE_9.0.0>\nsudo apt-mark hold mongodb"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mongodb\nsudo dnf downgrade mongodb-<VERSION_BEFORE_9.0.0>\nsudo dnf versionlock add mongodb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18703"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/SERVER-127863"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.03403, "pinned": false}, {"id": "CVE-2026-46712", "publisher": "GitHub, Inc.", "title": "Misskey is an open source, federated social media platform", "summary": "Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but prior to 2026.5.4, contain a vulnerability where a lack of proper permission checks allows access to certain data points from the Direct Messages (formerly Chat) feature, regardless of account permissions. This vulnerability occurs whether or not federation is enabled. Notes created with \"specified\" visibility (formerly \"direct\" visibility) are not affect", "cvss": 2.3, "sev": "LOW", "epss": 0.00364, "kev": false, "added": "2026-08-03", "pub": "2026-08-03T22:16:48.863", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46712"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29103, "pinned": false}, {"id": "CVE-2026-12730", "publisher": "IBM Corporation", "title": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.", "summary": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.", "cvss": 3.8, "sev": "LOW", "epss": 0.00166, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T16:16:49.440", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "business automation workflow", "vendor": "ibm", "type": "app", "affected": ["24.0.0", "24.0.0 if001", "24.0.0 if002", "24.0.0 if003", "24.0.0 if004", "24.0.0 if005", "24.0.0 if006", "24.0.0 if007"], "fixed": null, "safe": "before 24.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-automation-workflow || rpm -q business-automation-workflow || business-automation-workflow --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 24.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-automation-workflow\nsudo apt install business-automation-workflow=<VERSION_BEFORE_24.0.0>\nsudo apt-mark hold business-automation-workflow"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-automation-workflow\nsudo dnf downgrade business-automation-workflow-<VERSION_BEFORE_24.0.0>\nsudo dnf versionlock add business-automation-workflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12730"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282596"}], "cwe": ["CWE-297"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05497, "pinned": false}, {"id": "CVE-2026-70430", "publisher": "Jenkins Project", "title": "Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instanti", "summary": "Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.", "cvss": 2.7, "sev": "LOW", "epss": 0.00311, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:12.663", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "jenkins", "vendor": "jenkins", "type": "app", "affected": ["< 2.568.2", "< 2.576"], "fixed": "2.568.2, 2.576", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jenkins || rpm -q jenkins || jenkins --version"}, {"label": "2. UPGRADE to 2.568.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jenkins"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jenkins"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70430"}, {"t": "Vendor Advisory", "u": "https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3916"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.22781, "pinned": false}, {"id": "CVE-2026-70434", "publisher": "Jenkins Project", "title": "A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows atta", "summary": "A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00113, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T18:17:13.137", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70434"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01367, "pinned": false}, {"id": "CVE-2026-48074", "publisher": "GitHub, Inc.", "title": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform", "summary": "OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANT_ADMIN deletes an existing staff user, the underlying `StaffService.deleteStaffMember()` runs an additional invite cleanup that deletes from the central `user_invite` table by email. The `email` clause has no `tenantId` predicate. Any pending invite in any tenant that shares the deleted staff's email is ", "cvss": 2.7, "sev": "LOW", "epss": 0.00292, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:17:09.833", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48074"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20698, "pinned": false}, {"id": "CVE-2026-71438", "publisher": "GitHub, Inc.", "title": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts", "summary": "Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters (mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig) merge caller-supplied configuration into Mermaid's internal config using the assignWithDepth deep-merge helper, which is vulnerable to prototype pollution. This is only exploitable if an application forwards u", "cvss": 2.4, "sev": "LOW", "epss": 0.00353, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:18:30.873", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71438"}], "cwe": ["CWE-1321"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27809, "pinned": false}, {"id": "CVE-2025-40773", "publisher": "Siemens AG", "title": "A vulnerability has been identified in SiPass integrated (All versions < V3.0)", "summary": "A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request.\r\n\r\nSuccessful exploitation allows an attacker to potentially manipulate data belonging to other users.", "cvss": 3.5, "sev": "LOW", "epss": 0.00196, "kev": false, "added": "2025-10-14", "pub": "2025-10-14T10:15:38.667", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "sipass integrated", "vendor": "siemens", "type": "app", "affected": ["< 3.00"], "fixed": "3.00", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sipass-integrated || rpm -q sipass-integrated || sipass-integrated --version"}, {"label": "2. UPGRADE to 3.00 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sipass-integrated"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sipass-integrated"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-40773"}, {"t": "Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-599451.html"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08773, "pinned": false}, {"id": "CVE-2026-19059", "publisher": "VulDB", "title": "A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2", "summary": "A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 3.3, "sev": "LOW", "epss": 0.00212, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:52.903", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19059"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10906, "pinned": false}, {"id": "CVE-2026-19167", "publisher": "Chrome", "title": "Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised", "summary": "Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)", "cvss": 3.1, "sev": "LOW", "epss": 0.0023, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T22:16:59.143", "modified": "2026-10-23T21:10:00.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.109"], "fixed": "151.0.7922.109", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.109 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19167"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13109, "pinned": false}, {"id": "CVE-2026-18790", "publisher": "VulDB", "title": "A weakness has been identified in Systerel S2OPC up to 1.7.3", "summary": "A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the component DeleteMonitoredItemsRequest Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor", "cvss": 3.3, "sev": "LOW", "epss": 0.0016, "kev": false, "added": "2026-08-04", "pub": "2026-08-04T18:16:48.950", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18790"}], "cwe": ["CWE-119", "CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04783, "pinned": false}, {"id": "CVE-2026-18852", "publisher": "VulDB", "title": "A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a", "summary": "A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual conditions. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disc", "cvss": 3.3, "sev": "LOW", "epss": 0.0016, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T00:16:59.370", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18852"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04783, "pinned": false}, {"id": "CVE-2026-19046", "publisher": "VulDB", "title": "A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24", "summary": "A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_guides_search. Such manipulation of the argument guide_name leads to path traversal. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 3.3, "sev": "LOW", "epss": 0.00174, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T16:16:41.340", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19046"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06496, "pinned": false}, {"id": "CVE-2026-17578", "publisher": "Kong", "title": "Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP ", "summary": "Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled.\n\n\n\nIf a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An author", "cvss": 2.3, "sev": "LOW", "epss": 0.00244, "kev": false, "added": "2026-08-05", "pub": "2026-08-05T11:16:25.197", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17578"}], "cwe": ["CWE-323"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:Amber", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14791, "pinned": false}, {"id": "CVE-2026-15599", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-jo", "summary": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.\n\nThis issue affects pardus-domain-joiner: before 0.5.5.", "cvss": 3.3, "sev": "LOW", "epss": 0.00127, "kev": false, "added": "2026-08-06", "pub": "2026-08-06T13:17:24.170", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15599"}], "cwe": ["CWE-283"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02131, "pinned": false}, {"id": "CVE-2026-49005", "publisher": "ZTE Corporation", "title": "The root password hash of the device can be obtained through unencrypted information in the firmware.", "summary": "The root password hash of the device can be obtained through unencrypted information in the firmware.", "cvss": 2.4, "sev": "LOW", "epss": 0.00156, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T05:17:02.083", "modified": "2026-10-23T21:10:00.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49005"}], "cwe": ["CWE-916"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04373, "pinned": false}, {"id": "CVE-2026-12155", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:17.447", "modified": "2026-10-23T21:01:38.053", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12155"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1595, "pinned": false}, {"id": "CVE-2026-12148", "publisher": "IBM Corporation", "title": "IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi", "summary": "IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00288, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:17.120", "modified": "2026-10-23T21:00:54.453", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12148"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20229, "pinned": false}, {"id": "CVE-2026-11831", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info", "summary": "IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:16.790", "modified": "2026-10-23T21:00:09.230", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11831"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.08887, "pinned": false}, {"id": "CVE-2026-11829", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:16.457", "modified": "2026-10-23T20:59:34.997", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11829"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.13582, "pinned": false}, {"id": "CVE-2026-110839", "publisher": "VulnCheck", "title": "FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write i", "summary": "FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers are sized from one input component rather than three BGR output components. A malicious RDP server can offer a grayscale JPEG via clipboard redirection, corrupting client memory and crashing it when the item is pasted as CF_DIB bitmap data.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:24.173", "modified": "2026-10-23T20:55:08.160", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.3.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110839"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.12035, "pinned": false}, {"id": "CVE-2026-110834", "publisher": "VulnCheck", "title": "FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP s", "summary": "FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRP_MJ_READ or IRP_MJ_WRITE before create or after close, causing CommReadFile or CommWriteFile to dereference a null handle and terminate clients using Linux serial redirection.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.300", "modified": "2026-10-23T20:52:58.640", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 2.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110834"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pw4j-ff39-9vjm"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pw4j-ff39-9vjm"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.16016, "pinned": false}, {"id": "CVE-2026-110835", "publisher": "VulnCheck", "title": "FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion ", "summary": "FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a proxy using FixedTarget=false and an upstream HTTP proxy can alter HTTP request/header framing at that upstream proxy.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00218, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.433", "modified": "2026-10-23T20:51:48.677", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110835"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-87v8-2gwr-ww9j"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-87v8-2gwr-ww9j"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.116, "pinned": false}, {"id": "CVE-2026-110836", "publisher": "VulnCheck", "title": "FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows m", "summary": "FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized Content-Type, pinning a client thread at full CPU indefinitely.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.593", "modified": "2026-10-23T20:45:41.400", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110836"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h7fx-22wv-4cg8"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h7fx-22wv-4cg8"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.16017, "pinned": false}, {"id": "CVE-2026-110837", "publisher": "VulnCheck", "title": "FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer ove", "summary": "FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00293, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.853", "modified": "2026-10-23T20:45:12.283", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 2.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110837"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.20723, "pinned": false}, {"id": "CVE-2026-110838", "publisher": "VulnCheck", "title": "FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au", "summary": "FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:24.023", "modified": "2026-10-23T20:29:42.090", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110838"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m998-cvfm-9444"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1717, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 24.04", "pkg": "freerdp3", "status": "fixed", "fixed": "3.32.0+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' freerdp3)\" ge \"3.32.0+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "freerdp2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "freerdp3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "freerdp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-110833", "publisher": "VulnCheck", "title": "FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling R", "summary": "FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.160", "modified": "2026-10-23T20:29:10.717", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110833"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7g5-gw57-cwcr"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15418, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 24.04", "pkg": "freerdp3", "status": "fixed", "fixed": "3.32.0+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' freerdp3)\" ge \"3.32.0+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "freerdp2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "freerdp3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-110832", "publisher": "VulnCheck", "title": "FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first tha", "summary": "FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causing zeroed resident memory growth and server resource exhaustion.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:23.023", "modified": "2026-10-23T20:24:59.093", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 2.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110832"}, {"t": "Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5cgr-vmp8-fmvj"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.22288, "pinned": false}, {"id": "CVE-2026-110831", "publisher": "VulnCheck", "title": "FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which reg", "summary": "FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with drive redirection enabled can send IRP_MJ_CREATE with AllocationSize set to UINT64_MAX, forcing the seek to fail and leaking the file object and operati", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:22.880", "modified": "2026-10-23T20:24:09.663", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.13.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.13.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.13.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.13.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.13.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110831"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jgw9-wqvx-j495"}], "cwe": ["CWE-775"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.13546, "pinned": false}, {"id": "CVE-2026-110830", "publisher": "VulnCheck", "title": "FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious R", "summary": "FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:22.737", "modified": "2026-10-23T20:23:29.300", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 2.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110830"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15417, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 24.04", "pkg": "freerdp3", "status": "fixed", "fixed": "3.32.0+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' freerdp3)\" ge \"3.32.0+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "freerdp2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "freerdp3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-95721", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A memory corruption vulnerability exists in the web-based management interface of AOS-8", "summary": "A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.", "cvss": 3.3, "sev": "LOW", "epss": 0.00083, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:08.843", "modified": "2026-10-23T20:17:31.463", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95721"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00223, "pinned": false}, {"id": "CVE-2026-95720", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative", "summary": "A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00108, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:08.620", "modified": "2026-10-23T20:17:31.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95720"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01123, "pinned": false}, {"id": "CVE-2026-95719", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an au", "summary": "An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:08.323", "modified": "2026-10-23T20:17:31.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95719"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15692, "pinned": false}, {"id": "CVE-2026-95718", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote att", "summary": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00186, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:08.090", "modified": "2026-10-23T20:17:31.137", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95718"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07751, "pinned": false}, {"id": "CVE-2026-95717", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that cou", "summary": "A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00161, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.863", "modified": "2026-10-23T20:17:31.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95717"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04926, "pinned": false}, {"id": "CVE-2026-95716", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumv", "summary": "An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.723", "modified": "2026-10-23T20:17:30.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95716"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04093, "pinned": false}, {"id": "CVE-2026-95715", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated command injection vulnerability exists in the command line interface of AOS-10", "summary": "An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.580", "modified": "2026-10-23T20:17:30.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95715"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04867, "pinned": false}, {"id": "CVE-2026-95713", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8", "summary": "An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.313", "modified": "2026-10-23T20:17:30.630", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95713"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.06522, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-95712", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated ", "summary": "A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:07.040", "modified": "2026-10-23T20:17:30.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95712"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08362, "pinned": false}, {"id": "CVE-2026-95710", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 ", "summary": "An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00185, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:06.770", "modified": "2026-10-23T20:17:30.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95710"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07733, "pinned": false}, {"id": "CVE-2026-91412", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00371, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.600", "modified": "2026-10-23T20:17:29.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91412"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29917, "pinned": false}, {"id": "CVE-2026-91411", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compro", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.483", "modified": "2026-10-23T20:17:29.437", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91411"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15369, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91409", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Networking)", "summary": "Vulnerability in Oracle Java SE (component: Networking).   The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited ", "cvss": 3.7, "sev": "LOW", "epss": 0.00259, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.260", "modified": "2026-10-23T20:17:29.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91409"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16614, "pinned": false}, {"id": "CVE-2026-91407", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, I", "cvss": 8.8, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:44.040", "modified": "2026-10-23T20:17:29.117", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91407"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40467, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-91406", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In P", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).   The supported version that is affected is 8.5.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can res", "cvss": 7.5, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.920", "modified": "2026-10-23T20:17:29.010", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91406"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26002, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-91405", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In P", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).   The supported version that is affected is 8.5.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can res", "cvss": 7.5, "sev": "HIGH", "epss": 0.00264, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.810", "modified": "2026-10-23T20:17:28.903", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91405"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17324, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-91404", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In P", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a ", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.693", "modified": "2026-10-23T20:17:28.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91404"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04876, "pinned": false}, {"id": "CVE-2026-91402", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java S", "summary": "Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle Gr", "cvss": 3.1, "sev": "LOW", "epss": 0.00242, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.570", "modified": "2026-10-23T20:17:28.687", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91402"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14551, "pinned": false}, {"id": "CVE-2026-91400", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access ", "cvss": 3.1, "sev": "LOW", "epss": 0.00257, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.440", "modified": "2026-10-23T20:17:28.573", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91400"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16402, "pinned": false}, {"id": "CVE-2026-91399", "publisher": "Oracle", "title": "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and E", "summary": "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access).  Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management.  ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:43.327", "modified": "2026-10-23T20:17:28.460", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91399"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10777, "pinned": false}, {"id": "CVE-2026-90648", "publisher": "MITRE", "title": "wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-b", "summary": "wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a \"table flip\" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table() (wasm2c/wasm-rt-impl-tableops.inc). When the funcref table allocation fails, table->data is left NULL while table->size keeps the guest-declared element count; thus, bounds checks still pass and table element accesse", "cvss": 7.1, "sev": "HIGH", "epss": 0.00191, "kev": false, "added": "2026-09-13", "pub": "2026-09-13T00:17:07.023", "modified": "2026-10-23T20:17:28.297", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-90648"}], "cwe": ["CWE-252"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08301, "pinned": false}, {"id": "CVE-2026-79982", "publisher": "Zephyr Project", "title": "The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copi", "summary": "The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bt_hci_tx_sync_in() allocated that buffer from bt_hci_ep_pool, a fixed pool whose slots are only USBD_MAX_BULK_MPS bytes (64 on full-speed-only builds), and then performed net_buf_add_mem(buf, bt_buf->data, bt_buf->len) with no length che", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:28.167", "modified": "2026-10-23T20:17:28.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79982"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79981", "publisher": "Zephyr Project", "title": "The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the reso", "summary": "The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised (dns_resolve_init_locked() -> register_dispatcher() -> dns_dispatcher_register()), with the local port left at 0 so the stack picks an ephemeral port exactly once. dns_write() then sends every subsequent query from that same socket without re-binding, so the source port is constant for the lifetime of the resol", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:28.040", "modified": "2026-10-23T20:17:28.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79981"}], "cwe": ["CWE-330"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-79980", "publisher": "Zephyr Project", "title": "The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv", "summary": "The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter rather than as a per-transaction random value. It was seeded once with sys_rand32_get() in dhcpv4_start_internal(), incremented by one in dhcpv4_send_discover() and dhcpv4_send_decline(), and never changed by dhcpv4_send_request() \u2014 so every RENEWING and REBINDING exchange reused, unchanged, the identifier that had alr", "cvss": 5.6, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:27.913", "modified": "2026-10-23T20:17:27.913", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79980"}], "cwe": ["CWE-340"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-79979", "publisher": "Zephyr Project", "title": "The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm", "summary": "The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c, which issued TLBI VAE1{IS} with an operand of virt >> 12. That operand encodes the ASID in bits [63:48], so the invalidation only ever matched ASID 0 (the kernel page tables) and global entries. Memory domains, however, are allocated ASIDs starting at 1 in arch_mem_domain_init(), and every domain-private leaf created by pri", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:27.783", "modified": "2026-10-23T20:17:27.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79979"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-79978", "publisher": "Zephyr Project", "title": "The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345", "summary": "The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of FIFO data it will report (read_len = MIN(fifo_bytes, buf_avail)) to the space actually returned by rtio_sqe_rx_buf(), but then queues one 6-byte bus read per hardware FIFO entry at consecutive offsets from read_buf, bounded by the device-reported entry count rather than by the clamp. When the allocated buffe", "cvss": 3.6, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:27.657", "modified": "2026-10-23T20:17:27.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79978"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-79977", "publisher": "Zephyr Project", "title": "The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could n", "summary": "The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_transport_data(), when the 32-bit receiver index of an incoming transport-data message matched no session, the code both scheduled a new handshake and copied the datagram's source address into peer->endpoint with memcpy(&peer->endpoint, peer_addr, sizeof(peer->endpoint)). Because the receiver index is unknown, t", "cvss": 8.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:27.523", "modified": "2026-10-23T20:17:27.523", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79977"}], "cwe": ["CWE-306", "CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79955", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8", "summary": "An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:02.200", "modified": "2026-10-23T20:17:27.317", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79955"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26062, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79895", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct ", "summary": "Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:02.090", "modified": "2026-10-23T20:17:27.163", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79895"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24223, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79894", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8", "summary": "An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.983", "modified": "2026-10-23T20:17:27.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79894"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24222, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79893", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial", "summary": "Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.877", "modified": "2026-10-23T20:17:26.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79893"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26062, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79886", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8", "summary": "An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.130", "modified": "2026-10-23T20:17:26.173", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79886"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.12963, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79885", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8", "summary": "An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00239, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:01.023", "modified": "2026-10-23T20:17:26.080", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79885"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14189, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79884", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacke", "summary": "A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00157, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.917", "modified": "2026-10-23T20:17:25.987", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79884"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04528, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79883", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated a", "summary": "A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00176, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.820", "modified": "2026-10-23T20:17:25.893", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79883"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.06804, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79882", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated r", "summary": "There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00151, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.707", "modified": "2026-10-23T20:17:25.800", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79882"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03937, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79881", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthentica", "summary": "An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00196, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.600", "modified": "2026-10-23T20:17:25.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79881"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08827, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79880", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high ", "summary": "A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 8.7, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.490", "modified": "2026-10-23T20:17:25.607", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79880"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18167, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79879", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by a", "summary": "Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00206, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.380", "modified": "2026-10-23T20:17:25.513", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79879"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10142, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79878", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead", "summary": "A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.273", "modified": "2026-10-23T20:17:25.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79878"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08425, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79877", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthentica", "summary": "A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.163", "modified": "2026-10-23T20:17:25.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79877"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08425, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79876", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauth", "summary": "A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00171, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:18:00.050", "modified": "2026-10-23T20:17:25.207", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79876"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.06133, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79875", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthentica", "summary": "A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00164, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.943", "modified": "2026-10-23T20:17:25.103", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79875"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.05369, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79874", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existi", "summary": "An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00164, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.837", "modified": "2026-10-23T20:17:24.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79874"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.0537, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79873", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent a", "summary": "Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00164, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.727", "modified": "2026-10-23T20:17:24.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79873"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.0537, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79872", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenti", "summary": "A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00262, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.600", "modified": "2026-10-23T20:17:24.807", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79872"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17087, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79871", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauth", "summary": "A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00182, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.493", "modified": "2026-10-23T20:17:24.713", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79871"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.07388, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79870", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent a", "summary": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00182, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.390", "modified": "2026-10-23T20:17:24.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79870"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.07387, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79869", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjac", "summary": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00182, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.280", "modified": "2026-10-23T20:17:24.523", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79869"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.07387, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79868", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjace", "summary": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00182, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.177", "modified": "2026-10-23T20:17:24.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79868"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.07387, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79867", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjace", "summary": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00182, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:59.067", "modified": "2026-10-23T20:17:24.333", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79867"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.07388, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79866", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8", "summary": "An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00195, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.960", "modified": "2026-10-23T20:17:24.223", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79866"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.08747, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79865", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent ", "summary": "A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00195, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.850", "modified": "2026-10-23T20:17:24.127", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79865"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.08747, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79864", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticate", "summary": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.0021, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.743", "modified": "2026-10-23T20:17:24.027", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79864"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.10602, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79863", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated ad", "summary": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00195, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.630", "modified": "2026-10-23T20:17:23.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79863"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.08747, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79862", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated ad", "summary": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00195, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.520", "modified": "2026-10-23T20:17:23.837", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79862"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.08746, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79861", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution ", "summary": "There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00422, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.407", "modified": "2026-10-23T20:17:23.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79861"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35443, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79860", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated rem", "summary": "Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.303", "modified": "2026-10-23T20:17:23.633", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79860"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28342, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79859", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated re", "summary": "Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:58.190", "modified": "2026-10-23T20:17:23.540", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79859"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28342, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79853", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenti", "summary": "Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00358, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.513", "modified": "2026-10-23T20:17:22.893", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79853"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28341, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-79851", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated r", "summary": "Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00499, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.290", "modified": "2026-10-23T20:17:22.683", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79851"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41875, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-79850", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass ex", "summary": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.183", "modified": "2026-10-23T20:17:22.573", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79850"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33077, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-79849", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct S", "summary": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:57.070", "modified": "2026-10-23T20:17:22.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79849"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44613, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-79848", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct S", "summary": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:56.850", "modified": "2026-10-23T20:17:22.353", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79848"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44613, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-79847", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code ", "summary": "Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00499, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:56.633", "modified": "2026-10-23T20:17:22.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79847"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41876, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-79846", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated", "summary": "Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00499, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:56.490", "modified": "2026-10-23T20:17:22.130", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79846"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41876, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": null}, {"id": "CVE-2026-79844", "publisher": "Hewlett Packard Enterprise (HPE)", "title": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remot", "summary": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:56.367", "modified": "2026-10-23T20:17:22.017", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79844"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33077, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19741", "publisher": "Zephyr Project", "title": "Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default \"J01NME\" in modules/openthr", "summary": "Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default \"J01NME\" in modules/openthread/Kconfig.thread (previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread). J01NME is the example Joining Device Credential used throughout the public OpenThread and Thread commissioning documentation, including Zephyr's own samples/net/sockets/echo_client/README.rst, so it is not a secret. A firmware i", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.867", "modified": "2026-10-23T20:17:21.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19741"}], "cwe": ["CWE-1392"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115797", "publisher": "VulDB", "title": "A weakness has been identified in Tenda F6 12.02.01.73", "summary": "A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks", "cvss": 3.7, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.693", "modified": "2026-10-23T20:17:21.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115797"}], "cwe": ["CWE-310", "CWE-319"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115796", "publisher": "VulDB", "title": "A security flaw has been discovered in Tenda F6 12.02.01.73", "summary": "A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.507", "modified": "2026-10-23T20:17:21.507", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115796"}], "cwe": ["CWE-352", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115585", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF stream reload during each recovery attempt even when a recovery cache was present, causing crafted cross-reference streams to produce long runtimes. This issue is fixed in version 6.21.2.", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.230", "modified": "2026-10-23T20:17:21.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115585"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115580", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:21.087", "modified": "2026-10-23T20:17:21.087", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115580"}], "cwe": ["CWE-834"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115572", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect object, causing relevant file parts such as pages to trigger repeated full-file recovery loads and long runtimes when accessed. This issue is fixed in version 6.21.2.", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T20:17:20.940", "modified": "2026-10-23T20:17:20.940", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115572"}], "cwe": ["CWE-400"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-111384", "publisher": "VulnCheck", "title": "Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket e", "summary": "Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint because fmStream never calls SetReadLimit, leaving message size unbounded. Authenticated users with file manager scopes can send one oversized binary message to /api/v1/ws/file/:id, triggering an OOM kill that drops all agent monitoring.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T03:18:05.740", "modified": "2026-10-23T20:17:20.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111384"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21029, "pinned": false}, {"id": "CVE-2026-111352", "publisher": "VulnCheck", "title": "ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allow", "summary": "ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00361, "kev": false, "added": "2026-10-15", "pub": "2026-10-15T22:19:33.043", "modified": "2026-10-23T20:17:20.373", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111352"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.28713, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "hackmd.io/@hieuPenguinnn/thinkcmf-admin-rest-api-missing-authorization", "url": "https://hackmd.io/@hieuPenguinnn/thinkcmf-admin-rest-api-missing-authorization"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-111332", "publisher": "VulnCheck", "title": "OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors ", "summary": "OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.", "cvss": 3.7, "sev": "LOW", "epss": 0.00277, "kev": false, "added": "2026-10-15", "pub": "2026-10-15T22:19:31.507", "modified": "2026-10-23T20:17:20.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111332"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19149, "pinned": false}, {"id": "CVE-2026-111312", "publisher": "VulnCheck", "title": "OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-", "summary": "OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-10-15", "pub": "2026-10-15T22:19:30.053", "modified": "2026-10-23T20:17:20.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111312"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38242, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "hackmd.io/@hieuPenguinnn/open-health-health-data-id-missing-auth-idor", "url": "https://hackmd.io/@hieuPenguinnn/open-health-health-data-id-missing-auth-idor"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-111280", "publisher": "VulnCheck", "title": "snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allo", "summary": "snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses causing memcpy of up to 65535 bytes into caller buffers, crashing SCADA, HMI, or gateway processes and corrupting memory.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00425, "kev": false, "added": "2026-10-15", "pub": "2026-10-15T22:19:29.317", "modified": "2026-10-23T20:17:19.987", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111280"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35772, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111274", "publisher": "VulnCheck", "title": "unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c du", "summary": "unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and crash the process.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0013, "kev": false, "added": "2026-10-15", "pub": "2026-10-15T22:19:28.477", "modified": "2026-10-23T20:17:19.853", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111274"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02359, "pinned": false}, {"id": "CVE-2025-59529", "publisher": "GitHub, Inc.", "title": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2025-12-18", "pub": "2025-12-18T21:15:53.637", "modified": "2026-10-23T20:17:19.563", "products": [{"name": "avahi", "vendor": "avahi", "type": "app", "affected": ["< 0.9", "0.9 rc1"], "fixed": "0.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy avahi || rpm -q avahi || avahi --version"}, {"label": "2. UPGRADE to 0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade avahi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade avahi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-59529"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/avahi/avahi/pull/808"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/avahi/avahi/security/advisories/GHSA-73wf-3xmj-x82q"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.07077, "pinned": false}, {"id": "CVE-2026-110829", "publisher": "VulnCheck", "title": "FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a frag", "summary": "FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-10-14", "pub": "2026-10-14T23:17:22.597", "modified": "2026-10-23T20:15:20.963", "products": [{"name": "freerdp", "vendor": "freerdp", "type": "app", "affected": [">= 3.0.0 and < 3.32.0"], "fixed": "3.32.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy freerdp || rpm -q freerdp || freerdp --version"}, {"label": "2. UPGRADE to 3.32.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade freerdp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison freerdp\nsudo apt install freerdp=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold freerdp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list freerdp\nsudo dnf downgrade freerdp-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add freerdp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110829"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mq5-xh88-9v62"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mq5-xh88-9v62"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.16017, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 24.04", "pkg": "freerdp3", "status": "fixed", "fixed": "3.32.0+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade freerdp3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' freerdp3)\" ge \"3.32.0+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "freerdp2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "freerdp3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "freerdp", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "freerdp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66384", "publisher": "JFrog", "title": "JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability", "summary": "An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00665, "kev": true, "added": "2026-08-12", "pub": "2026-08-12T16:17:14.520", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66384"}, {"t": "Release Notes, Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-10", "kev_added": "2026-08-27", "ransom": false, "priority": 56, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.5121, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-66384 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-66384", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28672", "publisher": "Apache Software Foundation", "title": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ra", "summary": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.\n\nThis issue affects Apache Ranger: from 0.6 through 2.8.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02631, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:25.190", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": [">= 0.6.0 and <= 2.8.0"], "fixed": "newer than 2.8.0", "safe": "before 0.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to newer than 2.8.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison ranger\nsudo apt install ranger=<VERSION_BEFORE_0.6.0>\nsudo apt-mark hold ranger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ranger\nsudo dnf downgrade ranger-<VERSION_BEFORE_0.6.0>\nsudo dnf versionlock add ranger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28672"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/99ysjqcmz950o3jgm6pqx1wb696onzq7"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 69, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.85422, "vendors": [{"os": "Maven", "pkg": "org.apache.ranger:ranger", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-6qc3-v8fv-fv9j", "note": "vulnerable: >= 0.6.0, <= 2.8.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "oscerd/CVE-2026-28672 (0 stars)", "url": "https://github.com/oscerd/CVE-2026-28672", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73034", "publisher": "VulnCheck", "title": "DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write a", "summary": "DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations s", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.05703, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:46.470", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73034"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 69, "tier": "P1", "why": ["Critical severity", "EPSS top 7%: very likely to be exploited", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.92992, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "Boreas37/CVE-2026-73034-PoC (1 stars)", "url": "https://github.com/Boreas37/CVE-2026-73034-PoC", "stars": 1}, {"kind": "nuclei", "name": "DB-GPT <= 0.8.1 - Arbitrary File Write", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-73034.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19348", "publisher": "VulDB", "title": "A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a", "summary": "A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03568, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T11:16:52.743", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19348"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.89311, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/IEATASICS/m300-repeater-bugs", "url": "https://github.com/IEATASICS/m300-repeater-bugs"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61808", "publisher": "GitHub, Inc.", "title": "LightRAG provides simple and fast retrieval-augmented generation", "summary": "LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modify the knowledge graph, cancel pipelines, clear caches, and consume LLM resources. This issue is mitigated in version 1.5.5rc1.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02497, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:52.007", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61808"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 66, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84578, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/HKUDS/LightRAG/security/advisories/GHSA-mmg5-8x8q-v934", "url": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-mmg5-8x8q-v934"}, {"kind": "nuclei", "name": "LightRAG <= 1.5.4 - Missing Authentication", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61808.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-42537", "publisher": "Apache Software Foundation", "title": "Remote Code Execution via JDBC URL Injection\u00a0in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to ver", "summary": "Remote Code Execution via JDBC URL Injection\u00a0in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01289, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.420", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42537"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ymwvz8cwv3wm8fq21pnd7fco0l1m4wrp"}], "cwe": ["CWE-20", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 65, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.70014, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-44416", "publisher": "Apache Software Foundation", "title": "Remote Code Execution via Arbitrary Class Instantiation in\u00a0plugin-schema-registry\u00a0component in Apache Ranger <", "summary": "Remote Code Execution via Arbitrary Class Instantiation in\u00a0plugin-schema-registry\u00a0component in Apache Ranger <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01242, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.547", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44416"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/2gqssqhwkzbpd8jx8q6986cwldr7qkdn"}], "cwe": ["CWE-94", "CWE-470"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 65, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.69005, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71945", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:47.710", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71945"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87935, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71946", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:47.847", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71946"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87932, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71947", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host and ipVer fields, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:47.983", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71947"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87931, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71949", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.267", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71949"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71950", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the action_value field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.413", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71950"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71951", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.570", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71951"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71952", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.733", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71952"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71954", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:49.097", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71954"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71955", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command ", "summary": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, targetAPSsid, peerPin, and peerRptPin fields, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:49.250", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71955"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87932, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-55799", "publisher": "Apache Software Foundation", "title": "Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0\nUsers are recommende", "summary": "Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01216, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.670", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55799"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/mqpdrqrvd47x5vhy03xok4ylbo9wbqgj"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6838, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71983", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi in", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T23:16:56.967", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71983"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84354, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71984", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter ", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.207", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71984"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84355, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71985", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscont", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.360", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71985"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84355, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71986", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz functi", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the dmz function to execute malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.500", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71986"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84355, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71987", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg functi", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.637", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71987"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84357, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71988", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw fun", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.780", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71988"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84356, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71989", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.953", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71989"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84356, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71990", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH ", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configuration interface to inject malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:48.130", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71990"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84356, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71991", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH ", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the Telnet configuration interface to inject malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:48.270", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71991"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84356, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71992", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter ", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:48.410", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71992"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84357, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71993", "publisher": "VulnCheck", "title": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn fu", "summary": "MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02464, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:48.550", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71993"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.84354, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72590", "publisher": "TuranSec", "title": "An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remot", "summary": "An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02043, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.123", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72590"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8102, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72589", "publisher": "TuranSec", "title": "An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remot", "summary": "An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database without validation.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01947, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.003", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72589"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.80053, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13206", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zy", "summary": "Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection.\n\nThis issue affects WAH7601: through 20072026.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01767, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:17:56.020", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13206"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.77932, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71944", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:47.550", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71944"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71948", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.127", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71948"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-71953", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c", "summary": "D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T17:16:48.890", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71953"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-71956", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command ", "summary": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03168, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T18:16:56.503", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71956"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.87932, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-40920", "publisher": "Apache Software Foundation", "title": "Privilege Escalation via URL Parameter\u00a0is reported in Apache Ranger versions <= 2.8.0.\n\nUsers are recommended ", "summary": "Privilege Escalation via URL Parameter\u00a0is reported in Apache Ranger versions <= 2.8.0.\n\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00732, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.287", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40920"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/zh92fob9gqp196rvz3x9t0d2fnq9g27d"}], "cwe": ["CWE-20", "CWE-269", "CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53813, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72580", "publisher": "TuranSec", "title": "An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to", "summary": "An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directly to os.system() without sanitization, enabling command injection via shell metacharacters.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01655, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.897", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72580"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.76398, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-32227", "publisher": "Apache Software Foundation", "title": "SQL Injection vulnerability vulnerability in Apache Ranger.\n\nThis issue affects .\n\nUsers are recommended to up", "summary": "SQL Injection vulnerability vulnerability in Apache Ranger.\n\nThis issue affects .\n\nUsers are recommended to upgrade to version 2.9.0, which fixes the issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00686, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.160", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32227"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/1zltfzd6rp683omrlv1zkxvkwm9d0nd2"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52117, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72577", "publisher": "TuranSec", "title": "Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve ", "summary": "Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime_gds/flask/app.py applies no authentication to any endpoint.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01274, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.533", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72577"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.697, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66147", "publisher": "SonicWALL, Inc.", "title": "An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 a", "summary": "An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.01764, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:49.173", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66147"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.77887, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19264", "publisher": "postiz", "title": "Postiz is an open-source social media scheduling tool", "summary": "Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw dot-segments are collapsed before routing, but URL-encoded separators survive route matching and are decoded only once they reach the handler, restoring the trave", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01013, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T15:17:00.297", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19264"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.62913, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:12:34.908944+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "DarkLycn1976/CVE-2026-19264 (0 stars)", "url": "https://github.com/DarkLycn1976/CVE-2026-19264", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71957", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer o", "summary": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01072, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T18:16:56.647", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71957"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.6464, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72567", "publisher": "TuranSec", "title": "An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthent", "summary": "An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from user-controlled owner, repo, and repo_type fields without sanitization, enabling path traversal.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00789, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.220", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72567"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55783, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72592", "publisher": "TuranSec", "title": "An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote att", "summary": "An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter ( = array) and no authentication enabled by default (auth_pass is empty string), allowing an unauthenticated attacker to upload a PHP webshell and execute it by browsing to the uploaded path.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00802, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.370", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72592"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56249, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72593", "publisher": "TuranSec", "title": "A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attack", "summary": "A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0079, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.490", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72593"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55834, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-26035", "publisher": "Fortinet, Inc.", "title": "An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, For", "summary": "An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0075, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:22.307", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortiweb", "vendor": "fortinet", "type": "app", "affected": [">= 7.2.0 and < 7.2.13", ">= 7.4.0 and < 7.4.12", ">= 7.6.0 and < 7.6.7", ">= 8.0.0 and < 8.0.3"], "fixed": "7.2.13, 7.4.12, 7.6.7, 8.0.3", "safe": "before 7.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiweb || rpm -q fortiweb || fortiweb --version"}, {"label": "2. UPGRADE to 7.2.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiweb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiweb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiweb\nsudo apt install fortiweb=<VERSION_BEFORE_7.2.0>\nsudo apt-mark hold fortiweb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiweb\nsudo dnf downgrade fortiweb-<VERSION_BEFORE_7.2.0>\nsudo dnf versionlock add fortiweb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-26035"}, {"t": "Vendor Advisory, Mitigation", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-158"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54464, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71958", "publisher": "VulnCheck", "title": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer o", "summary": "D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01072, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T18:16:56.783", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71958"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.64641, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-19346", "publisher": "VulDB", "title": "A vulnerability was determined in Tenda CH22 1.0.0.1", "summary": "A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0273, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T10:17:10.567", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19346"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.85986, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19379", "publisher": "VulDB", "title": "A vulnerability was determined in EFM ipTIME AX8004M 15.09.0", "summary": "A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.02657, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T01:16:47.980", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19379"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.85578, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/seting-and-break/vulnerability-reports/blob/main/ipTIME_AX8004M_Vulnerability_R", "url": "https://github.com/seting-and-break/vulnerability-reports/blob/main/ipTIME_AX8004M_Vulnerability_Report.md"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72565", "publisher": "TuranSec", "title": "A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypa", "summary": "A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00684, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.973", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72565"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52019, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48039", "publisher": "GitHub, Inc.", "title": "Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads", "summary": "Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a `401` response, allowing any network-reachable caller to invoke MCP tools without authentication. When no per-request credential is present, tool", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00589, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:51.723", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48039"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47489, "vendors": [{"os": "Python (pip)", "pkg": "meta-ads-mcp", "status": "fixed", "fixed": "1.0.109", "cmd": "pip install --upgrade \"meta-ads-mcp>=1.0.109\"\npip show meta-ads-mcp", "url": "https://github.com/advisories/GHSA-9gw6-46qc-99vr", "note": "vulnerable: <= 1.0.108"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr", "url": "https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr"}, {"kind": "writeup", "name": "github.com/pypa/advisory-database/tree/main/vulns/meta-ads-mcp/PYSEC-2026-413.yaml", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/meta-ads-mcp/PYSEC-2026-413.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19263", "publisher": "VulDB", "title": "A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114", "summary": "A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It is possible to initiate the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff", "cvss": 7.3, "sev": "HIGH", "epss": 0.02129, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T07:17:11.790", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19263"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.81821, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/INQUIRELAB/mcp-bridge-api/issues/1", "url": "https://github.com/INQUIRELAB/mcp-bridge-api/issues/1"}, {"kind": "writeup", "name": "github.com/INQUIRELAB/mcp-bridge-api/issues/1#issuecomment-4320749148", "url": "https://github.com/INQUIRELAB/mcp-bridge-api/issues/1#issuecomment-4320749148"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50561", "publisher": "GitHub, Inc.", "title": "Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform", "summary": "Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the Authorization header \u2014 only performing a validity check. This allows an administrator token generated in another deployment instance or local testing environment to be used to a", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00682, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:17:38.307", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50561"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51927, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/xerrors/Yuxi/issues/673", "url": "https://github.com/xerrors/Yuxi/issues/673"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72572", "publisher": "TuranSec", "title": "A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to rea", "summary": "A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js file at lines 338 and 424 uses the user-controlled req.query.name parameter in path.join(cwd, name) without sanitization before passing it to res.download, enabling directory traversal via ../ sequences to access sensitive system files.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01149, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.883", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72572"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.66625, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-63106", "publisher": "VulnCheck", "title": "ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API", "summary": "ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform time-based blind SQL injection through the unsanitized rating parameter to extract the full database contents, including user credentials and administrator pass", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00496, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:25.633", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63106"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41692, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48158", "publisher": "GitHub, Inc.", "title": "use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19", "summary": "use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2dae054ca014068bdbbb4db96006424d674124 that executed remote attacker-controlled code on developer machines during\n`npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00671, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T16:19:48.117", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48158"}], "cwe": ["CWE-506"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51454, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48159", "publisher": "GitHub, Inc.", "title": "use-reducer-async is a React useReducer with async actions", "summary": "use-reducer-async is a React useReducer with async actions. Between 2026-05-18 16:29:52 and 2026-05-19 15:26:07, the default branch contained malicious commits da72edbde5705efcec6c62e0a3dcb73687b78dc8 through df07d5711458d8b46e11dd7afaaa21e88cafabfb that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, a", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00671, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T18:17:49.547", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48159"}], "cwe": ["CWE-506"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51454, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66145", "publisher": "SonicWALL, Inc.", "title": "An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earli", "summary": "An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00664, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:37.717", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66145"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51175, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71851", "publisher": "GitHub, Inc.", "title": "crypto-js is a JavaScript library of crypto standards", "summary": "crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random(), instead of a cryptographically secure source. This generator was introduced in version 3.1.2-4 and remained present in nearly every 3.x release. Nominal requests for 128 or 256 bits of entropy ", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.0055, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:54.390", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71851"}], "cwe": ["CWE-331", "CWE-334", "CWE-338"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45243, "vendors": [{"os": "npm", "pkg": "crypto-js", "status": "fixed", "fixed": "4.0.0", "cmd": "npm install crypto-js@\">=4.0.0\"\nnpm ls crypto-js", "url": "https://github.com/advisories/GHSA-rg76-677x-56q9", "note": "vulnerable: < 4.0.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "cryptojs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet9.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "brendonlee20042004-sys/weakrng-sweep (0 stars)", "url": "https://github.com/brendonlee20042004-sys/weakrng-sweep", "stars": 0}, {"kind": "writeup", "name": "github.com/brix/crypto-js/security/advisories/GHSA-rg76-677x-56q9", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-rg76-677x-56q9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-47659", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `file` parameter values containing path traversal sequences. The handler verifies only the supplied `job` and never normalises or confines the requested `file` path to that job's `jobs/<jobId", "cvss": 8.7, "sev": "HIGH", "epss": 0.00623, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:51.130", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47659"}], "cwe": ["CWE-22", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49247, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47661", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `file` parameter values containing path traversal sequences. The handler verifies only the supplied `job` and never normalises or confines the requested `file` path to that job's `jobs/<jobId", "cvss": 8.7, "sev": "HIGH", "epss": 0.00623, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:51.423", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47661"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49258, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/aehrc/pathling/security/advisories/GHSA-8w85-f63v-3wh6", "url": "https://github.com/aehrc/pathling/security/advisories/GHSA-8w85-f63v-3wh6"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72575", "publisher": "TuranSec", "title": "An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to ", "summary": "An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions (CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer) in server/permission/permission.go return true whenever p.UserId equals the requesting userId, but fail to reject the null/zero reference \u2014 unlike CanExecute, which explicitly guards it.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00529, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.277", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72575"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43919, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71290", "publisher": "Apache Software Foundation", "title": "Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer.\u00a0HostnameVerific", "summary": "Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer.\u00a0HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.\u00a0\n\n\nPlease note the classic version of HttpClient is not affected by this vulnerab", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00331, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:51.157", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "httpclient", "vendor": "apache", "type": "app", "affected": [">= 5.4 and < 5.6.4"], "fixed": "5.6.4", "safe": "before 5.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy httpclient || rpm -q httpclient || httpclient --version"}, {"label": "2. UPGRADE to 5.6.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade httpclient"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade httpclient"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.4 (Debian / Ubuntu)", "cmd": "apt-cache madison httpclient\nsudo apt install httpclient=<VERSION_BEFORE_5.4>\nsudo apt-mark hold httpclient"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list httpclient\nsudo dnf downgrade httpclient-<VERSION_BEFORE_5.4>\nsudo dnf versionlock add httpclient"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71290"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.25035, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "httpcomponents-client", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "httpcomponents-client", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "httpcomponents-core5", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "httpcomponents-core5", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "jmc", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61899", "publisher": "Apache Software Foundation", "title": "Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspat", "summary": "Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs.\nUsers are recommended to upgrade to version 5.9.1, which fixes this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00713, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.117", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "tapestry", "vendor": "apache", "type": "app", "affected": [">= 5.5.0 and < 5.9.1"], "fixed": "5.9.1", "safe": "before 5.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy tapestry || rpm -q tapestry || tapestry --version"}, {"label": "2. UPGRADE to 5.9.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade tapestry"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade tapestry"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison tapestry\nsudo apt install tapestry=<VERSION_BEFORE_5.5.0>\nsudo apt-mark hold tapestry"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list tapestry\nsudo dnf downgrade tapestry-<VERSION_BEFORE_5.5.0>\nsudo dnf versionlock add tapestry"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61899"}, {"t": "Vendor Advisory, Mailing List", "u": "https://lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5313, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72569", "publisher": "TuranSec", "title": "A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote att", "summary": "A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00736, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.503", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72569"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5397, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72573", "publisher": "TuranSec", "title": "An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker", "summary": "An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec('pm2 restart ' + id) without input validation or shell escaping, enabling command chaining via semicolons or other shell metacharacters.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01565, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.010", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72573"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.75113, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16626", "publisher": "Jaspersoft", "title": "Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperRepo", "summary": "Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server.\n\nThis issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00454, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T18:17:41.667", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16626"}], "cwe": ["CWE-611"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3842, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73294", "publisher": "GitHub, Inc.", "title": "Semaphore UI is a web interface for managing DevOps tools", "summary": "Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository git_url handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/{id}/repositories and scheduled commit-hash polling, allowing a project Manager or Owner to execute arbitrary OS commands in the Semaphore server process. This issue is fixed in versions 2.18.17 and 2.19.5-beta2", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0065, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:22.640", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73294"}], "cwe": ["CWE-78", "CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50524, "vendors": [{"os": "Go", "pkg": "github.com/semaphoreui/semaphore", "status": "fixed", "fixed": "0.0.0-20260704181911-7e8a9434bd81", "cmd": "go get github.com/semaphoreui/semaphore@v0.0.0-20260704181911-7e8a9434bd81\ngo list -m github.com/semaphoreui/semaphore", "url": "https://github.com/advisories/GHSA-xp7j-h7jc-4w8p", "note": "vulnerable: < 0.0.0-20260704181911-7e8a9434bd81"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/semaphoreui/semaphore/security/advisories/GHSA-xp7j-h7jc-4w8p", "url": "https://github.com/semaphoreui/semaphore/security/advisories/GHSA-xp7j-h7jc-4w8p"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67585", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to abort the Erlang VM via crafted _entities representation keys.\n\nEvery key of every object in the representations argument of the federation-mandated _entities field is converted with String.to_atom/1 by convert_key/2 in lib/absinthe/federation/schema/entities_field.ex. representations is typed as the op", "cvss": 8.7, "sev": "HIGH", "epss": 0.00707, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:06.927", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67585"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52886, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-55814", "publisher": "Apache Software Foundation", "title": "Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.\nUsers are recommended to upgrade t", "summary": "Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00657, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:26.790", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55814"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f268rj9dh"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.50843, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64639", "publisher": "HackerOne", "title": "Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privilege", "summary": "Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00552, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:12.280", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64639"}], "cwe": ["CWE-266"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45416, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67260", "publisher": "Apache Software Foundation", "title": "Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swe", "summary": "Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the task instance's `next_kwargs` without an allow-list, so a Dag author \u2014 who controls that value through the task execution API \u2014 can cause an arbitrary module import and object instantiation inside the scheduler process, or terminate the scheduler job. No non-default configuration is require", "cvss": 7.3, "sev": "HIGH", "epss": 0.00779, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:14.813", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": [">= 3.3.0 and < 3.3.1"], "fixed": "3.3.1", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison airflow\nsudo apt install airflow=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold airflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list airflow\nsudo dnf downgrade airflow-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add airflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67260"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70685"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/vygr0fh82cjzjp5k4vtfmboxryvm3lyn"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5544, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-q4c3-7575-55j2", "note": "vulnerable: >= 3.3.0, < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17510", "publisher": "CPANSec", "title": "Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a", "summary": "Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute.\n\nprint_attribute() sizes the destination buffer for a BMPSTRING attribute from its declared byte length with `Renew(*attribute, length, char)`. A zero length attribute makes that a zero size reallocation, which Perl implements as a free returning NULL, so the buffer pointer becomes NULL, the following `st", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T02:16:34.117", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17510"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48528, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 13", "pkg": "libcrypt-openssl-pkcs12-perl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-44630", "publisher": "Apache Software Foundation", "title": "Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attack", "summary": "Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0059, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T10:17:32.483", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44630"}], "cwe": ["CWE-400", "CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47526, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65942", "publisher": "Apache Software Foundation", "title": "TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0.\nUsers are recommended to up", "summary": "TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00589, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.240", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65942"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/pp6on4yyht3z8l0ktfo1xydhjzjbn4gt"}], "cwe": ["CWE-297"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47486, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65948", "publisher": "Apache Software Foundation", "title": "UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.\u00a0\nNote:\u00a0\u00a0UnixAuth is NOT a recommende", "summary": "UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.\u00a0\nNote:\u00a0\u00a0UnixAuth is NOT a recommended option for production deployments.\u00a0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00618, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.483", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65948"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/cx53rbkxkn5hbvzv8ohwvndzrxhc06qf"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48991, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72571", "publisher": "TuranSec", "title": "A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote ", "summary": "A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile() without sanitization, enabling directory traversal via absolute paths or ../ sequences to read sensitive system files.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01149, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.760", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72571"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.66624, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72526", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the multicloud-integrations component", "summary": "A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to target arbitrary managed clusters. This can force ArgoCD on the spoke clusters to synchronize attacker-controlled manifests, leading to arbitrary cod", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00705, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T02:16:38.200", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72526"}], "cwe": ["CWE-441"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.52834, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67587", "publisher": "Apache Software Foundation", "title": "Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, whic", "summary": "Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because `SyncCallback` is itself an Airflow class it passes the default `allowed_deserialization_classes` allow-list, so tightening that setting does not help. A Dag author \u2014 who controls a task instance's `next_kwargs` through the task execution API \u2014 can therefore cause an arbitrar", "cvss": 8.8, "sev": "HIGH", "epss": 0.00611, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:15.090", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": [">= 3.3.0 and < 3.3.1"], "fixed": "3.3.1", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison airflow\nsudo apt install airflow=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold airflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list airflow\nsudo dnf downgrade airflow-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add airflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67587"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70704"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/o00ww4n69qojvsckb464dtwd2nhzy6t0"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48652, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-2qjv-p2gc-mjg2", "note": "vulnerable: >= 3.3.0, < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:14:40.686713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-10595", "publisher": "huntr.dev", "title": "A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all rout", "summary": "A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathl", "cvss": 7.5, "sev": "HIGH", "epss": 0.00736, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T04:17:29.400", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10595"}], "cwe": ["CWE-23"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53964, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73032", "publisher": "VulnCheck", "title": "PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arb", "summary": "PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/w", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00558, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:46.320", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73032"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45765, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/papersgpt/papersgpt-for-zotero/issues/154", "url": "https://github.com/papersgpt/papersgpt-for-zotero/issues/154"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48763", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url` that accepts an attacker-controlled `filePath` and returns a presigned S3 `PUT` URL for that exact key. Because the endpoint only checks that the referenced typebot is public and that the referenced block is a file input block, an unauthenticated attacker who knows a valid", "cvss": 8.2, "sev": "HIGH", "epss": 0.00526, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:36.810", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48763"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43775, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-m7f5-3wcm-x2c4", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-m7f5-3wcm-x2c4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47660", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit `oauthMetadataUrl` parameter that is not validated against `pathling.bulkSubmit.allowableSources`. When present, the bulk-submit OAuth flow trusts metadata and the returned `token_endpoint` from the caller-chos", "cvss": 8.7, "sev": "HIGH", "epss": 0.00543, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:51.283", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47660"}], "cwe": ["CWE-522", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44862, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/aehrc/pathling/security/advisories/GHSA-245h-c573-9vr5", "url": "https://github.com/aehrc/pathling/security/advisories/GHSA-245h-c573-9vr5"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73263", "publisher": "GitHub, Inc.", "title": "Prowler is a cloud security platform", "summary": "Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth in api/src/backend/api/v1/serializers.py checked only exec blocks, and POST /api/v1/providers/{id}/connection loaded it through config.load_kube_config_from_dict in prowler/providers/kubernetes/kubernetes_provi", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0065, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:30.943", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73263"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.50522, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71847", "publisher": "GitHub, Inc.", "title": "Ruby JSON is a JSON implementation for Ruby", "summary": "Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partial_value reconstructs an incomplete object containing duplicate keys, the duplicate-key warning path calls cursor_position, which dereferences those stale pointers. This results in a heap-use-after-f", "cvss": 8.7, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:53.807", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71847"}], "cwe": ["CWE-416"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36016, "vendors": [{"os": "RubyGems", "pkg": "json", "status": "fixed", "fixed": "2.21.2", "cmd": "bundle update json\nbundle list | grep json", "url": "https://github.com/advisories/GHSA-9hj4-r449-hfvc", "note": "vulnerable: >= 2.20.0, <= 2.21.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "ruby-json", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "ruby-json", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47662", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on attacker-chosen resource families because those entrypoints do not consistently enforce the documented per-resource `read` and `write` authorities. The documented au", "cvss": 8.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:28.347", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47662"}], "cwe": ["CWE-20", "CWE-522", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.337, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/aehrc/pathling/security/advisories/GHSA-26hp-x47g-x95q", "url": "https://github.com/aehrc/pathling/security/advisories/GHSA-26hp-x47g-x95q"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47663", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on attacker-chosen resource families because those entrypoints do not consistently enforce the documented per-resource `read` and `write` authorities. The documented au", "cvss": 8.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:28.500", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47663"}], "cwe": ["CWE-285"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.337, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48765", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId` from a readable bot configuration and then overwrite that credential through `handleUpdateOAuthCredentials()` by supplying an attacker-controlled writable `workspaceId`. The update path validates only the attacker-supplied workspace and then updates the credential record by global `id` alone, while also ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00456, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:36.947", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48765"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38601, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-3788-7276-x4j4", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-3788-7276-x4j4"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73247", "publisher": "GitHub, Inc.", "title": "Kestra is an open-source, event-driven orchestration platform", "summary": "Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri argument to URI.create() and the server-side HTTP client without restricting private, loopback, or link-local destinations, allowing an unauthenticated attacker to import and execute a flow that accesses internal services or cloud metadata.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:19:05.417", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73247"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33824, "vendors": [{"os": "Maven", "pkg": "io.kestra:core", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-r56g-q4p6-m3p6", "note": "vulnerable: <= 1.3.31"}, {"os": "Maven", "pkg": "io.kestra:kestra-core", "status": "fixed", "fixed": "2.0.0", "cmd": "Set io.kestra:kestra-core to 2.0.0 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-r56g-q4p6-m3p6", "note": "vulnerable: < 2.0.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/kestra-io/kestra/security/advisories/GHSA-r56g-q4p6-m3p6", "url": "https://github.com/kestra-io/kestra/security/advisories/GHSA-r56g-q4p6-m3p6"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72581", "publisher": "TuranSec", "title": "A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remot", "summary": "A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to redirect to a Home Assistant instance without validating the destination URL, enabling internal network scanning and access to internal services.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00498, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.017", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72581"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4183, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71467", "publisher": "Red Hat, Inc.", "title": "A flaw was found in search-v2-api", "summary": "A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the `/federated` endpoint with the `Upgrade: websocket` header. This allows the attacker to bypass authentication and access federated search results across all configur", "cvss": 7.5, "sev": "HIGH", "epss": 0.00833, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:45.260", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71467"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57246, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66659", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia ", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection.\n\nThis issue affects Tablesome Table: from n/a through 1.2.9.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T06:22:09.420", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66659"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33126, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58076", "publisher": "Apache Software Foundation", "title": "Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class nam", "summary": "Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments from the same blob, with no restriction on what could be imported. An operator's `executor_config` reaches that branch, so a Dag author could place a value there that causes an arbitrary callable to be imported and invoked -- for example `subprocess.check_output`, or `bu", "cvss": 8.8, "sev": "HIGH", "epss": 0.00484, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:08.317", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": [">= 3.3.0 and < 3.3.1"], "fixed": "3.3.1", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison airflow\nsudo apt install airflow=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold airflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list airflow\nsudo dnf downgrade airflow-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add airflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58076"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/68511"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/t81p688t15jozxsng8521o60nh2kfsos"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40786, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-8prw-8m6x-8w6f", "note": "vulnerable: >= 3.3.0, < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19341", "publisher": "VulDB", "title": "A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306", "summary": "A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00598, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T07:17:04.373", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19341"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.47972, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19342", "publisher": "VulDB", "title": "A vulnerability was detected in code-projects Task Management System 1.0", "summary": "A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The exploit is now public and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00669, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T08:16:46.807", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19342"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51383, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/littleRain1355/PHPissue/issues/1", "url": "https://github.com/littleRain1355/PHPissue/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73246", "publisher": "GitHub, Inc.", "title": "Kestra is an open-source, event-driven orchestration platform", "summary": "Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables, HTTP headers, connection details, plaintext credentials, and execution identifiers while the main API on port 8080 remains protected. This issue is fixed", "cvss": 7.5, "sev": "HIGH", "epss": 0.00597, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:19:05.287", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73246"}], "cwe": ["CWE-200", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47927, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64637", "publisher": "HackerOne", "title": "Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to ", "summary": "Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00471, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:20.200", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64637"}], "cwe": ["CWE-269"], "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.39822, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65945", "publisher": "Apache Software Foundation", "title": "Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0\nUsers are recommended to upgrade to vers", "summary": "Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00637, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.363", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ranger", "vendor": "apache", "type": "app", "affected": ["< 2.9.0"], "fixed": "2.9.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ranger || rpm -q ranger || ranger --version"}, {"label": "2. UPGRADE to 2.9.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ranger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ranger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65945"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ww4b3d59r3pnhosljcrq9b98qzqtnclk"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49901, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-15803", "publisher": "Eclipse Foundation", "title": "In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing w", "summary": "In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for CVE-2018-1000644: the earlier fix did not cover all parser entry points. The issue is resolved in RDF4J 5.3.2, which rejects or disables DOCTYPE declarations", "cvss": 8.7, "sev": "HIGH", "epss": 0.00471, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:16:54.877", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15803"}], "cwe": ["CWE-611", "CWE-827"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3984, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "rdf4j", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rdf4j", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68968", "publisher": "Apache Software Foundation", "title": "Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backf", "summary": "Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authorization dependency parsed it with `int()` while the route handler parsed it as pydantic's `NonNegativeInt`, which accepts values `int()` rejects (`1.0` coerces to `1`); FastAPI resolves dependencies before endpoint validation, so the two acted on different Dags. An authenticated user holding", "cvss": 7.5, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:19.607", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68968"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70889"}], "cwe": ["CWE-436"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.34908, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-j4jc-cq9h-xrhr", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19082", "publisher": "CPANSec", "title": "Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from ", "summary": "Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags.\n\ncopy_string_tags() computes an ASCII EXIF tag's length as `entry->size - 1` to strip the trailing NUL. A zero-count ASCII entry sets `entry->size` to 0, and the derived length reaches i_tags_add() as -1, which is interpreted as a request to call strlen(), scanning past the entry to the n", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:11.363", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19082"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42566, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "libimager-perl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libimager-perl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/tonycoz/imager/commit/24bde0427a113264d53f45a9c29ae756d84c82fe.patch", "url": "https://github.com/tonycoz/imager/commit/24bde0427a113264d53f45a9c29ae756d84c82fe.patch"}, {"kind": "writeup", "name": "github.com/tonycoz/imager/security/advisories/GHSA-hx46-55wp-hv6m", "url": "https://github.com/tonycoz/imager/security/advisories/GHSA-hx46-55wp-hv6m"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47249", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connected peer can send a compressed RequestDataType_HashArrayType direct request that is only 442 bytes on the wire but expands into 200,000 decoded hash entries inside the resolver path. The resolver's antiflood logic counts only a single logical message and the compressed wi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:03.670", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47249"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41096, "vendors": [{"os": "Go", "pkg": "github.com/klever-io/klever-go", "status": "fixed", "fixed": "1.7.18", "cmd": "go get github.com/klever-io/klever-go@v1.7.18\ngo list -m github.com/klever-io/klever-go", "url": "https://github.com/advisories/GHSA-w342-mj6g-v9c4", "note": "vulnerable: < 1.7.18"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/klever-io/klever-go/security/advisories/GHSA-w342-mj6g-v9c4", "url": "https://github.com/klever-io/klever-go/security/advisories/GHSA-w342-mj6g-v9c4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-52878", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped on the Klever-Go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback, where txVersionChecker.CheckTxVersi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.593", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52878"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41103, "vendors": [{"os": "Go", "pkg": "github.com/klever-io/klever-go", "status": "fixed", "fixed": "1.7.18", "cmd": "go get github.com/klever-io/klever-go@v1.7.18\ngo list -m github.com/klever-io/klever-go", "url": "https://github.com/advisories/GHSA-rm5c-5x2p-48wr", "note": "vulnerable: >= 1.7.14, <= 1.7.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr", "url": "https://github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-52879", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttler, or bound on the number of concurrent in-flight spawns. Because the antiflood check runs inside the spawned goroutine rather than before it, a single c", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.743", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52879"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41103, "vendors": [{"os": "Go", "pkg": "github.com/klever-io/klever-go", "status": "fixed", "fixed": "1.7.18", "cmd": "go get github.com/klever-io/klever-go@v1.7.18\ngo list -m github.com/klever-io/klever-go", "url": "https://github.com/advisories/GHSA-hf2g-6j7h-98wg", "note": "vulnerable: >= 1.7.14, <= 1.7.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/klever-io/klever-go/security/advisories/GHSA-hf2g-6j7h-98wg", "url": "https://github.com/klever-io/klever-go/security/advisories/GHSA-hf2g-6j7h-98wg"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-52880", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serves requests through Go's default HTTP server with no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a result, incoming connections that never complete their request headers are held ope", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.890", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52880"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41103, "vendors": [{"os": "Go", "pkg": "github.com/klever-io/klever-go", "status": "fixed", "fixed": "1.7.18", "cmd": "go get github.com/klever-io/klever-go@v1.7.18\ngo list -m github.com/klever-io/klever-go", "url": "https://github.com/advisories/GHSA-w4c6-7r69-w7j9", "note": "vulnerable: >= 1.7.14, <= 1.7.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/klever-io/klever-go/security/advisories/GHSA-w4c6-7r69-w7j9", "url": "https://github.com/klever-io/klever-go/security/advisories/GHSA-w4c6-7r69-w7j9"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19268", "publisher": "VulDB", "title": "A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230", "summary": "A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. Continious delivery with rolling releases is used by ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.01817, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T08:16:51.623", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19268"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.7856, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/abdullah1854/MCPGateway/issues/2", "url": "https://github.com/abdullah1854/MCPGateway/issues/2"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73293", "publisher": "GitHub, Inc.", "title": "Semaphore UI is a web interface for managing DevOps tools", "summary": "Semaphore UI is a web interface for managing DevOps tools.  Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/{id}/roles to create a custom manager role with permission bitmask 15, overriding the built-in manager permissions and granting CanUpdateProject and CanManageProjectUsers owner capabilities. This issue is fixed in versions 2.18.19", "cvss": 8.8, "sev": "HIGH", "epss": 0.00569, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:22.493", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73293"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.46414, "vendors": [{"os": "Go", "pkg": "github.com/semaphoreui/semaphore", "status": "fixed", "fixed": "0.0.0-20260705182501-bb2a4e1f08c8", "cmd": "go get github.com/semaphoreui/semaphore@v0.0.0-20260705182501-bb2a4e1f08c8\ngo list -m github.com/semaphoreui/semaphore", "url": "https://github.com/advisories/GHSA-cxvf-gvfq-36w2", "note": "vulnerable: < 0.0.0-20260705182501-bb2a4e1f08c8"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-8798", "publisher": "bcorg", "title": "In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platform", "summary": "In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long as that flag stayed clear, so a persistent failure of the on-chip entropy source - whether from a hardware fault, from the underlying DRBG being exhaus", "cvss": 8.7, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T01:16:31.393", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8798"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36014, "vendors": [{"os": "Maven", "pkg": "org.bouncycastle:bc-fips", "status": "fixed", "fixed": "2.1.3", "cmd": "Set org.bouncycastle:bc-fips to 2.1.3 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-v6w3-qrh8-qccc", "note": "vulnerable: >= 2.1.0, < 2.1.3"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72586", "publisher": "TuranSec", "title": "A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attac", "summary": "A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQ_QUERY Socket.IO event. When secureEnabled=true, all other sensitive Socket.IO events (DEVICE_BROWSE, HOST_INTERFACES, DEVICE_TAGS_REQUEST, etc.) call isSocketAdminAuthorized to verify the connection token, but the DAQ_QUERY handler in server/runtime/index.js lacks this check entirely.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00633, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.637", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72586"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49733, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72691", "publisher": "TuranSec", "title": "An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated", "summary": "An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever any docId parameter is supplied, even one corresponding to no real document, allowing the authentication gate to be bypassed by supplying an arbitrary str", "cvss": 7.5, "sev": "HIGH", "epss": 0.00647, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:39.350", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72691"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50387, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48048", "publisher": "GitHub, Inc.", "title": "XWiki Platform is a generic wiki platform", "summary": "XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and em", "cvss": 7.5, "sev": "HIGH", "epss": 0.00651, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T16:19:47.967", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48048"}], "cwe": ["CWE-359"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50612, "vendors": [{"os": "Maven", "pkg": "org.xwiki.platform:xwiki-platform-livetable-ui", "status": "fixed", "fixed": "16.10.17", "cmd": "Set org.xwiki.platform:xwiki-platform-livetable-ui to 16.10.17 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-rh28-mqj4-8x59", "note": "vulnerable: >= 6.2.1, < 16.10.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-10754", "publisher": "Pegasystems Inc.", "title": "Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures", "summary": "Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00777, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T18:17:39.053", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10754"}], "cwe": ["CWE-347"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55389, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70398", "publisher": "Red Hat, Inc.", "title": "A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM)", "summary": "A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer tokens from secure locations to a namespace they control. This unauthorized access to tokens can lead to the disclosure of critical information and bypass", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00521, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T02:16:38.060", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70398"}], "cwe": ["CWE-441"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.4342, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19426", "publisher": "TWCERT/CC", "title": "POS System developed by FitSoft has a Missing Authentication vulnerability", "summary": "POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00517, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T08:17:17.493", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19426"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43128, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19566", "publisher": "CPANSec", "title": "Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IP", "summary": "Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths.\n\nThe _encode method accepts any prefix length matching `(0|[1-9][0-9]*)` and passes it to _width2bits(), which builds the mask as `'1' x ($width + 8)`, one character per bit. The _inc() method then unpacks the packed mask into a Perl array of one scalar per byte, so the prefix length alone sets the allocation size: `::/", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T09:17:29.753", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19566"}], "cwe": ["CWE-789", "CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49553, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "libnet-cidr-set-perl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libnet-cidr-set-perl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-11325", "publisher": "Cloudflare, Inc.", "title": "Description\n\n\n\nCloudflare was recently notified by external researchers of vulnerabilities in this archived re", "summary": "Description\n\n\n\nCloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src/index.ts` reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as CLOUDFLARE_API_TOKEN and GITHUB_TOKEN to an attacker. Because this repository has been deprecated since 2024, Cloudflare will not be issuing patches.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0068, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T12:17:44.370", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11325"}], "cwe": ["CWE-78", "CWE-1104"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51871, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70465", "publisher": "Fortinet, Inc.", "title": "A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClient", "summary": "A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00516, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T12:19:47.017", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "forticlient", "vendor": "fortinet", "type": "app", "affected": [">= 7.2.0 and < 7.2.12", ">= 7.4.0 and < 7.4.4"], "fixed": "7.2.12, 7.4.4", "safe": "before 7.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy forticlient || rpm -q forticlient || forticlient --version"}, {"label": "2. UPGRADE to 7.2.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade forticlient"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade forticlient"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison forticlient\nsudo apt install forticlient=<VERSION_BEFORE_7.2.0>\nsudo apt-mark hold forticlient"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list forticlient\nsudo dnf downgrade forticlient-<VERSION_BEFORE_7.2.0>\nsudo dnf versionlock add forticlient"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70465"}, {"t": "Vendor Advisory, Mitigation", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-156"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43077, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65941", "publisher": "Progress Software Corporation", "title": "In WhatsUp Gold versions released before 2026.0.2,\u00a0an unauthenticated remote attacker with network access to t", "summary": "In WhatsUp Gold versions released before 2026.0.2,\u00a0an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00678, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:14.050", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "whatsup gold", "vendor": "progress", "type": "app", "affected": ["< 26.0.2"], "fixed": "26.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy whatsup-gold || rpm -q whatsup-gold || whatsup-gold --version"}, {"label": "2. UPGRADE to 26.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade whatsup-gold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade whatsup-gold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65941"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026"}], "cwe": ["CWE-73", "CWE-94", "CWE-306", "CWE-918"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51788, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18683", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00665, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.790", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18683"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51235, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19351", "publisher": "VulDB", "title": "A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28", "summary": "A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 0.1.29 addresses this issue. The patch i", "cvss": 7.3, "sev": "HIGH", "epss": 0.00526, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T12:16:29.457", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19351"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43773, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/windhxy/CVE-my/issues/2", "url": "https://github.com/windhxy/CVE-my/issues/2"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19376", "publisher": "VulDB", "title": "A vulnerability has been found in Uasoft Badaso 3.0.0-alpha", "summary": "A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T00:17:10.847", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19376"}], "cwe": ["CWE-266", "CWE-275"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39897, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-20348", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cau", "summary": "A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be scanned by ClamAV on", "cvss": 7.5, "sev": "HIGH", "epss": 0.00616, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:03.537", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "secure endpoint", "vendor": "cisco", "type": "app", "affected": ["< 1.27.4"], "fixed": "1.27.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy secure-endpoint || rpm -q secure-endpoint || secure-endpoint --version"}, {"label": "2. UPGRADE to 1.27.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade secure-endpoint"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade secure-endpoint"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "secure endpoint", "vendor": "cisco", "type": "app", "affected": ["< 1.29.2"], "fixed": "1.29.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy secure-endpoint || rpm -q secure-endpoint || secure-endpoint --version"}, {"label": "2. UPGRADE to 1.29.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade secure-endpoint"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade secure-endpoint"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "secure endpoint", "vendor": "cisco", "type": "app", "affected": ["< 7.5.24.21780", ">= 8.0.0 and < 8.6.3"], "fixed": "7.5.24.21780, 8.6.3", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy secure-endpoint || rpm -q secure-endpoint || secure-endpoint --version"}, {"label": "2. UPGRADE to 7.5.24.21780 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade secure-endpoint"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade secure-endpoint"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison secure-endpoint\nsudo apt install secure-endpoint=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold secure-endpoint"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list secure-endpoint\nsudo dnf downgrade secure-endpoint-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add secure-endpoint"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20348"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48896, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "clamav", "status": "fixed", "fixed": "1.4.6+dfsg-0+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.4.6+dfsg-0+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "clamav", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "clamav", "status": "fixed", "fixed": "clamav-1.4.6-r0", "cmd": "apk add --upgrade clamav\napk info -v clamav", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2116", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20348.html", "note": "ALAS2023-2026-2116"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20348.html", "note": "ALAS2-2026-3894"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3894 (important): clamav1.4", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-19243", "publisher": "VulDB", "title": "A security vulnerability has been detected in HKUDS nanobot up to 0.2.1", "summary": "A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.0 is recommended to address this issue. The name of the patch", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.02262, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:50.913", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19243"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": [], "fix": true, "watched": false, "epss_pct": 0.82866, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/YLChen-007/8fcbf8e49e7be568e1a92e9e0414fdba", "url": "https://gist.github.com/YLChen-007/8fcbf8e49e7be568e1a92e9e0414fdba"}, {"kind": "writeup", "name": "github.com/HKUDS/nanobot/issues/4521", "url": "https://github.com/HKUDS/nanobot/issues/4521"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64940", "publisher": "JPCERT/CC", "title": "Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive r", "summary": "Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from the management console.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:48.733", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64940"}], "cwe": ["CWE-625"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32857, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72564", "publisher": "TuranSec", "title": "An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attac", "summary": "An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00443, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.837", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72564"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.37462, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72579", "publisher": "TuranSec", "title": "An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can", "summary": "An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01097, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.780", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72579"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.6535, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72582", "publisher": "TuranSec", "title": "A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attack", "summary": "A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTPEmail function in pkg/auth/local.go dereferences a pointer obtained from an unchecked error path without validating it is non-nil, causing a fatal panic that terminates the entire server when a recovery request is sent to the /api/auth/local/recover endpoint.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00608, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.137", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72582"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48432, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72688", "publisher": "TuranSec", "title": "A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated", "summary": "A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTER_KEY-signed file access tokens for any caller-supplied URL without performing any session check, defeating the only access control protecting stored contract files.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:38.987", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72688"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48551, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73031", "publisher": "VulnCheck", "title": "telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute a", "summary": "telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw message content directly to v-html without HTML escaping or sanitization, enabling stored, cross-user, zero-click execution of injected payloads such as im", "cvss": 8.7, "sev": "HIGH", "epss": 0.00662, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:46.173", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73031"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51069, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-55676", "publisher": "ICS-CERT", "title": "Malcolm is a network traffic analysis tool suite", "summary": "Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array by default (`file-upload/php/config.php:16`), so the type check is a no-op and every extension is accepted. The filename sanitizer keeps the `.php` ex", "cvss": 8.8, "sev": "HIGH", "epss": 0.00601, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:37.560", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55676"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.48103, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70468", "publisher": "Fortinet, Inc.", "title": "A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Forti", "summary": "A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>", "cvss": 8.1, "sev": "HIGH", "epss": 0.00459, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:25.227", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortimanager", "vendor": "fortinet", "type": "app", "affected": [">= 7.2.5 and < 7.2.10", ">= 7.4.3 and < 7.4.6", "7.6.1"], "fixed": "7.2.10, 7.4.6", "safe": "before 7.2.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortimanager || rpm -q fortimanager || fortimanager --version"}, {"label": "2. UPGRADE to 7.2.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortimanager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortimanager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.5 (Debian / Ubuntu)", "cmd": "apt-cache madison fortimanager\nsudo apt install fortimanager=<VERSION_BEFORE_7.2.5>\nsudo apt-mark hold fortimanager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortimanager\nsudo dnf downgrade fortimanager-<VERSION_BEFORE_7.2.5>\nsudo dnf versionlock add fortimanager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fortimanager cloud", "vendor": "fortinet", "type": "app", "affected": [">= 7.2.5 and < 7.2.10", ">= 7.4.3 and <= 7.4.6", "7.6.1"], "fixed": "7.2.10", "safe": "before 7.2.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortimanager-cloud || rpm -q fortimanager-cloud || fortimanager-cloud --version"}, {"label": "2. UPGRADE to 7.2.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortimanager-cloud"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortimanager-cloud"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.5 (Debian / Ubuntu)", "cmd": "apt-cache madison fortimanager-cloud\nsudo apt install fortimanager-cloud=<VERSION_BEFORE_7.2.5>\nsudo apt-mark hold fortimanager-cloud"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortimanager-cloud\nsudo dnf downgrade fortimanager-cloud-<VERSION_BEFORE_7.2.5>\nsudo dnf versionlock add fortimanager-cloud"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70468"}, {"t": "Vendor Advisory, Mitigation", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-160"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38844, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19211", "publisher": "VulDB", "title": "A vulnerability was found in SourceCodester Photo Share Website 1.0", "summary": "A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:02.027", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19211"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3627, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/gensnext/cve/issues/3", "url": "https://github.com/gensnext/cve/issues/3"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19231", "publisher": "VulDB", "title": "A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0", "summary": "A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_appointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:17:40.840", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19231"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36298, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Andyov0/cve/issues/3", "url": "https://github.com/Andyov0/cve/issues/3"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48169", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read, modify, and delete resources in any workspace just by swapping UUIDs in their API requests. On top of that, every member managemen", "cvss": 8.8, "sev": "HIGH", "epss": 0.00442, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T22:16:59.013", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48169"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.37414, "vendors": [{"os": "Python (pip)", "pkg": "praisonai-platform", "status": "fixed", "fixed": "0.1.4", "cmd": "pip install --upgrade \"praisonai-platform>=0.1.4\"\npip show praisonai-platform", "url": "https://github.com/advisories/GHSA-gv23-xrm3-8c62", "note": "vulnerable: <= 0.1.2"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gv23-xrm3-8c62", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gv23-xrm3-8c62"}, {"kind": "writeup", "name": "github.com/pypa/advisory-database/tree/main/vulns/praisonai-platform/PYSEC-2026-2935.yaml", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/praisonai-platform/PYSEC-2026-2935.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48170", "publisher": "GitHub, Inc.", "title": "`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applyi", "summary": "`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `\"__proto__.someProp\"`. After one such patch,\n`Object.prototype.someProp` is set process-wide, affecting every plain object in the Node process. Any service that calls `scimPatch()` on attacker-controlled JSON (i.e. any SCIM endpoint accepting `PATCH` from an external IdP)", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00403, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T22:16:59.170", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48170"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.33396, "vendors": [{"os": "npm", "pkg": "scim-patch", "status": "fixed", "fixed": "0.9.1", "cmd": "npm install scim-patch@\">=0.9.1\"\nnpm ls scim-patch", "url": "https://github.com/advisories/GHSA-9m6g-wc8r-q59c", "note": "vulnerable: <= 0.9.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/thomaspoignant/scim-patch/security/advisories/GHSA-9m6g-wc8r-q59c", "url": "https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-9m6g-wc8r-q59c"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19343", "publisher": "VulDB", "title": "A flaw has been found in code-projects Task Management System 1.0", "summary": "A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T08:16:47.710", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19343"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36263, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/littleRain1355/PHPissue/issues/2", "url": "https://github.com/littleRain1355/PHPissue/issues/2"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19344", "publisher": "VulDB", "title": "A vulnerability has been found in code-projects Task Management System 1.0", "summary": "A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/comment_count_user.php. The manipulation of the argument task_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T10:17:08.590", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19344"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36265, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/littleRain1355/PHPissue/issues/3", "url": "https://github.com/littleRain1355/PHPissue/issues/3"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73249", "publisher": "GitHub, Inc.", "title": "calibre is an e-book manager", "summary": "calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits needs_db_write=True, causing Router.dispatch() to skip ctx.check_for_write_access() before update_annotations() passes attacker-controlled JSON to db.merge_annotations_for_book(), which allows a readonly user or an anonymous user on an unauthenticated deployment to persist ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:19:05.687", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73249"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36902, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "calibre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "calibre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-20337", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a", "summary": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause th", "cvss": 7.5, "sev": "HIGH", "epss": 0.00508, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:02.413", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20337"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42538, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69127", "publisher": "GitHub, Inc.", "title": "Kirby is an open-source content management system", "summary": "Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsanitized PHP error messages that expose the full filesystem path of the Kirby installation to unauthenticated API users. This vulnerability affects all Kirby sites that have not disabled the REST API with the 'api' => false option. This issue is fixed in versions 4.9.5 and 5.5.2.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00699, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:53.107", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69127"}], "cwe": ["CWE-497"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52617, "vendors": [{"os": "Composer (PHP)", "pkg": "getkirby/cms", "status": "fixed", "fixed": "4.9.5", "cmd": "composer require \"getkirby/cms:>=4.9.5\"", "url": "https://github.com/advisories/GHSA-rf2p-vh74-7vvh", "note": "vulnerable: <= 4.9.4"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19266", "publisher": "VulDB", "title": "A vulnerability was determined in Kirachon context-engine up to 1.9.0", "summary": "A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.03912, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T08:16:51.390", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19266"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["EPSS top 10%: very likely to be exploited"], "fix": true, "watched": false, "epss_pct": 0.90262, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Kirachon/context-engine/commit/e0729dcfd3a2b1682a7bff86e7174852c03419ba", "url": "https://github.com/Kirachon/context-engine/commit/e0729dcfd3a2b1682a7bff86e7174852c03419ba"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-67620", "publisher": "VulnCheck", "title": "Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in ht", "summary": "Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticated attackers to force the server to issue arbitrary GET requests to cloud instance metadata services. Attackers can send requests to the fetch-links API", "cvss": 7.7, "sev": "HIGH", "epss": 0.00463, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T16:16:49.420", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.4"], "fixed": "newer than 3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67620"}, {"t": "Exploit, Mitigation", "u": "https://github.com/abdugafforov-bobur/CVE-2026-67620-poc"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.39193, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "abdugafforov-bobur/CVE-2026-67620-poc (1 stars)", "url": "https://github.com/abdugafforov-bobur/CVE-2026-67620-poc", "stars": 1}, {"kind": "writeup", "name": "www.vulncheck.com/advisories/flowise-ssrf-via-fetch-links-endpoint-incomplete-deny-list", "url": "https://www.vulncheck.com/advisories/flowise-ssrf-via-fetch-links-endpoint-incomplete-deny-list"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-72689", "publisher": "TuranSec", "title": "A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unau", "summary": "A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and returns full records including sender and signer PII and a pre-signed document download URL whenever the document's IsEnableOTP flag is unset, which is the", "cvss": 7.5, "sev": "HIGH", "epss": 0.00526, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:39.103", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72689"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43735, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71475", "publisher": "Red Hat, Inc.", "title": "A flaw was found in insights-client", "summary": "A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the ClusterID, which is controlled by the spoke, is used directly in the request path without proper validation or URL encoding. This vulnerability allows a malicious spoke to redirect authenticated requests to unintended API endpoints, potentially leading to information disclo", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00694, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:45.673", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "advanced cluster management for kubernetes", "vendor": "redhat", "type": "app", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advanced-cluster-management-for-kubernetes || rpm -q advanced-cluster-management-for-kubernetes || advanced-cluster-management-for-kubernetes --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison advanced-cluster-management-for-kubernetes\nsudo apt install advanced-cluster-management-for-kubernetes=<VERSION_BEFORE_2.0>\nsudo apt-mark hold advanced-cluster-management-for-kubernetes"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advanced-cluster-management-for-kubernetes\nsudo dnf downgrade advanced-cluster-management-for-kubernetes-<VERSION_BEFORE_2.0>\nsudo dnf versionlock add advanced-cluster-management-for-kubernetes"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "insights-client", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy insights-client || rpm -q insights-client || insights-client --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71475"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71475"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2512154"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52403, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19345", "publisher": "VulDB", "title": "A vulnerability was found in code-projects Task Management System 1.0", "summary": "A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument task_id/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00547, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T10:17:10.387", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19345"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45089, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/littleRain1355/PHPissue/issues/4", "url": "https://github.com/littleRain1355/PHPissue/issues/4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-57858", "publisher": "VulnCheck", "title": "Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the Bookin", "summary": "Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close the inline script string literal with a crafted payload that executes in the browser of every visitor to the affected public booking page, enabling session", "cvss": 8.9, "sev": "HIGH", "epss": 0.0037, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:22.943", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57858"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.29735, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "zylideum/CVE-2026-57858 (0 stars)", "url": "https://github.com/zylideum/CVE-2026-57858", "stars": 0}, {"kind": "writeup", "name": "ashtonr.com/blog/cve-2026-57858/", "url": "https://ashtonr.com/blog/cve-2026-57858/"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17603", "publisher": "Sonatype", "title": "Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set throug", "summary": "Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on every new connection. On the default H2 database backend, this could be leveraged to achieve remote code execution as the Nexus process user.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00483, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:01.250", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nexus repository manager", "vendor": "sonatype", "type": "app", "affected": [">= 3.20.0 and < 3.95.0"], "fixed": "3.95.0", "safe": "before 3.20.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nexus-repository-manager || rpm -q nexus-repository-manager || nexus-repository-manager --version"}, {"label": "2. UPGRADE to 3.95.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nexus-repository-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nexus-repository-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.20.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nexus-repository-manager\nsudo apt install nexus-repository-manager=<VERSION_BEFORE_3.20.0>\nsudo apt-mark hold nexus-repository-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nexus-repository-manager\nsudo dnf downgrade nexus-repository-manager-<VERSION_BEFORE_3.20.0>\nsudo dnf versionlock add nexus-repository-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17603"}, {"t": "Vendor Advisory", "u": "https://support.sonatype.com/hc/en-us/articles/53890127489427/"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40725, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-20338", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a", "summary": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate as ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00471, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:02.610", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20338"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39777, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-20339", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to ", "summary": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:02.807", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20339"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39072, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "clamav", "status": "fixed", "fixed": "1.4.6+dfsg-0+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.4.6+dfsg-0+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "clamav", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "clamav", "status": "fixed", "fixed": "clamav-1.4.6-r0", "cmd": "apk add --upgrade clamav\napk info -v clamav", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2116", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20339.html", "note": "ALAS2023-2026-2116"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20339.html", "note": "ALAS2-2026-3894"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3894 (important): clamav1.4", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20345", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cau", "summary": "A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scann", "cvss": 7.5, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:03.003", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20345"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39072, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "clamav", "status": "fixed", "fixed": "1.4.6+dfsg-0+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.4.6+dfsg-0+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "clamav", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "clamav", "status": "fixed", "fixed": "clamav-1.4.6-r0", "cmd": "apk add --upgrade clamav\napk info -v clamav", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2116", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20345.html", "note": "ALAS2023-2026-2116"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20345.html", "note": "ALAS2-2026-3894"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3894 (important): clamav1.4", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20346", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cau", "summary": "A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted PDF fil", "cvss": 7.5, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:03.140", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20346"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37741, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "clamav", "status": "fixed", "fixed": "1.4.6+dfsg-0+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.4.6+dfsg-0+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "clamav", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "clamav", "status": "fixed", "fixed": "clamav-1.4.6-r0", "cmd": "apk add --upgrade clamav\napk info -v clamav", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2116", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20346.html", "note": "ALAS2023-2026-2116"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20346.html", "note": "ALAS2-2026-3894"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3894 (important): clamav1.4", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-20347", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to ", "summary": "A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted M", "cvss": 7.5, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:03.337", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20347"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39072, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "clamav", "status": "fixed", "fixed": "1.5.4+dfsg-0ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.5.4+dfsg-0ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "clamav", "status": "fixed", "fixed": "1.4.6+dfsg-0+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade clamav\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' clamav)\" ge \"1.4.6+dfsg-0+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "clamav", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "clamav", "status": "fixed", "fixed": "clamav-1.4.6-r0", "cmd": "apk add --upgrade clamav\napk info -v clamav", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2116", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20347.html", "note": "ALAS2023-2026-2116"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-20347.html", "note": "ALAS2-2026-3894"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-Wuuv", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3894 (important): clamav1.4", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-19374", "publisher": "VulDB", "title": "A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06", "summary": "A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version detail", "cvss": 7.3, "sev": "HIGH", "epss": 0.00495, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T23:16:36.487", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19374"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41589, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/adafap/api-mcp/issues/4", "url": "https://github.com/adafap/api-mcp/issues/4"}, {"kind": "writeup", "name": "vuldb.com/vuln/387258/cti", "url": "https://vuldb.com/vuln/387258/cti"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-29036", "publisher": "VulnCheck", "title": "cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the dec", "summary": "cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape sequences (~0 or ~1) in patch paths. Attackers can submit malicious RFC 6902 JSON Patch input to applications using cJSONUtils_ApplyPatches() or cJSON", "cvss": 7.5, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:22.257", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-29036"}], "cwe": ["CWE-706"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37579, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 20.04", "pkg": "cjson", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "cjson", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "cjson", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "cjson", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "cjson", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rpm-ostree", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64636", "publisher": "HackerOne", "title": "An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated u", "summary": "An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00403, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:20.070", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64636"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33386, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19384", "publisher": "VulDB", "title": "A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0", "summary": "A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T03:16:40.050", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19384"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36284, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/HZFW2026/cve/issues/2", "url": "https://github.com/HZFW2026/cve/issues/2"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-12984", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitiv", "summary": "Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data.\n\nThis issue affects WAH7601: through 20072026.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:17:55.887", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12984"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25727, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72692", "publisher": "TuranSec", "title": "A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated ", "summary": "A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes IsDeclined, DeclineReason, and a caller-supplied DeclineBy pointer without verifying the caller's identity, enabling workflow termination and evidentiary record ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:39.470", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72692"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36826, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68872", "publisher": "Apache Software Foundation", "title": "The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resol", "summary": "The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00596, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:30.587", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "apache-airflow-providers-amazon", "vendor": "apache", "type": "app", "affected": ["< 9.34.0"], "fixed": "9.34.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apache-airflow-providers-amazon || rpm -q apache-airflow-providers-amazon || apache-airflow-providers-amazon --version"}, {"label": "2. UPGRADE to 9.34.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apache-airflow-providers-amazon"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apache-airflow-providers-amazon"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68872"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70878"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/9nd31g40rd2zpgwwymskvjpfq1xnmllg"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47818, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68868", "publisher": "Apache Software Foundation", "title": "The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team sco", "summary": "The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnostic secret name. In a deployment running multi-team mode with this backend, a task or Dag belonging to one team resolved another team's Connection or Va", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00596, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T11:17:10.063", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "apache-airflow-providers-google", "vendor": "apache", "type": "app", "affected": ["< 22.3.0"], "fixed": "22.3.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apache-airflow-providers-google || rpm -q apache-airflow-providers-google || apache-airflow-providers-google --version"}, {"label": "2. UPGRADE to 22.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apache-airflow-providers-google"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apache-airflow-providers-google"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68868"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70869"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/03h5y0fmqlh0yf055zlocxh591ozx69x"}], "cwe": ["CWE-1220"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47818, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17095", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection.", "cvss": 8.3, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:24.570", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17095"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44691, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13505", "publisher": "bcorg", "title": "In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 ", "summary": "In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by overriding Object.finalize. Finalization runs at an unspecified time and in an unspecified order and is serviced by a single finalizer thread, s", "cvss": 8.7, "sev": "HIGH", "epss": 0.00253, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T02:17:16.520", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13505"}], "cwe": ["CWE-772"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15897, "vendors": [{"os": "Maven", "pkg": "org.bouncycastle:bc-fips", "status": "fixed", "fixed": "1.0.2.7", "cmd": "Set org.bouncycastle:bc-fips to 1.0.2.7 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-98j2-6v39-78w8", "note": "vulnerable: < 1.0.2.7"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19355", "publisher": "VulDB", "title": "A vulnerability was determined in MingSoft MCMS up to 3.0.6", "summary": "A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T14:17:26.763", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19355"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34252, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72584", "publisher": "TuranSec", "title": "A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated re", "summary": "A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes.", "cvss": 7.4, "sev": "HIGH", "epss": 0.0039, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.390", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72584"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31982, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59233", "publisher": "Secur0", "title": "Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows a", "summary": "Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated user to grant any role, including their own, the complete set of application permissions via a crafted POST request to the permission save endpoint, which performs no authorization check before synchronizing the submitted permissions to the specified role.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:19:51.713", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59233"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34585, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "secur0.com/en/cna/cve-list/cve-2026-59233-missing-authorization-in-prospero-flow-crm-permi", "url": "https://secur0.com/en/cna/cve-list/cve-2026-59233-missing-authorization-in-prospero-flow-crm-permission-endpoint"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19433", "publisher": "Secur0", "title": "Authorization Bypass Through User-Controlled Key in the contact management component in Roskus Prospero Flow C", "summary": "Authorization Bypass Through User-Controlled Key in the contact management component in Roskus Prospero Flow CRM before 5.4.8 allows authenticated users of any company to blindly overwrite the contact data of another company and to download that contact's personal data as a vCard via the contact's numeric identifier, because the save and export operations retrieve the record without constraining the query to the authenticated user's company.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00439, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T15:17:43.330", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19433"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37139, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "secur0.com/en/cna/cve-list/cve-2026-19433-idor-in-prospero-flow-crm-contact-save-and-vcard", "url": "https://secur0.com/en/cna/cve-list/cve-2026-19433-idor-in-prospero-flow-crm-contact-save-and-vcard-export"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72759", "publisher": "CIRCL", "title": "In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete aut", "summary": "In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object existed and the visibility check failed. As a result, deleted conversions bypassed the authorization check and their retained history input/output could be", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00478, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T15:17:44.520", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72759"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40306, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19556", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary c", "summary": "Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:21.230", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.137"], "fixed": "151.0.7922.137", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.137 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19556"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34539, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19559", "publisher": "Chrome", "title": "Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary", "summary": "Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:21.547", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.137"], "fixed": "151.0.7922.137", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.137 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19559"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3454, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/540100588", "url": "https://issues.chromium.org/issues/540100588"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19560", "publisher": "Chrome", "title": "Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrar", "summary": "Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:21.647", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.137"], "fixed": "151.0.7922.137", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.137 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19560"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34544, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19594", "publisher": "SNOWFLAKE", "title": "Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed co", "summary": "Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP parameter pollution (CWE-141) via unencoded `&`/`#`/`=` characters in query string values. An attacker with access to a downstream application built on snowflake.core could exploit the path trave", "cvss": 8.1, "sev": "HIGH", "epss": 0.00496, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T06:21:57.223", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19594"}], "cwe": ["CWE-22", "CWE-141"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41672, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19362", "publisher": "VulDB", "title": "A vulnerability has been found in lmammino oidc-authorizer 0.4.0", "summary": "A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_header of the file src/parse_token_from_header.rs of the component Authorization Header Parsing. The manipulation of the argument authorization_token leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclo", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00637, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:43.117", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19362"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49905, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73264", "publisher": "GitHub, Inc.", "title": "Prowler is a cloud security platform", "summary": "Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/{id}/connection, causing api/src/backend/tasks/jobs/lighthouse_providers.py to send outbound requests, including the API key in the Authorization header, to attacker-controlle", "cvss": 7.6, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:31.087", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73264"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.36724, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71845", "publisher": "Red Hat, Inc.", "title": "A flaw was found in insights-client", "summary": "A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes, including CCX_TOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod log on every startup. An attacker with access to pod logs or centralized logging could obtain the credential, leading to unauthorized access to the CC", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00501, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:45.800", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "advanced cluster management for kubernetes", "vendor": "redhat", "type": "app", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advanced-cluster-management-for-kubernetes || rpm -q advanced-cluster-management-for-kubernetes || advanced-cluster-management-for-kubernetes --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison advanced-cluster-management-for-kubernetes\nsudo apt install advanced-cluster-management-for-kubernetes=<VERSION_BEFORE_2.0>\nsudo apt-mark hold advanced-cluster-management-for-kubernetes"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advanced-cluster-management-for-kubernetes\nsudo dnf downgrade advanced-cluster-management-for-kubernetes-<VERSION_BEFORE_2.0>\nsudo dnf versionlock add advanced-cluster-management-for-kubernetes"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "insights-client", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy insights-client || rpm -q insights-client || insights-client --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71845"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71845"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2512568"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.42035, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66148", "publisher": "SonicWALL, Inc.", "title": "An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Bui", "summary": "An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.01102, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:49.287", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66148"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.65445, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-62996", "publisher": "GitHub, Inc.", "title": "Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application l", "summary": "Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a php://filter-wrapped resource name to be used to read the contents of arbitrary local files accessible to the PHP process. An attacker able to author o", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00508, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T16:17:26.000", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62996"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.42532, "vendors": [{"os": "Composer (PHP)", "pkg": "smarty/smarty", "status": "fixed", "fixed": "5.8.4", "cmd": "composer require \"smarty/smarty:>=5.8.4\"", "url": "https://github.com/advisories/GHSA-rjhh-76wf-8xmw", "note": "vulnerable: >= 5.0.0, < 5.8.4"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "smarty3", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "smarty3", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "smarty4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "smarty4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw", "url": "https://github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19229", "publisher": "VulDB", "title": "A vulnerability was determined in SourceCodester Online Clothing Store", "summary": "A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00561, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:13.223", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19229"}], "cwe": ["CWE-200", "CWE-538"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4596, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19279", "publisher": "VulDB", "title": "A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0", "summary": "A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function load_pdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T11:16:50.040", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19279"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.64933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/MIMICLab/mcp-pdf-vision/issues/1", "url": "https://github.com/MIMICLab/mcp-pdf-vision/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19281", "publisher": "VulDB", "title": "A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0", "summary": "A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack is only possible with local access. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T12:16:46.057", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19281"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.64939, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19284", "publisher": "VulDB", "title": "A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0", "summary": "A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T13:17:10.783", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19284"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.64933, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/MauricioMilano/coder-api/issues/9", "url": "https://github.com/MauricioMilano/coder-api/issues/9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19329", "publisher": "VulDB", "title": "A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390", "summary": "A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack requires a local approach. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T04:17:37.780", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19329"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.64934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/andreahaku/codex_mcp/issues/1", "url": "https://github.com/andreahaku/codex_mcp/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19332", "publisher": "VulDB", "title": "A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0", "summary": "A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component run_openlane/view_waveform. The manipulation of the argument design_name/vcd_file leads to command injection. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T05:16:51.030", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19332"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.64934, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66878", "publisher": "Red Hat, Inc.", "title": "A flaw was found in multicloud-operators-subscription", "summary": "A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to copy sensitive Secret contents from other namespaces into their own, leading to information disclosure.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00483, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T02:16:37.937", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66878"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40724, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73122", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM)", "summary": "A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive information. Specifically, the agent can read all Secrets and ConfigMaps within any Channel namespace on the hub, potentially exposing credentials for other tenants' Git and Helm repositories. This could lead to significant infor", "cvss": 7.7, "sev": "HIGH", "epss": 0.00483, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T02:16:38.330", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73122"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40724, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66375", "publisher": "JFrog", "title": "A low-privilege authenticated user may permanently remove protected internal metadata across repositories unde", "summary": "A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00401, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.343", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66375"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33172, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65937", "publisher": "Progress Software Corporation", "title": "In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and ", "summary": "In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.", "cvss": 8.0, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:13.527", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "whatsup gold", "vendor": "progress", "type": "app", "affected": ["< 26.0.2"], "fixed": "26.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy whatsup-gold || rpm -q whatsup-gold || whatsup-gold --version"}, {"label": "2. UPGRADE to 26.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade whatsup-gold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade whatsup-gold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65937"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34305, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18499", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation w", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00419, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.650", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.9"], "fixed": "26.0.0.9", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18499"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283489"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35197, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49343", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie() (in both userAccountsSyncer.go and kappAccountsSyncer.go), StartProcessing() reserves a slot from the NumGoRoutinesThrottler, but the corresponding EndProcessing() is only called on the success path and on t", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.450", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49343"}], "cwe": ["CWE-400", "CWE-772"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34399, "vendors": [{"os": "Go", "pkg": "github.com/klever-io/klever-go", "status": "fixed", "fixed": "1.7.18", "cmd": "go get github.com/klever-io/klever-go@v1.7.18\ngo list -m github.com/klever-io/klever-go", "url": "https://github.com/advisories/GHSA-fw38-pc54-jvx9", "note": "vulnerable: < 1.7.18"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/klever-io/klever-go/security/advisories/GHSA-fw38-pc54-jvx9", "url": "https://github.com/klever-io/klever-go/security/advisories/GHSA-fw38-pc54-jvx9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19356", "publisher": "VulDB", "title": "A vulnerability was identified in MingSoft MCMS up to 3.0.6", "summary": "A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the file /mdiy/form/data/list of the component ms-mdiy. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00483, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T14:17:26.930", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19356"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40707, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19357", "publisher": "VulDB", "title": "A security flaw has been discovered in MingSoft MCMS up to 3.0.6", "summary": "A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00483, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T15:16:32.617", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19357"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40708, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73243", "publisher": "GitHub, Inc.", "title": "kkFileView is a universal file online preview project based on Spring Boot", "summary": "kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an attacker-selected URL after FileHandlerService#getFileAttribute uses the fullfilename parameter to force an OFFICE, COMPRESS, or CAD type. This issue is", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00432, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:49.403", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73243"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36496, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-63133", "publisher": "ICS-CERT", "title": "Malcolm is a network traffic analysis tool suite", "summary": "Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat processing container to create an unbounded number of filesystem objects, exhausting inodes or filesystem metadata and denying service to the processi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00548, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:44.167", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63133"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45159, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/cisagov/Malcolm/security/advisories/GHSA-c35g-mgc3-95rx", "url": "https://github.com/cisagov/Malcolm/security/advisories/GHSA-c35g-mgc3-95rx"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73245", "publisher": "GitHub, Inc.", "title": "Kestra is an open-source, event-driven orchestration platform", "summary": "Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/application.yml serves Micronaut management endpoints on port 8081 without authentication even when Basic Auth protects /api/v1/** on port 8080, allowing unauthenticated GET /env requests to disclose resolved configuration and POST /loggers/{name} requests to change runtime log levels. This issue is fixed in 2.0.0-rc6.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00328, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:19:05.140", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73245"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24658, "vendors": [{"os": "Maven", "pkg": "io.kestra:kestra", "status": "fixed", "fixed": "2.0.0", "cmd": "Set io.kestra:kestra to 2.0.0 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-hpj9-grjp-7vc7", "note": "vulnerable: < 2.0.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69207", "publisher": "GitHub, Inc.", "title": "Hono is a Web application framework that provides support for any JavaScript runtime", "summary": "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a regular expression denial of service (ReDoS). During a preflight OPTIONS request, the middleware parses the attacker-controlled Access-Control-Request-Headers header using a whitespace-tolerant regular expression whose backtracking makes its running time quadratic in the input length. ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00609, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:29.847", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69207"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48515, "vendors": [{"os": "npm", "pkg": "hono", "status": "fixed", "fixed": "4.12.34", "cmd": "npm install hono@\">=4.12.34\"\nnpm ls hono", "url": "https://github.com/advisories/GHSA-8j4g-w8fx-2239", "note": "vulnerable: < 4.12.34"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-19363", "publisher": "VulDB", "title": "A vulnerability was found in lmammino oidc-authorizer up to 0.4.0", "summary": "A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. `src/handler.rs` logs raw Authorization header values and complete bearer tokens/JWTs on authentication failure paths, potentially exposing credentials through CloudWatch Logs. `src/model", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00668, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:43.280", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19363"}], "cwe": ["CWE-200", "CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51345, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18634", "publisher": "SonicWALL, Inc.", "title": "An insecure handling of serialized objects vulnerability was found in the one of the service of GMS applicatio", "summary": "An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:30.880", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18634"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26425, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-6484", "publisher": "Insyde", "title": "In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.", "summary": "In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T01:17:08.060", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6484"}], "cwe": ["CWE-1277"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30153, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12233", "publisher": "Zephyr Project", "title": "The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declar", "summary": "The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its credential-store mutex as a plain zero-filled static struct k_mutex credential_lock; and never called k_mutex_init() on it. A statically zero-filled k_mutex has an uninitialized wait queue (its dlist head/tail are NULL instead of the self-referential sentinels that k_mutex_init/K_MUTEX_DEFINE install). The uncontended lock path doe", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00506, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T05:17:42.010", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12233"}], "cwe": ["CWE-665"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42335, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68752", "publisher": "JFrog", "title": "A Project Resource Manager may gain broader administrative privileges under specific conditions.", "summary": "A Project Resource Manager may gain broader administrative privileges under specific conditions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.0049, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:21.880", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35"], "fixed": "7.146.35", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68752"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41214, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65017", "publisher": "Apache Software Foundation", "title": "Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments", "summary": "Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Config API, an authenticated Viewer holding only configuration-read access \u2014 with no prior access to the secret \u2014 could read a team-scoped Celery broker URL, including its embedded credentials, in cleartext, while the equivalent global option was correctly masked. The secr", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00388, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:12.577", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": [">= 3.3.0 and < 3.3.1"], "fixed": "3.3.1", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison airflow\nsudo apt install airflow=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold airflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list airflow\nsudo dnf downgrade airflow-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add airflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65017"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70755"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/kykn94kjf0tntx4wywtvjowh5bzdgf38"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31686, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-c56v-8w4g-3mfm", "note": "vulnerable: >= 3.3.0, < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73325", "publisher": "VulnCheck", "title": "Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that a", "summary": "Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unconditionally calls torch.load with weights_only=False, invoking Python's pickle machinery during deserialization. Attackers can embed malicious __reduce__ methods in a crafted model checkpoint to ", "cvss": 7.8, "sev": "HIGH", "epss": 0.004, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:23.000", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73325"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33098, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-47664", "publisher": "GitHub, Inc.", "title": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analyti", "summary": "Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` operation in Pathling Server accepts a caller-supplied `exportUrl` and uses it as the remote FHIR Bulk Export endpoint without constraining it to a trusted source. When PNP credentials are configured, Pathling builds a credentialed bulk-export client targeting the caller-cho", "cvss": 8.6, "sev": "HIGH", "epss": 0.00206, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:28.657", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47664"}], "cwe": ["CWE-20", "CWE-345", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.10069, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/aehrc/pathling/security/advisories/GHSA-69wc-hrxh-5528", "url": "https://github.com/aehrc/pathling/security/advisories/GHSA-69wc-hrxh-5528"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48047", "publisher": "GitHub, Inc.", "title": "XWiki Platform WebJars API is a package for XWiki, a generic wiki platform", "summary": "XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write arbitrary files. While the consequences could be severe like overriding configuration files and setting the superadmin password, the attack first requir", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00651, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:03.960", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48047"}], "cwe": ["CWE-24"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50584, "vendors": [{"os": "Maven", "pkg": "org.xwiki.platform:xwiki-platform-webjars-api", "status": "fixed", "fixed": "16.10.17", "cmd": "Set org.xwiki.platform:xwiki-platform-webjars-api to 16.10.17 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-vgwr-23fq-pr7g", "note": "vulnerable: >= 9.6-rc-1, < 16.10.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73244", "publisher": "GitHub, Inc.", "title": "kkFileView is a universal file online preview project based on Spring Boot", "summary": "kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileController#getFiles to Files.newDirectoryStream without confinement to the demo directory, allowing directory enumeration outside the intended root. This issue is fixed in version 5.0.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00437, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:49.547", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73244"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36938, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/kekingcn/kkFileView/security/advisories/GHSA-pmp8-g8p2-p6jq", "url": "https://github.com/kekingcn/kkFileView/security/advisories/GHSA-pmp8-g8p2-p6jq"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-62992", "publisher": "GitHub, Inc.", "title": "Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application l", "summary": "Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line), Security::_checkDir() does not fully resolve symbolic links before validating that a requested path lies within a configured secure directory. An attacker able to place or reference a symlink within a directory Smarty treats as trusted (e.g., a template or config directory) could use it to", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00533, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T16:17:25.833", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62992"}], "cwe": ["CWE-22", "CWE-61"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.44231, "vendors": [{"os": "Composer (PHP)", "pkg": "smarty/smarty", "status": "fixed", "fixed": "5.8.2", "cmd": "composer require \"smarty/smarty:>=5.8.2\"", "url": "https://github.com/advisories/GHSA-f6wf-28g6-769x", "note": "vulnerable: >= 5.0.0, < 5.8.2"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "smarty3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "smarty3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "smarty4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "smarty4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17600", "publisher": "Sonatype", "title": "Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached", "summary": "Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at the time of one of these actions could continue using their existing session to interact with the repository as though the account were still active, until that session independently expired. Depending", "cvss": 8.8, "sev": "HIGH", "epss": 0.00246, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:00.850", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nexus repository manager", "vendor": "sonatype", "type": "app", "affected": [">= 3.0.0 and < 3.95.0"], "fixed": "3.95.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nexus-repository-manager || rpm -q nexus-repository-manager || nexus-repository-manager --version"}, {"label": "2. UPGRADE to 3.95.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nexus-repository-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nexus-repository-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nexus-repository-manager\nsudo apt install nexus-repository-manager=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold nexus-repository-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nexus-repository-manager\nsudo dnf downgrade nexus-repository-manager-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add nexus-repository-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17600"}, {"t": "Vendor Advisory", "u": "https://support.sonatype.com/hc/en-us/articles/53888843674003/"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14964, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19282", "publisher": "VulDB", "title": "A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0", "summary": "A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llm_memory_mcp. Executing a manipulation of the argument hash can lead to command injection. The attack is restricted to local execution. This product does not use versioning. This is why information about affected and unaffected releases ar", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01065, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T13:17:10.603", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19282"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.64474, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19333", "publisher": "VulDB", "title": "A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc", "summary": "A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality of the component generate_types. The manipulation of the argument schema results in command injection. The attack needs to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T05:16:51.207", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19333"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.64938, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/NightTrek/Supabase-MCP/issues/2", "url": "https://github.com/NightTrek/Supabase-MCP/issues/2"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19334", "publisher": "VulDB", "title": "A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9", "summary": "A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01083, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T05:16:51.397", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19334"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.64938, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-14237", "publisher": "WPScan", "title": "The vitepos WordPress plugin before 3.6.0, Vitepos  WordPress plugin before 3.5.0 do not perform a per-target ", "summary": "The vitepos WordPress plugin before 3.6.0, Vitepos  WordPress plugin before 3.5.0 do not perform a per-target authorization check in their point-of-sale password-reset API and grant the custom Outlet Manager role an over-broad password-reset capability by default, allowing an Outlet Manager to reset any user's password, including an administrator's, and take over the account.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T07:16:46.937", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14237"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39085, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "wpscan.com/vulnerability/7f1eb6ec-c4fb-4c0d-887d-1812a84e29c0/", "url": "https://wpscan.com/vulnerability/7f1eb6ec-c4fb-4c0d-887d-1812a84e29c0/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72578", "publisher": "TuranSec", "title": "A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote a", "summary": "A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.660", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72578"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16228, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71959", "publisher": "VulnCheck", "title": "Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in", "summary": "Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect request body, allowing any authenticated user to write forged, arbitrarily backdated entries into any organization's audit log.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00476, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:26.870", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71959"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40196, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-71576", "publisher": "Red Hat, Inc.", "title": "A flaw was found in multicluster-global-hub", "summary": "A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs ", "cvss": 8.5, "sev": "HIGH", "epss": 0.00295, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T17:17:36.060", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71576"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21053, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-12339", "publisher": "TPLink", "title": "A Zip Slip vulnerability in the WebUI ISP\nUpgrade functionality allows arbitrary file write via a crafted arch", "summary": "A Zip Slip vulnerability in the WebUI ISP\nUpgrade functionality allows arbitrary file write via a crafted archive\ncontaining directory traversal sequences. An authenticated administrator may\noverwrite arbitrary files on the system.Successful\nexploitation may allow arbitrary file to be overwritten on the underlying system, affecting system integrity and availability.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00525, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:28.500", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12339"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.43701, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68871", "publisher": "Apache Software Foundation", "title": "The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Va", "summary": "The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is required be", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0036, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:30.463", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "apache-airflow-providers-apache-yandex", "vendor": "apache", "type": "app", "affected": ["< 4.5.1"], "fixed": "4.5.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy apache-airflow-providers-apache-yandex || rpm -q apache-airflow-providers-apache-yandex || apache-airflow-providers-apache-yandex --version"}, {"label": "2. UPGRADE to 4.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade apache-airflow-providers-apache-yandex"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade apache-airflow-providers-apache-yandex"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68871"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70877"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/jlj9tv085txk4t0j029mvh43mz89o63c"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28608, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow-providers-yandex", "status": "fixed", "fixed": "4.5.1", "cmd": "pip install --upgrade \"apache-airflow-providers-yandex>=4.5.1\"\npip show apache-airflow-providers-yandex", "url": "https://github.com/advisories/GHSA-qmrf-jrpr-rjx6", "note": "vulnerable: < 4.5.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19557", "publisher": "Chrome", "title": "Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had c", "summary": "Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:21.340", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.137"], "fixed": "151.0.7922.137", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.137 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19557"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21976, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71407", "publisher": "Fortinet, Inc.", "title": "A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 ma", "summary": "A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00514, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:25.497", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortios", "vendor": "fortinet", "type": "os", "affected": [">= 7.6.1 and < 7.6.7"], "fixed": "7.6.7", "safe": "before 7.6.1", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71407"}, {"t": "Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-161"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42947, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59242", "publisher": "Apache Software Foundation", "title": "Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal ", "summary": "Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers t", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00529, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:09.067", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59242"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/69378"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/dm0520yhh4mn7qknyoh45r2w6c5qg2mg"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.43939, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-fcmm-42r9-mmmm", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68969", "publisher": "Apache Software Foundation", "title": "Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they w", "summary": "Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/connections`). The audit-log masking recognised only top-level request fields, and a bulk request nests its entities two levels below, so no masking was applied to them. Any authenticated user with audit-log read access -- who need not hold Variables or", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:19.730", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68969"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70890"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28385, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-cjv4-7hp2-2x9h", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18847", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoof", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00247, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.920", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18847"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.151, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70622", "publisher": "VulnCheck", "title": "tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() ", "summary": "tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrusted directory, the function follows symlinks without verifying that resolved targets remain within the source root, causing out-of-bounds files to be ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0046, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T18:18:50.610", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70622"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38902, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "rust-tar", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rust-tar", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "bootc", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "goose", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "igvm", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libkrun", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "mesa", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/thesmartshadow/e7dac0bb690ee17b9cc142154cb11726", "url": "https://gist.github.com/thesmartshadow/e7dac0bb690ee17b9cc142154cb11726"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66062", "publisher": "GitHub, Inc.", "title": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte", "summary": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request handling (for headers such as Accept) uses a regular expression vulnerable to quadratic backtracking, so a maliciously crafted header value can cause excessive CPU consumption and degrade or deny service. Version 2.70.2 fixes the issue.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:06.340", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66062"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42369, "vendors": [{"os": "npm", "pkg": "@sveltejs/kit", "status": "fixed", "fixed": "2.70.2", "cmd": "npm install @sveltejs/kit@\">=2.70.2\"\nnpm ls @sveltejs/kit", "url": "https://github.com/advisories/GHSA-29g2-3rmr-qm68", "note": "vulnerable: <= 2.70.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71848", "publisher": "GitHub, Inc.", "title": "Hono is a Web application framework that provides support for any JavaScript runtime", "summary": "Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To implement progressive language tag truncation, normalizeLanguage() repeatedly calls parts.slice(0, i).join('-') for every possible prefix, so the total a", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:53.950", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71848"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42378, "vendors": [{"os": "npm", "pkg": "hono", "status": "fixed", "fixed": "4.12.34", "cmd": "npm install hono@\">=4.12.34\"\nnpm ls hono", "url": "https://github.com/advisories/GHSA-54fx-42gc-7vw4", "note": "vulnerable: >= 4.12.0, < 4.12.34"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48007", "publisher": "GitHub, Inc.", "title": "Element Call is a native Matrix video conferencing application", "summary": "Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a `posthog` key in config.json or by the `posthogApiHost` and `posthogApiKey` URL parameters. Several fields of this data (`$initial_person_info`, `$session_entry_url`, and `$current_url`) were found to contain the full URL of the user's visited page, including the fragment. Users of a sta", "cvss": 8.6, "sev": "HIGH", "epss": 0.00254, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:51.573", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48007"}], "cwe": ["CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16023, "vendors": [{"os": "npm", "pkg": "@element-hq/element-call-embedded", "status": "fixed", "fixed": "0.19.4", "cmd": "npm install @element-hq/element-call-embedded@\">=0.19.4\"\nnpm ls @element-hq/element-call-embedded", "url": "https://github.com/advisories/GHSA-6vhh-4xw6-h2h2", "note": "vulnerable: >= 0.5.17, <= 0.19.3"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72566", "publisher": "TuranSec", "title": "A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileg", "summary": "A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.100", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72566"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27876, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72591", "publisher": "TuranSec", "title": "A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user", "summary": "A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the PATCH /apis/web/v1/album/{id}/image endpoint.", "cvss": 7.7, "sev": "HIGH", "epss": 0.0037, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.253", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72591"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29777, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-64954", "publisher": "Rapid7, Inc.", "title": "Velociraptor allows scheduling new collections via VQL queries in notebooks", "summary": "Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.\n\nThis allows a user who can run arbitrary VQL (usually with the \"analyst\" role) to launch new collections (usually requires the \"investigator\" role). This vulnerability is an escalati", "cvss": 8.2, "sev": "HIGH", "epss": 0.00308, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T05:19:17.893", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64954"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22425, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-64955", "publisher": "Rapid7, Inc.", "title": "When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, givi", "summary": "When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution.\u00a0\n\nVelociraptor fails to sanitize such cells when exporting to CSV from various places such as the GUI, offline collector or data exports.\n\nIt is not clear if the vulnerability is actually in Microsoft Excel treating a CSV data file as executable content, or if Velociraptor should be sanitizing the da", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00364, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T10:17:20.310", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64955"}], "cwe": ["CWE-1236"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.2909, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68971", "publisher": "Apache Software Foundation", "title": "Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom re", "summary": "Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global one by that field -- the Keycloak auth manager, for example, checks the `DAG` resource instead of `DAG:<team>` -- so the team-scoped permissi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00328, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:19.970", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68971"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70893"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24697, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-5247-m8w9-2v4m", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69107", "publisher": "JFrog", "title": "An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.", "summary": "An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00409, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:20.220", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.104.16", ">= 7.111.0 and < 7.111.14", ">= 7.117.0 and < 7.117.21", ">= 7.125.0 and < 7.125.14", ">= 7.133.0 and < 7.133.21", ">= 7.146.0 and < 7.146.8"], "fixed": "7.104.16, 7.111.14, 7.117.21, 7.125.14, 7.133.21, 7.146.8", "safe": "before 7.111.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.104.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.111.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.111.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.111.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69107"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34025, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72690", "publisher": "TuranSec", "title": "An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote att", "summary": "An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/{event_id}/question/create endpoint. The postCreateEventQuestion method loads the target event without the tenant-isolation scope, enabling cross-tenant writes; the injected question cannot be removed by the victim because the victim'", "cvss": 7.1, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:39.230", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72690"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34409, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70339", "publisher": "Microsoft Corporation", "title": "Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an una", "summary": "Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00413, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:44.243", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "edge chromium", "vendor": "microsoft", "type": "app", "affected": ["< 151.0.4129.78"], "fixed": "151.0.4129.78", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy edge-chromium || rpm -q edge-chromium || edge-chromium --version"}, {"label": "2. UPGRADE to 151.0.4129.78 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade edge-chromium"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade edge-chromium"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70339"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70339"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.34555, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68756", "publisher": "JFrog", "title": "A party with write access to stored session data may affect JFrog Artifactory under specific conditions.", "summary": "A party with write access to stored session data may affect JFrog Artifactory under specific conditions.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00469, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:22.360", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68756"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39634, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68760", "publisher": "JFrog", "title": "An unauthenticated user may bypass authentication under specific cache conditions.", "summary": "An unauthenticated user may bypass authentication under specific cache conditions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00456, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:22.603", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68760"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38613, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73291", "publisher": "GitHub, Inc.", "title": "Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby", "summary": "Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET /avatarproxy/:jellyfinUserId route, allowing a malicious or compromised Jellyfin or Emby server, or a man-in-the-middle attacker on a plaintext media-server connection, to supply", "cvss": 7.1, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:33.020", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73291"}], "cwe": ["CWE-22", "CWE-94"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31577, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17599", "publisher": "Sonatype", "title": "Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onbo", "summary": "Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead on the presence of a local onboarding artifact. As a result, an account holding the nexus:* permission could invoke the endpoint outside the intended onboarding flow to replace the administrator password, and exi", "cvss": 7.2, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:00.697", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nexus repository manager", "vendor": "sonatype", "type": "app", "affected": [">= 3.17.0 and < 3.95.0"], "fixed": "3.95.0", "safe": "before 3.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nexus-repository-manager || rpm -q nexus-repository-manager || nexus-repository-manager --version"}, {"label": "2. UPGRADE to 3.95.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nexus-repository-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nexus-repository-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nexus-repository-manager\nsudo apt install nexus-repository-manager=<VERSION_BEFORE_3.17.0>\nsudo apt-mark hold nexus-repository-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nexus-repository-manager\nsudo dnf downgrade nexus-repository-manager-<VERSION_BEFORE_3.17.0>\nsudo dnf versionlock add nexus-repository-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17599"}, {"t": "Vendor Advisory", "u": "https://support.sonatype.com/hc/en-us/articles/53884654627475/"}], "cwe": ["CWE-620"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25742, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47364", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the use", "summary": "In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out.\r\n\r\nImpact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own systems.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00438, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:17.217", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47364"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37043, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48120", "publisher": "GitHub, Inc.", "title": "Kakoune is a code editor", "summary": "Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, add `autorestore-disable` to the user kakrc will disable the autorestore feature.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00198, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.117", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48120"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09073, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "kakoune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "kakoune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72588", "publisher": "TuranSec", "title": "A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote att", "summary": "A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered. The POST /api/v1/auth/recovery/request endpoint returns HTTP 200 for registered email addresses and a different status code for unregistered ones, enabling attackers to enumerate valid user accounts.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.880", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72588"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35233, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72594", "publisher": "TuranSec", "title": "A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged", "summary": "A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00284, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:32.610", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72594"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19901, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-63177", "publisher": "ICS-CERT", "title": "Malcolm is a network traffic analysis tool suite", "summary": "Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized `ngx.var.request_uri`, while Nginx itself routes requests using the normalized path. An authenticated low-privilege user can prepend a traversal segment (for example `/x/../upload/...`) so that Nginx routes the request to a restricted backend while the Lua role check fails ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00369, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:44.443", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63177"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29577, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/cisagov/Malcolm/security/advisories/GHSA-m5fr-rv3h-xg2r", "url": "https://github.com/cisagov/Malcolm/security/advisories/GHSA-m5fr-rv3h-xg2r"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73248", "publisher": "GitHub, Inc.", "title": "calibre is an e-book manager", "summary": "calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template() call whose formatter does not inherit allow_python_templates=False, allowing a nested python: template to reach compile_python_template and execute arbitrary Python code when the file is opened or imported. This issue is fixed in version 9.12.0.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00197, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:19:05.553", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73248"}], "cwe": ["CWE-94", "CWE-95"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08954, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "calibre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "calibre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/kovidgoyal/calibre/security/advisories/GHSA-4f7g-rjfp-hmvx", "url": "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-4f7g-rjfp-hmvx"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-71408", "publisher": "Fortinet, Inc.", "title": "A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, ", "summary": "A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:25.677", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortios", "vendor": "fortinet", "type": "os", "affected": ["< 7.6.7"], "fixed": "7.6.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71408"}, {"t": "Mitigation, Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-162"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35055, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73292", "publisher": "GitHub, Inc.", "title": "Semaphore UI is a web interface for managing DevOps tools", "summary": "Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to change an administrator's or another user's password after user interaction. This issue is fixed in version 2.18.21.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00232, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:22.343", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73292"}], "cwe": ["CWE-352", "CWE-620"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13256, "vendors": [{"os": "Go", "pkg": "github.com/semaphoreui/semaphore", "status": "fixed", "fixed": "0.0.0-20260707190631-c59c3dc9035b", "cmd": "go get github.com/semaphoreui/semaphore@v0.0.0-20260707190631-c59c3dc9035b\ngo list -m github.com/semaphoreui/semaphore", "url": "https://github.com/advisories/GHSA-8cj9-r88m-8945", "note": "vulnerable: < 0.0.0-20260707190631-c59c3dc9035b"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "CamilleGR/CVE-2026-73292 (0 stars)", "url": "https://github.com/CamilleGR/CVE-2026-73292", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18098", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and c", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00254, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:24.993", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18098"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16061, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71502", "publisher": "CIRCL", "title": "CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vu", "summary": "CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data.\n\nAn unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML esca", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00738, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T22:16:34.360", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71502"}], "cwe": ["CWE-79", "CWE-1336"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.54033, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-13133", "publisher": "LINE Corporation", "title": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit", "summary": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T07:16:46.173", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13133"}], "cwe": ["CWE-427"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.05844, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-21061", "publisher": "Samsung Mobile", "title": "Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access ", "summary": "Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:48.257", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21061"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33837, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71392", "publisher": "CERT.PL", "title": "GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/s", "summary": "GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can deliver a malicious font file via email, EWW (Emacs Web Wowser), or documents with custom faces, causing Emacs to load it. This\u00a0results in heap memor", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00673, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.397", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71392"}], "cwe": ["CWE-190"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.51572, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-71393", "publisher": "CERT.PL", "title": "GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c", "summary": "GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in an undersized heap allocation. A subsequent read() call writes beyond the buffer, causing a heap buffer overflow. An attacker can deliver a malicious", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00673, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.560", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71393"}], "cwe": ["CWE-190"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.51571, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "emacs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-19278", "publisher": "Red Hat, Inc.", "title": "A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange", "summary": "A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses unanchored regular expressions for matching claim values. This allows an attacker with a valid OpenID Connect (OIDC) token, whose claim value is a superstring of a configured pattern, to gain unauthorized access to roles they were not intended to receive. This can lead to privilege escalati", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00345, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:17:58.797", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19278"}], "cwe": ["CWE-625"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26878, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "bugzilla.redhat.com/show_bug.cgi?id=2512524", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512524"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71577", "publisher": "Red Hat, Inc.", "title": "A flaw was found in multicluster-global-hub", "summary": "A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain API server tokens intended for other hubs. These tokens have an extended validity of approximately 9.86 years, significantly increasing the risk of unauthorized access a", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00423, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T17:17:36.197", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71577"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.35533, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68870", "publisher": "Apache Software Foundation", "title": "The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connec", "summary": "The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is r", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00363, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:30.337", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68870"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28967, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71474", "publisher": "Red Hat, Inc.", "title": "A flaw was found in insights-client", "summary": "A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could grant unauthorized access to Red Hat cloud services.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00156, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:45.547", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "advanced cluster management for kubernetes", "vendor": "redhat", "type": "app", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advanced-cluster-management-for-kubernetes || rpm -q advanced-cluster-management-for-kubernetes || advanced-cluster-management-for-kubernetes --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison advanced-cluster-management-for-kubernetes\nsudo apt install advanced-cluster-management-for-kubernetes=<VERSION_BEFORE_2.0>\nsudo apt-mark hold advanced-cluster-management-for-kubernetes"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advanced-cluster-management-for-kubernetes\nsudo dnf downgrade advanced-cluster-management-for-kubernetes-<VERSION_BEFORE_2.0>\nsudo dnf versionlock add advanced-cluster-management-for-kubernetes"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "insights-client", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy insights-client || rpm -q insights-client || insights-client --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71474"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71474"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2512153"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.04402, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66149", "publisher": "SonicWALL, Inc.", "title": "Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security applia", "summary": "Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:49.393", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66149"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1634, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66150", "publisher": "SonicWALL, Inc.", "title": "Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security applia", "summary": "Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:49.497", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66150"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1634, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66154", "publisher": "SonicWALL, Inc.", "title": "An insufficient certificate validation in a privileged communication workflow, was identified in a GMS applica", "summary": "An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:49.600", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66154"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09526, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19558", "publisher": "Chrome", "title": "Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user", "summary": "Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)", "cvss": 7.5, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:21.440", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.137"], "fixed": "151.0.7922.137", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.137 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19558"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17534, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.137-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.137-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/536676756", "url": "https://issues.chromium.org/issues/536676756"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66377", "publisher": "JFrog", "title": "An unauthenticated user may access restricted repository information under specific conditions.", "summary": "An unauthenticated user may access restricted repository information under specific conditions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00359, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.597", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66377"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28501, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68757", "publisher": "JFrog", "title": "A user with access to a valid SAML response may impersonate another user under specific conditions.", "summary": "A user with access to a valid SAML response may impersonate another user under specific conditions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00265, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:22.477", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68757"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17471, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59244", "publisher": "Apache Software Foundation", "title": "Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered ", "summary": "Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI \u2014 the dict value failed an `isinstance(str)` guard \u2014 so a secret stored as a JSON Variable and referenced in a template via `var.json` was displayed in cleartext to any user with access to that task's Rendered Templates view. Users are advised to upgrade to apache-airflow 3.3.1 or later, which masks nested Variable values reg", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:09.197", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59244"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/68975"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/fncod6vttfo5fvmfs3h9r8s2kmm9j1n6"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13065, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-f643-3rc2-j27w", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65939", "publisher": "Progress Software Corporation", "title": "In WhatsUp Gold versions released before 2026.0.2,\u00a0a privileged attacker can create a LogToFile action specify", "summary": "In WhatsUp Gold versions released before 2026.0.2,\u00a0a privileged attacker can create a LogToFile action specifying an arbitrary file extension\u00a0within the IIS web root.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00379, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:13.797", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "whatsup gold", "vendor": "progress", "type": "app", "affected": ["< 26.0.2"], "fixed": "26.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy whatsup-gold || rpm -q whatsup-gold || whatsup-gold --version"}, {"label": "2. UPGRADE to 26.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade whatsup-gold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade whatsup-gold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65939"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026"}], "cwe": ["CWE-22", "CWE-73", "CWE-434"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30728, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65940", "publisher": "Progress Software Corporation", "title": "In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-ac", "summary": "In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:13.927", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "whatsup gold", "vendor": "progress", "type": "app", "affected": ["< 26.0.2"], "fixed": "26.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy whatsup-gold || rpm -q whatsup-gold || whatsup-gold --version"}, {"label": "2. UPGRADE to 26.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade whatsup-gold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade whatsup-gold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65940"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026"}], "cwe": ["CWE-276", "CWE-732"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27649, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68076", "publisher": "Apache Software Foundation", "title": "Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the w", "summary": "Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__<TEAM>___<", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:15.223", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68076"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70736"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70902"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26555, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-75mg-c62r-v95g", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68759", "publisher": "JFrog", "title": "A holder of a valid integration credential may impersonate other users under specific conditions.", "summary": "A holder of a valid integration credential may impersonate other users under specific conditions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:16.887", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68759"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24823, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68970", "publisher": "Apache Software Foundation", "title": "Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets store", "summary": "Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI. Masking was applied only when the deserialized value was a string or a dict; a list at the top level matched neither and was returned unmasked. Any authenticated user able to read the logs or rendered templates of a task that references such a Variable co", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:19.853", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68970"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/70891"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/kkrlnbsk47oght4h38mcd3h2kcb8dt28"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13065, "vendors": [{"os": "Python (pip)", "pkg": "apache-airflow", "status": "fixed", "fixed": "3.3.1", "cmd": "pip install --upgrade \"apache-airflow>=3.3.1\"\npip show apache-airflow", "url": "https://github.com/advisories/GHSA-f3c2-j7g8-vpp8", "note": "vulnerable: < 3.3.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69105", "publisher": "JFrog", "title": "An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potent", "summary": "An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:20.093", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": [">= 7.161.0 and < 7.161.16"], "fixed": "7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.161.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69105"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11968, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19210", "publisher": "VulDB", "title": "A vulnerability has been found in SourceCodester Photo Share Website 1.0", "summary": "A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_upload. Such manipulation of the argument img[]/imgName[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T16:17:24.113", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19210"}], "cwe": ["CWE-284", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3284, "pinned": false}, {"id": "CVE-2026-17601", "publisher": "Sonatype", "title": "A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned", "summary": "A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00288, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:01.013", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nexus repository manager", "vendor": "sonatype", "type": "app", "affected": [">= 3.19.0 and < 3.95.0"], "fixed": "3.95.0", "safe": "before 3.19.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nexus-repository-manager || rpm -q nexus-repository-manager || nexus-repository-manager --version"}, {"label": "2. UPGRADE to 3.95.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nexus-repository-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nexus-repository-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nexus-repository-manager\nsudo apt install nexus-repository-manager=<VERSION_BEFORE_3.19.0>\nsudo apt-mark hold nexus-repository-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nexus-repository-manager\nsudo dnf downgrade nexus-repository-manager-<VERSION_BEFORE_3.19.0>\nsudo dnf versionlock add nexus-repository-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17601"}, {"t": "Vendor Advisory", "u": "https://support.sonatype.com/hc/en-us/articles/53889365883539/"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20243, "pinned": false}, {"id": "CVE-2026-48097", "publisher": "GitHub, Inc.", "title": "NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP add", "summary": "NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of att", "cvss": 7.8, "sev": "HIGH", "epss": 0.00227, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:17:47.627", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48097"}], "cwe": ["CWE-78", "CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12762, "pinned": false}, {"id": "CVE-2026-70561", "publisher": "VulnCheck", "title": "TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authentic", "summary": "TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary attachments by supplying an integer attachment ID to the attachmentdownload.php handler without any project or role authorization check. Attackers can enumerate sequential integer IDs through the attachment download endpoint to retrieve file contents from private project", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00371, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:53.277", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70561"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29844, "pinned": false}, {"id": "CVE-2026-19340", "publisher": "VulDB", "title": "A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0", "summary": "A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T07:17:04.193", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19340"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32839, "pinned": false}, {"id": "CVE-2026-19375", "publisher": "VulDB", "title": "A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0", "summary": "A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T00:17:09.677", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19375"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32838, "pinned": false}, {"id": "CVE-2026-57279", "publisher": "JPCERT/CC", "title": "Cybozu Garoon contains a cross-site scripting vulnerability", "summary": "Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:48.530", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57279"}], "cwe": ["CWE-79"], "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23273, "pinned": false}, {"id": "CVE-2026-71391", "publisher": "CERT.PL", "title": "GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c", "summary": "GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_compound_glyph() uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font to bypass the check and trigger a heap-based out-of-bounds read via memcpy. An attacker can deliver a malicious font file via email, EWW (Emacs", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00542, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.233", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71391"}], "cwe": ["CWE-193"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.44798, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU Emacs software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-71391/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-72574", "publisher": "TuranSec", "title": "A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker ", "summary": "A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When base_url is unset (the default), Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated Host, X-Forwarded-Host, X-Forwarded-Proto, and X-Forwarded-Port request headers.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00421, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.137", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72574"}], "cwe": ["CWE-644"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35357, "pinned": false}, {"id": "CVE-2026-73231", "publisher": "GitHub, Inc.", "title": "Faker generates massive amounts of fake data in the browser and Node.js", "summary": "Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another function, enabling arbitrary JavaScript code execution. This issue is fixed in version 10.5.0.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:48.400", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73231"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10688, "pinned": false}, {"id": "CVE-2026-19579", "publisher": "Tenable Network Security, Inc.", "title": "Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkou", "summary": "Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request cancellation endpoint. The cancel_by_admin and requestingUser values are read from user-controlled URL path segments and used without a server-side authorization check, so any authenticated, low-privileged user can supply a non-empty cancel_by_admin value to bypass the request-ownership check and cancel another user's pending ch", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00341, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:35.240", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "snipe-it", "vendor": "snipeitapp", "type": "app", "affected": ["< 8.6.0"], "fixed": "8.6.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy snipe-it || rpm -q snipe-it || snipe-it --version"}, {"label": "2. UPGRADE to 8.6.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade snipe-it"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade snipe-it"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19579"}], "cwe": ["CWE-639", "CWE-807"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.26369, "pinned": false}, {"id": "CVE-2026-19587", "publisher": "Samsung TV & Appliance", "title": "Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.", "summary": "Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T03:16:42.950", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "rlottie", "vendor": "samsung", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rlottie || rpm -q rlottie || rlottie --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19587"}, {"t": "Patch", "u": "https://github.com/Samsung/rlottie/pull/599"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27989, "pinned": false}, {"id": "CVE-2026-19588", "publisher": "Samsung TV & Appliance", "title": "Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.", "summary": "Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T03:16:43.083", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "rlottie", "vendor": "samsung", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rlottie || rpm -q rlottie || rlottie --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19588"}, {"t": "Patch", "u": "https://github.com/Samsung/rlottie/pull/600"}], "cwe": ["CWE-680"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27749, "pinned": false}, {"id": "CVE-2026-68758", "publisher": "JFrog", "title": "A low-privileged authenticated user may access restricted support information under specific conditions.", "summary": "A low-privileged authenticated user may access restricted support information under specific conditions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:15.540", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68758"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27875, "pinned": false}, {"id": "CVE-2026-44964", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exp", "summary": "In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID, and an arbitrary Intent to run inside the Datadog process.\r\nThis requires:\r\nA malicious application co-installed on the victim's device.\r\nAn active Data", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00339, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:14.570", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44964"}], "cwe": ["CWE-441"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26163, "pinned": false}, {"id": "CVE-2026-19246", "publisher": "VulDB", "title": "A vulnerability has been found in HKUDS nanobot up to 0.2.1", "summary": "A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the file nanobot/providers/image_generation.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5095. It is recommended to apply a pat", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:27.857", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19246"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2927, "pinned": false}, {"id": "CVE-2026-19339", "publisher": "VulDB", "title": "A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43", "summary": "A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T07:17:04.000", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19339"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29256, "pinned": false}, {"id": "CVE-2026-19350", "publisher": "VulDB", "title": "A vulnerability has been found in Dolibarr ERP up to 23.0.3", "summary": "A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is 8992ce8704da947b6abe7b65a6fe59aed736bb81. It is advisable to implement a patch to correct this issue.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T11:16:52.917", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19350"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2927, "pinned": false}, {"id": "CVE-2026-19358", "publisher": "VulDB", "title": "A weakness has been identified in 3CORESec Trapdoor up to 1.2.2", "summary": "A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T16:16:52.503", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19358"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27118, "pinned": false}, {"id": "CVE-2026-19367", "publisher": "VulDB", "title": "A vulnerability has been found in NocteDefensor LudusMCP 1.0.24", "summary": "A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component read_range_config. The manipulation of the argument Source leads to server-side request forgery. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T20:16:40.007", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19367"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29268, "pinned": false}, {"id": "CVE-2026-19381", "publisher": "VulDB", "title": "A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0", "summary": "A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T01:16:48.367", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19381"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05081, "pinned": false}, {"id": "CVE-2026-21068", "publisher": "Samsung Mobile", "title": "Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers", "summary": "Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.110", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21068"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.059, "pinned": false}, {"id": "CVE-2026-21075", "publisher": "Samsung Mobile", "title": "Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attack", "summary": "Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00494, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.023", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21075"}], "cwe": ["CWE-939"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41523, "pinned": false}, {"id": "CVE-2026-6374", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within a", "summary": "Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable.\n\nThis issue affects WAH7601: through 20.07.2026.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00247, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:38.353", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6374"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15155, "pinned": false}, {"id": "CVE-2026-64927", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the multicloud-operators-channel component", "summary": "A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information, known as Secrets, across different parts of the system (namespaces). By exploiting this, an attacker can modify these Secrets in unauthorized areas. This could lead to unauthorized access to information or elevated privileges within the system.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00328, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T02:16:37.780", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64927"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24632, "pinned": false}, {"id": "CVE-2026-70466", "publisher": "Fortinet, Inc.", "title": "A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 ", "summary": "A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0031, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:24.883", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortiweb", "vendor": "fortinet", "type": "app", "affected": [">= 7.0.0 and < 7.6.6", ">= 8.0.0 and < 8.0.3"], "fixed": "7.6.6, 8.0.3", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiweb || rpm -q fortiweb || fortiweb --version"}, {"label": "2. UPGRADE to 7.6.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiweb"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiweb"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiweb\nsudo apt install fortiweb=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold fortiweb"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiweb\nsudo dnf downgrade fortiweb-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add fortiweb"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70466"}, {"t": "Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-157"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22675, "pinned": false}, {"id": "CVE-2026-54183", "publisher": "Apache Software Foundation", "title": "Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the U", "summary": "Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was shown unmasked in the Variables UI. The exposure is limited to the UI: any authenticated user who can see the Variable in the UI can already read its full va", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00423, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:04.640", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "airflow", "vendor": "apache", "type": "app", "affected": ["< 3.3.1"], "fixed": "3.3.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy airflow || rpm -q airflow || airflow --version"}, {"label": "2. UPGRADE to 3.3.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade airflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade airflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54183"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/apache/airflow/pull/68422"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/z5mrdq6c60f2wyx4cc64cj8nv0dxd9lo"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.35564, "pinned": false}, {"id": "CVE-2026-47361", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no per", "summary": "In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversation_id. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ID 9201 (the Bits AI chat notification), with no check on the caller's identity or ownership of the conversation.\r\nThis requires a malicious application", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:15.757", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47361"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20961, "pinned": false}, {"id": "CVE-2026-48098", "publisher": "GitHub, Inc.", "title": "NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP add", "summary": "NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:17:47.780", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48098"}], "cwe": ["CWE-78", "CWE-250"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08468, "pinned": false}, {"id": "CVE-2026-9031", "publisher": "TPLink", "title": "An input validation\nvulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation\nof user-s", "summary": "An input validation\nvulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation\nof user-supplied data before it is processed by internal flash-write handling\nlogic.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may cause httpd process or device to crash, resulting in loss of access\nto the web interface and a denial-of-service condition.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:30.530", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9031"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16246, "pinned": false}, {"id": "CVE-2026-19347", "publisher": "VulDB", "title": "A vulnerability was identified in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T11:16:51.660", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19347"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25325, "pinned": false}, {"id": "CVE-2026-19354", "publisher": "VulDB", "title": "A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09", "summary": "A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go of the component IN Clause Handler. Performing a manipulation of the argument ids results in sql injection. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T14:17:25.647", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19354"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23343, "pinned": false}, {"id": "CVE-2026-19364", "publisher": "VulDB", "title": "A vulnerability was determined in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:43.450", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19364"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25324, "pinned": false}, {"id": "CVE-2026-21065", "publisher": "Samsung Mobile", "title": "Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write", "summary": "Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00153, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:19.740", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21065"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04136, "pinned": false}, {"id": "CVE-2026-21066", "publisher": "Samsung Mobile", "title": "Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers t", "summary": "Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:19.870", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21066"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04288, "pinned": false}, {"id": "CVE-2026-21067", "publisher": "Samsung Mobile", "title": "Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of", "summary": "Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:19.993", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21067"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04288, "pinned": false}, {"id": "CVE-2026-21069", "publisher": "Samsung Mobile", "title": "Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows", "summary": "Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.247", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21069"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-681"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04288, "pinned": false}, {"id": "CVE-2026-21071", "publisher": "Samsung Mobile", "title": "Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attacker", "summary": "Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.500", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21071"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04288, "pinned": false}, {"id": "CVE-2026-21072", "publisher": "Samsung Mobile", "title": "Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers ", "summary": "Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.623", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21072"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04289, "pinned": false}, {"id": "CVE-2026-71394", "publisher": "CERT.PL", "title": "GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c", "summary": "GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a struct with uninitialized heap memory in the table directory entries.\u00a0An attacker can deliver a malicious font file via email, EWW (Emacs Web Wowser", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00445, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:28.697", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71394"}], "cwe": ["CWE-1284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37685, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU Emacs software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-71391/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-18478", "publisher": "CERT.PL", "title": "Magnolia CMS is vulnerable to Stored XSS in import functionality", "summary": "Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary\u00a0HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image.\n\n\n\n\nThe issue was fixed in version 6.3.10", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.0046, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:21.403", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18478"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38878, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in Magnolia CMS software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-18478/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-73282", "publisher": "MITRE", "title": "In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forward", "summary": "In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00163, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:49.830", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "openssh", "vendor": "openbsd", "type": "app", "affected": ["< 10.5"], "fixed": "10.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openssh || rpm -q openssh || openssh --version"}, {"label": "2. UPGRADE to 10.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openssh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openssh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73282"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.05193, "pinned": false}, {"id": "CVE-2026-63134", "publisher": "ICS-CERT", "title": "Malcolm is a network traffic analysis tool suite", "summary": "Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction with libarchive's secure flags, but creates directory entries with a raw `os.makedirs(os.path.join(dest, entry.pathname))` that has no traversal protection. An uploaded malicious archive containing a directory entry with a `../` sequence or an absolute path causes the filebeat processing container to create directories outside th", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00421, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:44.307", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63134"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35403, "pinned": false}, {"id": "CVE-2026-12234", "publisher": "Zephyr Project", "title": "The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/so", "summary": "The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net_msghdr into a kernel-side copy with k_usermode_from_copy(), but then re-read the still-live user struct for subsequent decisions. The kernel iovec shadow buffer is sized from one read of msg->msg_iovlen, while the population loop is bounded by a second, live read of the same field.\n\nBecause ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00109, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T05:17:42.143", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12234"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01187, "pinned": false}, {"id": "CVE-2026-64952", "publisher": "Rapid7, Inc.", "title": "The hunt_delete() VQL function allows deleting hunts.\u00a0\n\nVelociraptor misapplied the permission check requiring", "summary": "The hunt_delete() VQL function allows deleting hunts.\u00a0\n\nVelociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the \"investigator\" role) instead of the \"DELETE_RESULTS\" permission (usually only assigned to \"administrators\").", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T10:17:20.193", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64952"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21499, "pinned": false}, {"id": "CVE-2026-14478", "publisher": "Autodesk", "title": "A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged atta", "summary": "A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:17:31.687", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "installer", "vendor": "autodesk", "type": "app", "affected": ["< 2.23"], "fixed": "2.23", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy installer || rpm -q installer || installer --version"}, {"label": "2. UPGRADE to 2.23 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade installer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade installer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14478"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03759, "pinned": false}, {"id": "CVE-2026-68754", "publisher": "JFrog", "title": "A repository publisher without delete permission may modify protected package content under specific condition", "summary": "A repository publisher without delete permission may modify protected package content under specific conditions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:22.117", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68754"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.22805, "pinned": false}, {"id": "CVE-2026-19361", "publisher": "VulDB", "title": "A flaw has been found in macrozheng mall 0504e86", "summary": "A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode of the component mall-portal Module. Executing a manipulation can lead to weak password recovery. The attack may be launched remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been published and may be used. The vendor deleted the GitHub issue for this vul", "cvss": 3.7, "sev": "LOW", "epss": 0.00438, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:42.930", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19361"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3707, "pinned": false}, {"id": "CVE-2026-21083", "publisher": "Samsung Mobile", "title": "Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensit", "summary": "Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:22.043", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "smart switch", "vendor": "samsung", "type": "app", "affected": ["< 3.7.72.6"], "fixed": "3.7.72.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy smart-switch || rpm -q smart-switch || smart-switch --version"}, {"label": "2. UPGRADE to 3.7.72.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade smart-switch"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade smart-switch"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21083"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16346, "pinned": false}, {"id": "CVE-2026-72587", "publisher": "TuranSec", "title": "A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker", "summary": "A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /_instatic/hole/<nodeId> server island endpoint.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00315, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.760", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72587"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2322, "pinned": false}, {"id": "CVE-2026-6373", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH", "summary": "Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.\n\nThis issue affects WAH7601: through 20072026.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:20:38.220", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6373"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16346, "pinned": false}, {"id": "CVE-2026-72751", "publisher": "CIRCL", "title": "CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to", "summary": "CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise converted MISP and STIX content.\n\nAttacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without sufficient neutralisation. In particular, node labels, node sublabels, edge labels, node properties, edge properties, and node types could contain crafte", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00453, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:31.553", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72751"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38413, "pinned": false}, {"id": "CVE-2026-72718", "publisher": "GitHub, Inc.", "title": "goose is general-purpose AI agent that runs on your machine", "summary": "goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = <command>` causes Git to execute that command on the host during the index refresh performed by `git diff HEAD`. The command runs before goose contacts a mod", "cvss": 7.0, "sev": "HIGH", "epss": 0.00216, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T16:19:48.900", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72718"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11468, "pinned": false}, {"id": "CVE-2026-66146", "publisher": "SonicWALL, Inc.", "title": "Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier", "summary": "Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:37.837", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66146"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21746, "pinned": false}, {"id": "CVE-2026-71468", "publisher": "Red Hat, Inc.", "title": "A flaw was found in acm-search-v2-api-rhel9", "summary": "A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub search results, leading to information disclosure.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00423, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:45.410", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71468"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35533, "pinned": false}, {"id": "CVE-2026-18652", "publisher": "Rapid7, Inc.", "title": "Velociraptor allows reading Stacked result sets from the GUI.\u00a0 Velociraptor's multi-tenant design stores sub o", "summary": "Velociraptor allows reading Stacked result sets from the GUI.\u00a0 Velociraptor's multi-tenant design stores sub orgs within the datastore directory.\u00a0The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.\n\nIn particular, a user with read access to the root org can access result sets from child orgs.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T10:17:16.940", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18652"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18824, "pinned": false}, {"id": "CVE-2026-47363", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity", "summary": "In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from Intent extras with no permission guard, and signs the app into that session without validating it against the backend.\r\nThis requires a malicious application co-installed on a device with the Datadog app installed, and an OAuth token the attacker is willing to load into t", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:16.237", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47363"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17249, "pinned": false}, {"id": "CVE-2026-19244", "publisher": "VulDB", "title": "A vulnerability was detected in HKUDS nanobot up to 0.2.1", "summary": "A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 0.3.0 is sufficient to fix this issue. The patch is named 4436. You ", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00475, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:27.470", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19244"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.40132, "pinned": false}, {"id": "CVE-2026-66060", "publisher": "GitHub, Inc.", "title": "Home Assistant is open source home automation software focused on local control and privacy", "summary": "Home Assistant is open source home automation software focused on local control and privacy.  Prior to 2026.5.3,  the Companion app treats tag links (NFC or QR) delivered through an OS-level routing mechanism as if they were physically scanned, without validating the calling app or prompting the user. As a result, any untrusted app on the device can forward an arbitrary tag to Home Assistant, causing it to execute the associated automation as tho", "cvss": 7.1, "sev": "HIGH", "epss": 0.00166, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:29.520", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66060"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05577, "pinned": false}, {"id": "CVE-2026-66061", "publisher": "GitHub, Inc.", "title": "Home Assistant is open source home automation software focused on local control and privacy", "summary": "Home Assistant is open source home automation software focused on local control and privacy.  Prior to 2026.5.0, the iOS Companion app treats tag links (NFC or QR) delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the calling app or prompting the user. As a result, any untrusted app on the device can forward an arbitrary tag to Home Assistant, causing it to execute t", "cvss": 7.1, "sev": "HIGH", "epss": 0.00166, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:29.693", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66061"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05577, "pinned": false}, {"id": "CVE-2026-9030", "publisher": "TPLink", "title": "A denial-of-service\nvulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool\ninstr", "summary": "A denial-of-service\nvulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool\ninstruction handlng path in httpd does not properly synchronize or safely manage\nconcurrent systool operations.\u00a0 \n\n\n\n\n\nBy sending\ncrafted systool instructions through the asynchronous request path, successful\nexploitation may cause the httpd process or device management service to crash\nand may result in temporary loss of access to the web man", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:30.370", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9030"}], "cwe": ["CWE-362"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08974, "pinned": false}, {"id": "CVE-2026-58262", "publisher": "GitHub, Inc.", "title": "Klever-Go is the Go implementation of the Klever blockchain protocol", "summary": "Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS aggregate-signature check, so a malicious or compromised block producer can set them to reach the required quorum while gathering fewer genuine validator", "cvss": 7.1, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T22:16:59.327", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58262"}], "cwe": ["CWE-345", "CWE-347"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04956, "pinned": false}, {"id": "CVE-2026-69659", "publisher": "EEF", "title": "Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of", "summary": "Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor.\n\nRead actions with keyset pagination deserialize the client-supplied page[:after] or page[:before] cursor in decode_values/2 in lib/ash/page/keyset.ex, which base64-decodes the value and passes it to :erlang.binary_to_term/2 without bounding its size. The Erlang external term format suppor", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:43.627", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "ash framework", "vendor": "ash-hq", "type": "app", "affected": [">= 1.17.0 and < 3.31.1"], "fixed": "3.31.1", "safe": "before 1.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ash-framework || rpm -q ash-framework || ash-framework --version"}, {"label": "2. UPGRADE to 3.31.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ash-framework"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ash-framework"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison ash-framework\nsudo apt install ash-framework=<VERSION_BEFORE_1.17.0>\nsudo apt-mark hold ash-framework"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ash-framework\nsudo dnf downgrade ash-framework-<VERSION_BEFORE_1.17.0>\nsudo dnf versionlock add ash-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69659"}, {"t": "Patch", "u": "https://github.com/ash-project/ash/commit/1816b103af975221210478d61db20adcea700319"}, {"t": "Vendor Advisory, Patch", "u": "https://github.com/ash-project/ash/security/advisories/GHSA-j35q-v8h8-7mwq"}, {"t": "Third Party Advisory, Patch", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-69659"}, {"t": "Vendor Advisory, Patch", "u": "https://github.com/ash-project/ash/security/advisories/GHSA-j35q-v8h8-7mwq"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28401, "pinned": false}, {"id": "CVE-2026-21058", "publisher": "Samsung Mobile", "title": "Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete", "summary": "Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00142, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:47.710", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21058"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0322, "pinned": false}, {"id": "CVE-2026-21074", "publisher": "Samsung Mobile", "title": "Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary c", "summary": "Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00143, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.893", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21074"}], "cwe": ["CWE-276"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03291, "pinned": false}, {"id": "CVE-2026-72760", "publisher": "CIRCL", "title": "Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list end", "summary": "Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, get_following() includes the followed user's email field in the API response alongside their name, user ID, and follow date. Because the email address is not required for the functionality and other related user lists omit it, an authenticated attacker could systematically follow ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00382, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T15:17:44.657", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72760"}], "cwe": ["CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31033, "pinned": false}, {"id": "CVE-2026-18171", "publisher": "Docker Inc.", "title": "Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind onl", "summary": "Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged code inside the sandbox can derive that path and write to a host directory the operator attached read-only.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.0014, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:17:32.477", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18171"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.03025, "pinned": false}, {"id": "CVE-2026-66381", "publisher": "JFrog", "title": "A repository reader with cache-deploy permission may access content outside a configured upstream path under s", "summary": "A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:20.083", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66381"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.31394, "pinned": false}, {"id": "CVE-2026-16694", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:23.993", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16694"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13176, "pinned": false}, {"id": "CVE-2026-17094", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and m", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00537, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:24.443", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17094"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.44441, "pinned": false}, {"id": "CVE-2026-71849", "publisher": "GitHub, Inc.", "title": "Hono is a Web application framework that provides support for any JavaScript runtime", "summary": "Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy() function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header fields listed in a message's Connection header field before forwarding the message, in addition to the well known hop by hop headers, but the proxy() fu", "cvss": 3.7, "sev": "LOW", "epss": 0.00355, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:54.100", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71849"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27992, "pinned": false}, {"id": "CVE-2026-19378", "publisher": "VulDB", "title": "A vulnerability was found in code-projects Task Management System 1.0", "summary": "A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/task_id/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0047, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T00:17:11.023", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19378"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3975, "pinned": false}, {"id": "CVE-2026-21059", "publisher": "Samsung Mobile", "title": "Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows l", "summary": "Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00127, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:47.947", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["16.0", "16.0 smr-apr-2026-r1", "16.0 smr-aug-2025-r1", "16.0 smr-dec-2025-r1", "16.0 smr-feb-2026-r1", "16.0 smr-jan-2026-r1", "16.0 smr-jul-2026-r1", "16.0 smr-jun-2026-r1"], "fixed": null, "safe": "before 16.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21059"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02169, "pinned": false}, {"id": "CVE-2026-21084", "publisher": "Samsung Mobile", "title": "Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive i", "summary": "Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0013, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:22.167", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21084"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02393, "pinned": false}, {"id": "CVE-2026-53996", "publisher": "VulnCheck", "title": "NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that a", "summary": "NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by exploiting the absence of an access check on /dev/hdaudioN device nodes. Attackers can repeatedly issue HDAUDIO_FGRP_SETCONFIG from one thread while keeping DMA and IRQs live from a second thread to trigger a use-after-free race c", "cvss": 7.0, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:22.777", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53996"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02246, "pinned": false}, {"id": "CVE-2026-18106", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00497, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.120", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18106"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4171, "pinned": false}, {"id": "CVE-2026-11743", "publisher": "Zephyr Project", "title": "The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash offset an", "summary": "The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash offset and length on its read and write paths with the test (offset + size) > data->size. Because offset is a signed off_t while size is unsigned, a negative offset is converted to a large unsigned value and the addition can wrap to a small result that passes the check. The read path then performs memcpy(dst, (void *)(data->base + offset), size) a", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.0015, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T22:16:57.317", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11743"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03843, "pinned": false}, {"id": "CVE-2026-19359", "publisher": "VulDB", "title": "A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0", "summary": "A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function Handler. Such manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.15.0 can resolve this issue. Upgrading the affected component is advised. The project explains: \"The reported IAM permission configuration is a known hi", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T17:16:21.860", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19359"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30423, "pinned": false}, {"id": "CVE-2026-19360", "publisher": "VulDB", "title": "A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3", "summary": "A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunction of the component Lambda Function Handler. Performing a manipulation results in improper privilege management. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T17:16:22.027", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19360"}], "cwe": ["CWE-266", "CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30422, "pinned": false}, {"id": "CVE-2026-15534", "publisher": "CPANSec", "title": "Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via a", "summary": "Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T18:16:42.800", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15534"}], "cwe": ["CWE-125", "CWE-190", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16322, "pinned": false}, {"id": "CVE-2026-72522", "publisher": "MITRE", "title": "libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated", "summary": "libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00191, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T04:16:50.910", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72522"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08324, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3880 (important): thunderbird", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3880.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2FIREFOX-2026-064 (important): firefox", "url": "https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-064.html", "date": "2026-08-31"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-21063", "publisher": "Samsung Mobile", "title": "Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical a", "summary": "Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:19.463", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21063"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09789, "pinned": false}, {"id": "CVE-2026-21073", "publisher": "Samsung Mobile", "title": "Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch", "summary": "Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.757", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21073"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": [], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1102, "pinned": false}, {"id": "CVE-2026-21078", "publisher": "Samsung Mobile", "title": "Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6", "summary": "Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.407", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "smart switch", "vendor": "samsung", "type": "app", "affected": ["< 3.7.72.6"], "fixed": "3.7.72.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy smart-switch || rpm -q smart-switch || smart-switch --version"}, {"label": "2. UPGRADE to 3.7.72.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade smart-switch"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade smart-switch"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21078"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04634, "pinned": false}, {"id": "CVE-2026-21080", "publisher": "Samsung Mobile", "title": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers", "summary": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.677", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "smart switch", "vendor": "samsung", "type": "app", "affected": ["< 3.7.72.6"], "fixed": "3.7.72.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy smart-switch || rpm -q smart-switch || smart-switch --version"}, {"label": "2. UPGRADE to 3.7.72.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade smart-switch"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade smart-switch"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21080"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0566, "pinned": false}, {"id": "CVE-2026-72576", "publisher": "TuranSec", "title": "A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated u", "summary": "A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author role) to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:30.407", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72576"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20334, "pinned": false}, {"id": "CVE-2026-48762", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI \"Create Transcription\" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00304, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T21:17:36.677", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48762"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22014, "pinned": false}, {"id": "CVE-2026-18710", "publisher": "MongoDB, Inc.", "title": "A MongoDB driver component could write sensitive configuration information, including a credential used for ou", "summary": "A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T22:17:20.113", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "java driver", "vendor": "mongodb", "type": "app", "affected": [">= 4.11.1 and < 5.9.2"], "fixed": "5.9.2", "safe": "before 4.11.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy java-driver || rpm -q java-driver || java-driver --version"}, {"label": "2. UPGRADE to 5.9.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade java-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade java-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.11.1 (Debian / Ubuntu)", "cmd": "apt-cache madison java-driver\nsudo apt install java-driver=<VERSION_BEFORE_4.11.1>\nsudo apt-mark hold java-driver"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list java-driver\nsudo dnf downgrade java-driver-<VERSION_BEFORE_4.11.1>\nsudo dnf versionlock add java-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18710"}, {"t": "Vendor Advisory, Issue Tracking", "u": "https://jira.mongodb.org/browse/JAVA-6266"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.03405, "pinned": false}, {"id": "CVE-2026-9318", "publisher": "VulnCheck", "title": "tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality t", "summary": "tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export_book method in the _html.py format handler. Attackers can rename worksheet sheets in imported files such as XLSX, ODS, XLS, or YAML with script payloads that are assigne", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T03:16:43.233", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9318"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21383, "pinned": false}, {"id": "CVE-2026-16999", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Edito", "summary": "Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking.\n\nThis issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T14:17:47.890", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16999"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06216, "pinned": false}, {"id": "CVE-2026-68753", "publisher": "JFrog", "title": "An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is con", "summary": "An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00308, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:21.993", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68753"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.22435, "pinned": false}, {"id": "CVE-2026-73262", "publisher": "GitHub, Inc.", "title": "Prowler is a cloud security platform", "summary": "Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict and parse_html_string, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned resource tag to store HTML or JavaScript that executes when another user opens the report. This issue is fixed in version 5.37.0.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:30.793", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73262"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21383, "pinned": false}, {"id": "CVE-2026-66016", "publisher": "JFrog", "title": "Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifes", "summary": "Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.0012, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:14.383", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66016"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01756, "pinned": false}, {"id": "CVE-2026-59717", "publisher": "GitHub, Inc.", "title": "Home Assistant is open source home automation software focused on local control and privacy", "summary": "Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the destination hostname. Because no screen in the invitation or onboarding flow shows the parsed server URL before onboarding commits to it, a victim has n", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00379, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:29.197", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59717"}], "cwe": ["CWE-601", "CWE-939"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30712, "pinned": false}, {"id": "CVE-2026-21079", "publisher": "Samsung Mobile", "title": "Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to in", "summary": "Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00098, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.550", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "smart switch", "vendor": "samsung", "type": "app", "affected": ["< 3.7.72.6"], "fixed": "3.7.72.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy smart-switch || rpm -q smart-switch || smart-switch --version"}, {"label": "2. UPGRADE to 3.7.72.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade smart-switch"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade smart-switch"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21079"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-311"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.00749, "pinned": false}, {"id": "CVE-2026-72583", "publisher": "TuranSec", "title": "A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authen", "summary": "A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:31.270", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72583"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16138, "pinned": false}, {"id": "CVE-2026-16742", "publisher": "systemd", "title": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged", "summary": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00057, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:21.277", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16742"}], "cwe": ["CWE-269", "CWE-347"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 4e-05, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3117 (important): systemd", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3117.html", "date": "2026-09-29"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-73229", "publisher": "GitHub, Inc.", "title": "Django REST framework is a powerful and flexible toolkit for building Web APIs", "summary": "Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/renderers.py AdminRenderer.render() uses override_method() to simulate GET and directly invokes view.get() without view.check_permissions() while rendering an invalid write request, allowing a 400 Bad Request HTML response to disclose data from a GET representation that the requester is not permitted to access. T", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:48.113", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73229"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30055, "pinned": false}, {"id": "CVE-2026-12235", "publisher": "Zephyr Project", "title": "The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relo", "summary": "The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (partially-linked) ELF extension. In llext_link_plt() (subsys/llext/llext_link.c), the relocatable branch (tgt != NULL, the path used for Xtensa relocatable objects) computed the patch address as ext->mem[LLEXT_MEM_TEXT] - text.sh_offset + rela.r_offset + tgt->sh_offset and then performed the relocation write there without validat", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00134, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T05:17:42.277", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12235"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02618, "pinned": false}, {"id": "CVE-2026-12372", "publisher": "huntr.dev", "title": "A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop ", "summary": "A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard onl", "cvss": 3.7, "sev": "LOW", "epss": 0.0026, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T23:16:35.793", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nltk", "vendor": "nltk", "type": "app", "affected": ["3.9.4"], "fixed": null, "safe": "before 3.9.4", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nltk || rpm -q nltk || nltk --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.9.4 (Debian / Ubuntu)", "cmd": "apt-cache madison nltk\nsudo apt install nltk=<VERSION_BEFORE_3.9.4>\nsudo apt-mark hold nltk"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nltk\nsudo dnf downgrade nltk-<VERSION_BEFORE_3.9.4>\nsudo dnf versionlock add nltk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12372"}], "cwe": ["CWE-918"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16737, "pinned": false}, {"id": "CVE-2026-72570", "publisher": "TuranSec", "title": "A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacke", "summary": "A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:29.633", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72570"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13588, "pinned": false}, {"id": "CVE-2026-63105", "publisher": "VulnCheck", "title": "ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticat", "summary": "ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploiting unsanitized rendering via the v-html directive in Messages.vue, RightChatSidebar.vue, SupportTicketMessages.vue, and SupportTicketDetails.vue. Attackers can submit crafted message content that executes arbitrary JavaScript in", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:25.477", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63105"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13598, "pinned": false}, {"id": "CVE-2026-56619", "publisher": "HCL Software", "title": "HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validati", "summary": "HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T17:17:35.170", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56619"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12587, "pinned": false}, {"id": "CVE-2026-12232", "publisher": "Zephyr Project", "title": "The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c ", "summary": "The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a caller-supplied int stream_id with no range validation. The value indexes the fixed-size static const uint8_t alh_handshake_map[64] array and scales a FIFO register address, so an out-of-range stream_id produces an out-of-bounds read of one byte at an attacker-chosen signed offset from the array. That byte is written into prop->dma", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00148, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T05:17:41.860", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12232"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0372, "pinned": false}, {"id": "CVE-2026-66382", "publisher": "JFrog", "title": "An authenticated user may write files outside the intended Artifactory work directory under specific condition", "summary": "An authenticated user may write files outside the intended Artifactory work directory under specific conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:20.203", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66382"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27592, "pinned": false}, {"id": "CVE-2026-71850", "publisher": "GitHub, Inc.", "title": "Hono is a Web application framework that provides support for any JavaScript runtime", "summary": "Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values read inside the component take no part in that comparison, so a response can contain HTML rendered for another user's request. Components wrapped with memo() are compared by props alone; val", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:54.240", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71850"}], "cwe": ["CWE-488"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17861, "pinned": false}, {"id": "CVE-2026-48122", "publisher": "GitHub, Inc.", "title": "Ruby LSP is an implementation of the language server protocol for Ruby", "summary": "Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler `Gemfile` used at startup. A malicious repository containing a `.vscode/settings.json` could set these values to attacker-controlled targets. Opening and trusting the repository would then ex", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0018, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T23:17:04.287", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48122"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07156, "pinned": false}, {"id": "CVE-2026-21082", "publisher": "Samsung Mobile", "title": "Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in", "summary": "Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.920", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "health", "vendor": "samsung", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy health || rpm -q health || health --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade health"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade health"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21082"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0549, "pinned": false}, {"id": "CVE-2026-70560", "publisher": "VulnCheck", "title": "Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allo", "summary": "Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a low-privileged role such as Cashier can submit a leave request through the HRM/Leave module, causing the unsanitized first-name markup to execute in the ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00203, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T12:19:47.147", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70560"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09756, "pinned": false}, {"id": "CVE-2026-18144", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00324, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.247", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18144"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24272, "pinned": false}, {"id": "CVE-2026-17598", "publisher": "Sonatype", "title": "Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task proper", "summary": "Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property value that caused the system to overwrite the configuration of an unrelated, existing task instead of creating a new one.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00228, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T17:17:00.553", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "nexus repository manager", "vendor": "sonatype", "type": "app", "affected": [">= 3.91.0 and < 3.95.0"], "fixed": "3.95.0", "safe": "before 3.91.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy nexus-repository-manager || rpm -q nexus-repository-manager || nexus-repository-manager --version"}, {"label": "2. UPGRADE to 3.95.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade nexus-repository-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade nexus-repository-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.91.0 (Debian / Ubuntu)", "cmd": "apt-cache madison nexus-repository-manager\nsudo apt install nexus-repository-manager=<VERSION_BEFORE_3.91.0>\nsudo apt-mark hold nexus-repository-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list nexus-repository-manager\nsudo dnf downgrade nexus-repository-manager-<VERSION_BEFORE_3.91.0>\nsudo dnf versionlock add nexus-repository-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17598"}, {"t": "Vendor Advisory", "u": "https://support.sonatype.com/hc/en-us/articles/53880086360211/"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12789, "pinned": false}, {"id": "CVE-2026-44965", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (I", "summary": "In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity) are exported with no permission guard. Each accepts a caller-supplied AppWidgetManager.EXTRA_APPWIDGET_ID and, when no deep-link destination is resolved, uses it to load the matching wid", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00161, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:14.690", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44965"}], "cwe": ["CWE-926"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04957, "pinned": false}, {"id": "CVE-2026-47362", "publisher": "HackerOne", "title": "In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sen", "summary": "In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, tags, and on-call/incident deep links) and SearchRecentDatabase (the user's full in-app search history). \r\nImpact: Any actor able to bypass the app sandbox can read these databases in plaintext.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00244, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T18:17:15.887", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47362"}], "cwe": ["CWE-922"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14759, "pinned": false}, {"id": "CVE-2026-66151", "publisher": "SonicWALL, Inc.", "title": "SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory re", "summary": "SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:52.750", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66151"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04565, "pinned": false}, {"id": "CVE-2026-19259", "publisher": "VulDB", "title": "A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1", "summary": "A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReference of the file src/iec61850/common/iec61850_common.c of the component MMS Protocol Workflow. Such manipulation of the argument GetNamedVariableListAttributesResponse.itemId leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and ma", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T07:17:11.560", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19259"}], "cwe": ["CWE-119", "CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06224, "pinned": false}, {"id": "CVE-2026-19270", "publisher": "VulDB", "title": "A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0", "summary": "A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path traversal. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T08:16:51.837", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19270"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06297, "pinned": false}, {"id": "CVE-2026-19285", "publisher": "VulDB", "title": "A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c", "summary": "A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delive", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T13:17:10.947", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19285"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06298, "pinned": false}, {"id": "CVE-2026-19287", "publisher": "VulDB", "title": "A flaw has been found in abrinsmead mindpilot-mcp 0.5.0", "summary": "A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ID causes path traversal. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T14:16:22.913", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19287"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06296, "pinned": false}, {"id": "CVE-2026-19288", "publisher": "VulDB", "title": "A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748", "summary": "A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to path traversal. The attack needs to be performed locally. This product implements a rolling release for ongoing delivery, which means version information f", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-08", "pub": "2026-08-08T14:16:24.063", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19288"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06298, "pinned": false}, {"id": "CVE-2026-19323", "publisher": "VulDB", "title": "A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0", "summary": "A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of the file src/index.ts of the component analyze-projec. The manipulation of the argument projectName results in path traversal. The attack is only possible with local access. This product implements a rolling release for ongoing delivery, which means version information", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T00:16:47.010", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19323"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06293, "pinned": false}, {"id": "CVE-2026-19325", "publisher": "VulDB", "title": "A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb", "summary": "A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. This affects the function readMemoryBankFile/appendMemoryBankEntry of the file src/index.ts of the component read_memory_bank_file/append_memory_bank_entry. Such manipulation of the argument file_name leads to path traversal. The attack must be carried out locally. This product utilizes a rolling release", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T03:16:56.687", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19325"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.063, "pinned": false}, {"id": "CVE-2026-19327", "publisher": "VulDB", "title": "A flaw has been found in abracadabra50 claude-sesh 1.0.0", "summary": "A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is called 786c9d74800e6d0858b65778f31beb71b3983a50. Applying a patch is advised to resolve this issue.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T03:16:57.057", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19327"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.063, "pinned": false}, {"id": "CVE-2026-19328", "publisher": "VulDB", "title": "A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0", "summary": "A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed locally. Upgrading to version 0.1.1 is recommended to address this issue. The identifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrading ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T03:16:57.243", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19328"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06294, "pinned": false}, {"id": "CVE-2026-19330", "publisher": "VulDB", "title": "A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0", "summary": "A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T04:17:42.917", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19330"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06295, "pinned": false}, {"id": "CVE-2026-19331", "publisher": "VulDB", "title": "A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0", "summary": "A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T05:16:50.810", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19331"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06298, "pinned": false}, {"id": "CVE-2026-19335", "publisher": "VulDB", "title": "A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0", "summary": "A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T06:19:47.653", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19335"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06296, "pinned": false}, {"id": "CVE-2026-19336", "publisher": "VulDB", "title": "A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6", "summary": "A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access. Upgrading to version 2.2.7 is capable of addressing this issue. The patch is named 9c7a7839e690bb4543f0e7481b5740d23808e5fe. It is advisable to upgrade th", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T06:19:55.713", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19336"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06299, "pinned": false}, {"id": "CVE-2026-19337", "publisher": "VulDB", "title": "A vulnerability was determined in adenot mcp-google-search up to 0.3.1", "summary": "A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This patch is called f071d491b685011ca04e8ab8d586fc65f86bcee1. It is advisable to implement a patch to correct this issue.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T06:20:07.843", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19337"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0475, "pinned": false}, {"id": "CVE-2026-19338", "publisher": "VulDB", "title": "A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4", "summary": "A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T07:17:02.763", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19338"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06294, "pinned": false}, {"id": "CVE-2026-19365", "publisher": "VulDB", "title": "A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0", "summary": "A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscale_images. Such manipulation of the argument output_path leads to path traversal. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T19:17:00.970", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19365"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06299, "pinned": false}, {"id": "CVE-2026-19366", "publisher": "VulDB", "title": "A flaw has been found in NocteDefensor LudusMCP up to 1.0.24", "summary": "A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricted to local execution. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T19:17:01.147", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19366"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06518, "pinned": false}, {"id": "CVE-2026-19370", "publisher": "VulDB", "title": "A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0", "summary": "A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T22:16:31.393", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19370"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06295, "pinned": false}, {"id": "CVE-2026-19371", "publisher": "VulDB", "title": "A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0", "summary": "A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T23:16:35.943", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19371"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06295, "pinned": false}, {"id": "CVE-2026-19372", "publisher": "VulDB", "title": "A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0", "summary": "A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T23:16:36.110", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19372"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06295, "pinned": false}, {"id": "CVE-2026-12570", "publisher": "huntr.dev", "title": "A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loadin", "summary": "A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function. The H5IOStore.__getitem__ method in keras/src/saving/saving_lib.py does not validate the shape or size of datasets, leading to unbounded memory allocation. A specially crafted .keras file can exploit this flaw to trigger an out-of-memory (OOM) condition, causing th", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00128, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T07:16:44.370", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12570"}], "cwe": ["CWE-770"], "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02213, "pinned": false}, {"id": "CVE-2026-21064", "publisher": "Samsung Mobile", "title": "Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inope", "summary": "Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00124, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:19.617", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21064"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0194, "pinned": false}, {"id": "CVE-2026-21076", "publisher": "Samsung Mobile", "title": "Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in", "summary": "Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.153", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "health", "vendor": "samsung", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy health || rpm -q health || health --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade health"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade health"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21076"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02586, "pinned": false}, {"id": "CVE-2026-21077", "publisher": "Samsung Mobile", "title": "Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in", "summary": "Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.283", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "health", "vendor": "samsung", "type": "app", "affected": ["< 7.0.0"], "fixed": "7.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy health || rpm -q health || health --version"}, {"label": "2. UPGRADE to 7.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade health"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade health"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21077"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02586, "pinned": false}, {"id": "CVE-2026-15059", "publisher": "systemd", "title": "Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing p", "summary": "Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00119, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:20.760", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15059"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01685, "pinned": false}, {"id": "CVE-2026-56620", "publisher": "HCL Software", "title": "HCL BigFix Mobile\u00a0is vulnerable to information disclosure due to improper handling of exceptions and verbose e", "summary": "HCL BigFix Mobile\u00a0is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T16:19:48.443", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56620"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20982, "pinned": false}, {"id": "CVE-2026-14479", "publisher": "Autodesk", "title": "A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper v", "summary": "A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\\SYSTEM service to terminate unexpectedly, resulting in a denial-of-service condition.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00152, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:17:31.830", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "installer", "vendor": "autodesk", "type": "app", "affected": ["< 2.23"], "fixed": "2.23", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy installer || rpm -q installer || installer --version"}, {"label": "2. UPGRADE to 2.23 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade installer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade installer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14479"}, {"t": "Vendor Advisory", "u": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013"}], "cwe": ["CWE-1285"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0401, "pinned": false}, {"id": "CVE-2026-66378", "publisher": "JFrog", "title": "An authenticated user without repository read permission may access private NuGet metadata under specific cond", "summary": "An authenticated user without repository read permission may access private NuGet metadata under specific conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.723", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66378"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21656, "pinned": false}, {"id": "CVE-2026-66379", "publisher": "JFrog", "title": "An authenticated user may view private Puppet module metadata without repository read access.", "summary": "An authenticated user may view private Puppet module metadata without repository read access.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.847", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66379"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21656, "pinned": false}, {"id": "CVE-2026-66380", "publisher": "JFrog", "title": "An authenticated user without repository read permission may access private OCI referrer metadata under specif", "summary": "An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.967", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66380"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21656, "pinned": false}, {"id": "CVE-2026-70547", "publisher": "JFrog", "title": "An authenticated user without repository read permission may access package metadata under specific conditions", "summary": "An authenticated user without repository read permission may access package metadata under specific conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:21.440", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": [">= 7.161.0 and < 7.161.16"], "fixed": "7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.161.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70547"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19523, "pinned": false}, {"id": "CVE-2026-19209", "publisher": "VulDB", "title": "A flaw has been found in SourceCodester Photo Share Website 1.0", "summary": "A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.", "cvss": 3.5, "sev": "LOW", "epss": 0.00348, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T16:17:23.933", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19209"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27213, "pinned": false}, {"id": "CVE-2026-19230", "publisher": "VulDB", "title": "A vulnerability was identified in SourceCodester Photo Share Website 1.0", "summary": "A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=save_upload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.", "cvss": 3.5, "sev": "LOW", "epss": 0.00348, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:17:40.650", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19230"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27214, "pinned": false}, {"id": "CVE-2026-11425", "publisher": "VulnCheck", "title": "Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard", "summary": "Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via ng-bind-html with only an nl2br() transform that performs no HTML escaping, allowing attackers to store malicious payloads that execute in any administra", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:27.010", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11425"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15823, "pinned": false}, {"id": "CVE-2026-19369", "publisher": "VulDB", "title": "A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0", "summary": "A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T21:16:59.363", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19369"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03471, "pinned": false}, {"id": "CVE-2026-19373", "publisher": "VulDB", "title": "A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0", "summary": "A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T23:16:36.280", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19373"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03471, "pinned": false}, {"id": "CVE-2026-21060", "publisher": "Samsung Mobile", "title": "Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to acc", "summary": "Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:48.090", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21060"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10279, "pinned": false}, {"id": "CVE-2026-21070", "publisher": "Samsung Mobile", "title": "Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to acce", "summary": "Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:20.377", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21070"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10279, "pinned": false}, {"id": "CVE-2026-64941", "publisher": "EEF", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR.\n\nredirect/2 validates :to through the private validate_local_url!/2 in lib/phoenix_live_view.ex, which is intended to guarantee the target is a path within the application. It rejects a leading // and any backsla", "cvss": 2.1, "sev": "LOW", "epss": 0.00599, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T12:17:19.873", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64941"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.48023, "pinned": false}, {"id": "CVE-2026-68755", "publisher": "JFrog", "title": "A bundle writer may create misleading release promotion information under specific conditions.", "summary": "A bundle writer may create misleading release promotion information under specific conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:22.237", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68755"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17367, "pinned": false}, {"id": "CVE-2026-65938", "publisher": "Progress Software Corporation", "title": "In WhatsUp Gold versions released before 2026.0.2,\u00a0an improper\u00a0authorization vulnerability in the Scheduled Re", "summary": "In WhatsUp Gold versions released before 2026.0.2,\u00a0an improper\u00a0authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:13.667", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "whatsup gold", "vendor": "progress", "type": "app", "affected": ["< 26.0.2"], "fixed": "26.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy whatsup-gold || rpm -q whatsup-gold || whatsup-gold --version"}, {"label": "2. UPGRADE to 26.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade whatsup-gold"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade whatsup-gold"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65938"}, {"t": "Vendor Advisory", "u": "https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026"}], "cwe": ["CWE-602", "CWE-862"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15835, "pinned": false}, {"id": "CVE-2026-71381", "publisher": "Adobe Systems Incorporated", "title": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability th", "summary": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:30.147", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71381"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.178, "pinned": false}, {"id": "CVE-2026-21081", "publisher": "Samsung Mobile", "title": "Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows loca", "summary": "Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00131, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T09:17:21.803", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21081"}], "cwe": ["CWE-926"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02453, "pinned": false}, {"id": "CVE-2026-66484", "publisher": "CERT.PL", "title": "GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality", "summary": "GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absol", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.620", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66484"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08904, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU cpio software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-66484/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-66485", "publisher": "CERT.PL", "title": "GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c", "summary": "GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a sufficiently long nested pathname causes an unbounded stack allocation, resulting in a stack overflow and crash of the cpio process. An attacker who can ", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.773", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66485"}], "cwe": ["CWE-789"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07729, "pinned": false}, {"id": "CVE-2026-66486", "publisher": "CERT.PL", "title": "GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality", "summary": "GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with embedded newline characters or ANSI escape sequences, causing forged listing entries or terminal control sequence injection when the listing is displayed.\n\n\n", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T11:17:27.907", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66486"}], "cwe": ["CWE-116"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07635, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in GNU cpio software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-66484/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-18370", "publisher": "CERT.PL", "title": "entr is vulnerable to Heap-based buffer overflow in run_utility() function", "summary": "entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy(), which returns the total length of the source string rather than the number of bytes written.\u00a0When the buffer is exactly filled, the remaining size underflows as an unsigned size_t, caus", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00163, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T13:17:58.397", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18370"}], "cwe": ["CWE-122"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05198, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in entr software", "url": "https://cert.pl/en/posts/2026/08/CVE-2026-18370/", "date": "2026-08-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-73281", "publisher": "MITRE", "title": "In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locall", "summary": "In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.", "cvss": 3.5, "sev": "LOW", "epss": 0.00158, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:49.690", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "openssh", "vendor": "openbsd", "type": "app", "affected": ["< 10.5"], "fixed": "10.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openssh || rpm -q openssh || openssh --version"}, {"label": "2. UPGRADE to 10.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openssh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openssh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73281"}], "cwe": ["CWE-669"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.04608, "pinned": false}, {"id": "CVE-2026-66376", "publisher": "JFrog", "title": "Credentials for a deleted user may remain valid for a short period under specific conditions.", "summary": "Credentials for a deleted user may remain valid for a short period under specific conditions.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:18:19.477", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.35", ">= 7.161.0 and < 7.161.16"], "fixed": "7.146.35, 7.161.16", "safe": "before 7.161.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.161.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.161.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.161.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66376"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1201, "pinned": false}, {"id": "CVE-2026-19326", "publisher": "VulDB", "title": "A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1", "summary": "A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T03:16:56.873", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19326"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06301, "pinned": false}, {"id": "CVE-2026-64951", "publisher": "Rapid7, Inc.", "title": "A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the fil", "summary": "A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.\n\nThe problem is a Divide by Zero bug in the\u00a0ShouldPadFile() function.", "cvss": 3.5, "sev": "LOW", "epss": 0.00281, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T10:17:20.063", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64951"}], "cwe": ["CWE-369"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19577, "pinned": false}, {"id": "CVE-2026-70467", "publisher": "Fortinet, Inc.", "title": "A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2,", "summary": "A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>", "cvss": 3.8, "sev": "LOW", "epss": 0.00255, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T13:17:25.070", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "fortisiem", "vendor": "fortinet", "type": "app", "affected": [">= 6.5.0 and < 7.3.6", ">= 7.4.0 and < 7.4.3", "7.5.0"], "fixed": "7.3.6, 7.4.3", "safe": "before 6.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortisiem || rpm -q fortisiem || fortisiem --version"}, {"label": "2. UPGRADE to 7.3.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortisiem"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortisiem"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortisiem\nsudo apt install fortisiem=<VERSION_BEFORE_6.5.0>\nsudo apt-mark hold fortisiem"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortisiem\nsudo dnf downgrade fortisiem-<VERSION_BEFORE_6.5.0>\nsudo dnf versionlock add fortisiem"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70467"}, {"t": "Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-159"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.16142, "pinned": false}, {"id": "CVE-2026-18246", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser.", "cvss": 3.0, "sev": "LOW", "epss": 0.00323, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:25.527", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18246"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-436"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24114, "pinned": false}, {"id": "CVE-2026-19207", "publisher": "VulDB", "title": "A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0", "summary": "A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.", "cvss": 2.4, "sev": "LOW", "epss": 0.00368, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T15:17:00.120", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19207"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29506, "pinned": false}, {"id": "CVE-2026-19352", "publisher": "VulDB", "title": "A vulnerability was determined in mifi lossless-cut up to 3.69.0", "summary": "A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the local network. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been publicly disclosed and m", "cvss": 3.1, "sev": "LOW", "epss": 0.00298, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T13:16:50.927", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19352"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21353, "pinned": false}, {"id": "CVE-2026-15060", "publisher": "systemd", "title": "When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is", "summary": "When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones.\n\n- versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file\n- versions older than v258 are not ", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00079, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:21.130", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15060"}], "cwe": ["CWE-284", "CWE-862"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00123, "pinned": false}, {"id": "CVE-2026-65926", "publisher": "JFrog", "title": "An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private", "summary": "An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.", "cvss": 3.1, "sev": "LOW", "epss": 0.00243, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T16:17:13.393", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65926"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14637, "pinned": false}, {"id": "CVE-2026-73283", "publisher": "MITRE", "title": "In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tun", "summary": "In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.", "cvss": 2.5, "sev": "LOW", "epss": 0.00091, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T20:18:49.960", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "openssh", "vendor": "openbsd", "type": "app", "affected": ["< 10.5"], "fixed": "10.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openssh || rpm -q openssh || openssh --version"}, {"label": "2. UPGRADE to 10.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openssh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openssh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73283"}], "cwe": ["CWE-670"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.00445, "pinned": false}, {"id": "CVE-2026-19245", "publisher": "VulDB", "title": "A flaw has been found in HKUDS nanobot up to 0.2.1", "summary": "A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affect", "cvss": 3.3, "sev": "LOW", "epss": 0.00174, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T21:17:27.667", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19245"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06514, "pinned": false}, {"id": "CVE-2026-11742", "publisher": "Zephyr Project", "title": "The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue's data_q ", "summary": "The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue's data_q list, reading the node's flag byte and, for items enqueued via k_queue_alloc_append/alloc_prepend, the data pointer of an internally allocated alloc_node struct. The implementations of z_impl_k_queue_peek_head() and z_impl_k_queue_peek_tail() performed this read-and-dereference without holding the queue's spinlock, while every other acces", "cvss": 3.6, "sev": "LOW", "epss": 0.00127, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T22:16:57.180", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11742"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0218, "pinned": false}, {"id": "CVE-2026-19324", "publisher": "VulDB", "title": "A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38", "summary": "A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The attack is restricted to local execution. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated", "cvss": 3.3, "sev": "LOW", "epss": 0.00175, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T03:16:56.377", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19324"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06635, "pinned": false}, {"id": "CVE-2026-19368", "publisher": "VulDB", "title": "A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0", "summary": "A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the file src/handlers/unified-gemini.ts of the component gemini_search/gemini_reason/gemini_process/gemini_analyze. The manipulation of the argument file_path/file_paths results in path traversal. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not respon", "cvss": 3.3, "sev": "LOW", "epss": 0.00174, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T21:16:59.193", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19368"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06496, "pinned": false}, {"id": "CVE-2026-71852", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.", "cvss": 3.3, "sev": "LOW", "epss": 0.00125, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:18:54.547", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "pypdf", "vendor": "pypdf project", "type": "app", "affected": ["< 6.15.0"], "fixed": "6.15.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pypdf || rpm -q pypdf || pypdf --version"}, {"label": "2. UPGRADE to 6.15.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pypdf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pypdf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71852"}, {"t": "Patch", "u": "https://github.com/py-pdf/pypdf/commit/51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7"}, {"t": "Patch", "u": "https://github.com/py-pdf/pypdf/pull/3946"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-fwg2-594c-jp42"}], "cwe": ["CWE-834"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02046, "pinned": false}, {"id": "CVE-2026-71870", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/_cmap.py function parse_bfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed in 6.15.0.", "cvss": 3.3, "sev": "LOW", "epss": 0.00125, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T20:16:52.873", "modified": "2026-10-23T20:10:00.160", "products": [{"name": "pypdf", "vendor": "pypdf project", "type": "app", "affected": ["< 6.15.0"], "fixed": "6.15.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pypdf || rpm -q pypdf || pypdf --version"}, {"label": "2. UPGRADE to 6.15.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pypdf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pypdf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71870"}, {"t": "Patch", "u": "https://github.com/py-pdf/pypdf/commit/afba8080e19d29a3c256a742b340995e695b35aa"}, {"t": "Patch", "u": "https://github.com/py-pdf/pypdf/pull/3944"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3f-mc75-235c"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02046, "pinned": false}, {"id": "CVE-2026-49262", "publisher": "GitHub, Inc.", "title": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsp", "summary": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists between the URL validation phase and the actual HTTP request phase, allowing attackers to access internal network resources and cloud metadata endpoints. Version 0.10.4 fixes the issue.", "cvss": 3.0, "sev": "LOW", "epss": 0.00169, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T15:17:35.867", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49262"}], "cwe": ["CWE-367", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0596, "pinned": false}, {"id": "CVE-2026-17435", "publisher": "CPANSec", "title": "File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files", "summary": "File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files.\n\nWhen the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent (since the existence check is against the target), and does not rotate it. But it touches the file, which creates the target.\n\nAn attacker that has the ability to create the symlink c", "cvss": 2.5, "sev": "LOW", "epss": 0.0014, "kev": false, "added": "2026-08-07", "pub": "2026-08-07T19:17:37.923", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17435"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03026, "pinned": false}, {"id": "CVE-2026-70395", "publisher": "EEF", "title": "Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an att", "summary": "Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up.\n\nWhen manage_relationship is used with on_lookup: :relate on a belongs_to relationship, the client-supplied lookup value is passed to Ash.Query.filter/2 without being cast to the attribute type. A nested map submitted where a sc", "cvss": 2.1, "sev": "LOW", "epss": 0.00197, "kev": false, "added": "2026-08-09", "pub": "2026-08-09T19:17:02.547", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70395"}], "cwe": ["CWE-943"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08889, "pinned": false}, {"id": "CVE-2026-19380", "publisher": "VulDB", "title": "A vulnerability was identified in Mullvad wireguard.sys 0.10.1", "summary": "A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.", "cvss": 2.3, "sev": "LOW", "epss": 0.00168, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T01:16:48.163", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19380"}], "cwe": ["CWE-664", "CWE-911"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05855, "pinned": false}, {"id": "CVE-2026-19382", "publisher": "VulDB", "title": "A weakness has been identified in Almico Speedfan 4.52", "summary": "A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 2.3, "sev": "LOW", "epss": 0.00168, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T01:16:48.537", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19382"}], "cwe": ["CWE-401", "CWE-404"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05855, "pinned": false}, {"id": "CVE-2026-18503", "publisher": "Python Software Foundation", "title": "Attacker-controlled CSV samples can trigger super-linear \nregular-expression work during dialect sniffing and ", "summary": "Attacker-controlled CSV samples can trigger super-linear \nregular-expression work during dialect sniffing and consume significant \nCPU when applications pass unbounded input to csv.Sniffer.sniff().", "cvss": 2.4, "sev": "LOW", "epss": 0.00119, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T14:17:21.560", "modified": "2026-10-23T20:10:00.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18503"}], "cwe": ["CWE-1176"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01686, "pinned": false}, {"id": "CVE-2026-113217", "publisher": "Chrome", "title": "Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attack", "summary": "Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:14.890", "modified": "2026-10-23T20:00:51.483", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113217"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34575, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113210", "publisher": "Chrome", "title": "Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to exe", "summary": "Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:14.107", "modified": "2026-10-23T20:00:32.070", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113210"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32106, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "webkitgtk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "webkitgtk3", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113207", "publisher": "Chrome", "title": "Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacke", "summary": "Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:13.763", "modified": "2026-10-23T20:00:16.850", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113207"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28462, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T20:30:51.903372+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2022-51026", "publisher": "VulnCheck", "title": "Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attac", "summary": "Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl to a server they control that returns an active user with a chosen email. Bytebase then issues session tokens for that principal, letting attackers impe", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00613, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:30.883", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51026"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48722, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": null}, {"id": "CVE-2026-63244", "publisher": "CSA", "title": "An authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow ", "summary": "An authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow an unauthenticated remote attacker to bypass password\nauthentication and the OAuth authentication flow by sending a specially crafted\nPOST request, potentially resulting in unauthorised access to user accounts and\nfull administrative control of the LMS platform.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00536, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.320", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63244"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44389, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": null}, {"id": "CVE-2026-25784", "publisher": "Hallo Welt! GmbH", "title": "Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container i", "summary": "Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service authentication to the container network, but evaluated to an empty string when the environment variable WIKI_SERVICE_TOKEN_AUTH_ALLOWED was not set. An emp", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.943", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25784"}], "cwe": ["CWE-269", "CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26906, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-110243", "publisher": "ICS-CERT", "title": "The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network inte", "summary": "The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T23:18:22.520", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110243"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.32577, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-107861", "publisher": "ICS-CERT", "title": "The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname paramet", "summary": "The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary operating system commands as root, resulting in full device compromise.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T23:18:17.190", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107861"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.32577, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-109122", "publisher": "ICS-CERT", "title": "The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used w", "summary": "The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can exploit this to execute arbitrary operating system commands as root, and the malicious configuration persists across reboots. Successful exploitation could result in full device compromise, including exposure ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00403, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:17:59.930", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109122"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.33467, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-114611", "publisher": "GitHub, Inc.", "title": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and m", "summary": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3,the Apple MDM enrollment endpoint `frontend/api-mdm.php` verifies the signed enrollment-request plist with `openssl_pkcs7_verify(..., PKCS7_NOVERIFY, ...)`. `PKCS7_NOVERIFY` disables signer certificate chain and trust validation, so the signature only has to be self-consistent with whatever certific", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00229, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:28.377", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114611"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1293, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-110491", "publisher": "ICS-CERT", "title": "The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certai", "summary": "The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00386, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T23:18:22.797", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110491"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.31448, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-92450", "publisher": "ICS-CERT", "title": "The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens u", "summary": "The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can recover this secret and forge arbitrary session tokens, including administrative tokens, without valid credentials, enabling unauthenticated access to pr", "cvss": 7.5, "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T23:20:33.703", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92450"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29316, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-110825", "publisher": "ICS-CERT", "title": "The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configura", "summary": "The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate valid", "cvss": 7.5, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T23:18:22.940", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110825"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26676, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-107685", "publisher": "EEF", "title": "Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an", "summary": "Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. ReqLLM.Streaming.WebSocketSession.Client.start/3 in lib/req_llm/streaming/web_socket_session/client.ex starts WebSockex without TLS options, and WebSockex defaults to insecure: true, wh", "cvss": 9.1, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:06.410", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107685"}], "cwe": ["CWE-295"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114519", "publisher": "Secur0", "title": "Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a ", "summary": "Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic role to read the accounts of other users of its own company, including accounts with higher privileges, and, in versions from 3.5.0, to delete them, because the routes GET /api/user/{id} and DELETE /api/user/{id} in routes/api.php carry only the auth:api middleware, which checks that a JSON Web Token is valid and nothing", "cvss": 8.6, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:37.267", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114519"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28307, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-55826", "publisher": "GitHub, Inc.", "title": "The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites", "summary": "The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another customer's full order data \u2014 including personally identifiable information (PII) \u2014 into the page's JavaScript dataLayer. This issue has been patched in version 2.1.48.", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:54.017", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55826"}], "cwe": ["CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-77156", "publisher": "Checkmarx", "title": "Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (u", "summary": "Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing the Vorpal ASCA real-time engine and the SCA Resolver) would allow a malicious tar archive containing absolute or traversal path entries to write files outside the install directory. Windows builds were not affected, as the Windows extractor performs this path validation.\n\n\n\nExploitation required substituting the archi", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00349, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:29.463", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77156"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.2727, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-96616", "publisher": "ICS-CERT", "title": "Authentication tokens issued by the E3's web management interface on login are given an expiration time far be", "summary": "Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:20:01.343", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96616"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21522, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-106765", "publisher": "MITRE", "title": "An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleIma", "summary": "An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:23.333", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106765"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-105963", "publisher": "EEF", "title": "Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plu", "summary": "Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates argument types in a function-head guard. A failed guard makes the Erlang VM raise FunctionClauseError with the actual argument values in the top stack fra", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00715, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T10:16:40.880", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105963"}], "cwe": ["CWE-532"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.53219, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-54668", "publisher": "GitHub, Inc.", "title": "Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Librar", "summary": "Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite. Prior to version 3.9.2, org.kitodo.production.helper.XMLUtils exposes several XML parsing helpers that construct a JAXP parser with the default, non-secure configuration. The methods parseXMLString(String), getNumberOfEADElements(String, String) and checkIfXmlIsWellFormed(String) build a DocumentBuilderFactory / XMLInputFactory /", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.427", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54668"}], "cwe": ["CWE-611"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-102786", "publisher": "Joomla! Project", "title": "Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Ph", "summary": "Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5", "cvss": 8.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:22.807", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102786"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-57210", "publisher": "GitHub, Inc.", "title": "Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service", "summary": "Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts client IP addresses from the Forwarded (for= parameter) and X-Forwarded-For headers and exposes them as Request.ClientIPAddresses to the rule pipeline. However, extracted values are not validated to be syntactically valid IP addresses. Arbitrary strings, malformed IP litera", "cvss": 7.0, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.847", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57210"}], "cwe": ["CWE-20", "CWE-116", "CWE-290"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Go", "pkg": "https://github.com/dadrus/heimdall", "status": "fixed", "fixed": "0.17.17", "cmd": "go get https://github.com/dadrus/heimdall@v0.17.17\ngo list -m https://github.com/dadrus/heimdall", "url": "https://github.com/advisories/GHSA-38x9-25wx-7fg2", "note": "vulnerable: <= 0.17.16"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57209", "publisher": "GitHub, Inc.", "title": "Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service", "summary": "Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after executing the matched rule pipeline by inserting the incoming request's Host header value directly into the header string without sanitizing commas or semicolons. This allows an attacker to inject additional parameters into the Forwarded header, potential", "cvss": 7.0, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.687", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57209"}], "cwe": ["CWE-20", "CWE-74"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Go", "pkg": "github.com/dadrus/heimdall", "status": "fixed", "fixed": "0.17.17", "cmd": "go get github.com/dadrus/heimdall@v0.17.17\ngo list -m github.com/dadrus/heimdall", "url": "https://github.com/advisories/GHSA-4jgr-pg2m-m988", "note": "vulnerable: <= 0.17.16"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-63120", "publisher": "GitHub, Inc.", "title": "pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores", "summary": "pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, or Azure) to execute arbitrary file writes and directory creation outside the designated PostgreSQL data directory (pgdata). When a database administrator executes a restore operation (via pgh", "cvss": 8.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.010", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63120"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115729", "publisher": "VulnCheck", "title": "@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attack", "summary": "@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, [::], NAT64 or localhost alias hostnames to read loopback, internal or cloud metadata responses through generated documents.", "cvss": 6.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:08.740", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115729"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-111100", "publisher": "ICS-CERT", "title": "The ONVIF device service on the E3 responds to certain informational requests without requiring authentication", "summary": "The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:00.907", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111100"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.214, "pinned": false}, {"id": "CVE-2026-13599", "publisher": "Asea Brown Boveri Ltd. (ABB)", "title": "Missing authentication for critical function vulnerability in ABB Ability Edgenius.\n\nThis issue affects Abilit", "summary": "Missing authentication for critical function vulnerability in ABB Ability Edgenius.\n\nThis issue affects Ability Edgenius: through 3.2.3.0.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00131, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:28.663", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13599"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02428, "pinned": false}, {"id": "CVE-2026-115810", "publisher": "VulnCheck", "title": "Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that ", "summary": "Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file. Attackers can exploit the raw requests.get call in cookbook/integration/pestle.py, which bypasses the application's centralized requests-hardened SSRF f", "cvss": 7.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:21.380", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115810"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-25716", "publisher": "Hallo Welt! GmbH", "title": "Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any ", "summary": "Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administrators. The REST endpoints /bs-usermanager/v1/block/create and /bs-usermanager/v1/block/delete call UserManager::blockUser() and UserManager::unblockUser(), which do not verify the permissions of the acting user. This allows lockin", "cvss": 7.1, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.790", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-25716"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07504, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-106764", "publisher": "MITRE", "title": "An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseB", "summary": "An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:23.203", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106764"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-106763", "publisher": "MITRE", "title": "An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the ", "summary": "An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:23.063", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106763"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-57207", "publisher": "GitHub, Inc.", "title": "NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox", "summary": "NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox tools - no token or credential needed. This issue has been patched in version 1.2.1.", "cvss": 5.9, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.197", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57207"}], "cwe": ["CWE-306", "CWE-1059"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-105265", "publisher": "ICS-CERT", "title": "A vulnerability exists in the the time zone parameter and does not properly validate user input, which may all", "summary": "A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory\n\n.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00381, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:17:52.590", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105265"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30927, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-54532", "publisher": "GitHub, Inc.", "title": "CloudPirates Open Source Helm Charts is a collection of Helm charts", "summary": "CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_request.head.sha or .head.ref. This gives attacker-controlled code access to base repository secrets and tokens. A pull_request_target workflow writes to a shared Actions cache. A subsequent relea", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00187, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:29.153", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54532"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07882, "pinned": false}, {"id": "CVE-2026-4951", "publisher": "SEC Consult Vulnerability Lab", "title": "The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search", "summary": "The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The search term can be passed in the \"searchValue\" URL parameter, so the search is performed when a logged-in user opens such a URL. JavaScript code placed in this parameter is executed in the victim's browser. An unauthenticated attacker who knows the URL structure can craft a li", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00362, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.053", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4951"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28878, "pinned": false}, {"id": "CVE-2026-55190", "publisher": "GitHub, Inc.", "title": "Event Schedule is an open-source platform to share events, sell tickets and bring communities together", "summary": "Event Schedule is an open-source platform to share events, sell tickets and bring communities together. In versions 1.0.0 and prior, App\\Utils\\UrlUtils::isUrlSafe() is the SSRF guard applied to user-supplied import URLs. It can be bypassed two ways, both reaching internal/localhost services when the URL is later fetched by ImportCuratorEvents (Http::get($url) then the response body is parsed and imported as events, and file_get_contents($ogImage)", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.790", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55190"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-4952", "publisher": "SEC Consult Vulnerability Lab", "title": "The \"ASMobile\" web interface, which is part of the VertiGIS software package \"GIS Portal\", allows authenticate", "summary": "The \"ASMobile\" web interface, which is part of the VertiGIS software package \"GIS Portal\", allows authenticated users to define a business reference. JavaScript code can be inserted into this field. On its own this only affects the user who entered it (self-XSS). However, the business reference is included in the order details when the user places an order through the web interface. The order is later listed in the OrderAdministration portal (Auf", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00284, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:55.187", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4952"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1983, "pinned": false}, {"id": "CVE-2026-77157", "publisher": "Checkmarx", "title": "ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from \"download.c", "summary": "ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from \"download.checkmarx.com\" as part of its auto-update flow, triggered by the Checkmarx\u2019s \"VSCode/JetBrains\" extensions and by cx scan \"sca-realtime\".\n\n\n\nPrior to the fix, the downloaded archive was not verified against a checksum before extraction and execution. An attacker able to substitute the served archive could deliver an arbitrary binary that a", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:29.630", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77157"}], "cwe": ["CWE-353"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03265, "pinned": false}, {"id": "CVE-2026-57208", "publisher": "GitHub, Inc.", "title": "Entire CLI hooks into Git workflows to capture AI agent sessions", "summary": "Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session directory. The issue occurs because checkpoint metadata is fetched from", "cvss": 6.2, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.370", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57208"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-4950", "publisher": "SEC Consult Vulnerability Lab", "title": "The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage", "summary": "The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the \"secondName\" parameter, can be filled with JavaScript code while editing a user. The code is stored and executed in the browser of any other privileged user who opens the edited user entry or the user overview of the corresponding user group. An authentica", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00309, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T08:16:54.850", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4950"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22542, "pinned": false}, {"id": "CVE-2026-115722", "publisher": "VulnCheck", "title": "RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() tha", "summary": "RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.", "cvss": 6.1, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:12.720", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115722"}], "cwe": ["CWE-129"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115751", "publisher": "VulnCheck", "title": "Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that ", "summary": "Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.", "cvss": 3.7, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.330", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115751"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115750", "publisher": "VulnCheck", "title": "mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to", "summary": "mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.", "cvss": 3.7, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.183", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115750"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115509", "publisher": "VulnCheck", "title": "Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts hand", "summary": "Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check never fails. Authenticated users knowing another workspace's sync ID can read, overwrite or delete its stream cursors, causing data re-ingestion or skipped data.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:07.060", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115509"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05963, "pinned": false}, {"id": "CVE-2026-115752", "publisher": "VulnCheck", "title": "Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the A", "summary": "Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the App Store icon fetcher that trusts absolute signalk.appIcon URLs. Attackers publishing npm packages with Signal K keywords can make servers request loopback, vessel network, or cloud metadata endpoints, storing image-typed responses served back via the admin UI.", "cvss": 4.2, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.477", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115752"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115725", "publisher": "VulnCheck", "title": "Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to ", "summary": "Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with another account's source_id to create or retrieve conversations and post messages to that account's contacts.", "cvss": 4.2, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:13.273", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115725"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115569", "publisher": "GitHub, Inc.", "title": "Fallow is a codebase intelligence tool for TypeScript and JavaScript", "summary": "Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root through absolute paths, parent segments, dot-prefixed wildcard globs, or symlinks. In version 3.33.1, the same behavior also affects Vitest test.projects paths, Vitest inline-project extends paths, and symlinked script --config paths. Fallow parses the outside files as test", "cvss": 3.3, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T19:17:44.320", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115569"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115749", "publisher": "VulnCheck", "title": "hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import ", "summary": "hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray_pkg_version OmegaConf resolver passing input to importlib.import_module(). Attackers controlling configuration values or command-line overrides can supply a ray_pkg_version interpolation to import any installed module, triggering its import-time side effects in the application process.", "cvss": 3.3, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.033", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115749"}], "cwe": ["CWE-470"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-54711", "publisher": "GitHub, Inc.", "title": "pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores", "summary": "pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.", "cvss": 2.4, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.643", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54711"}], "cwe": ["CWE-532"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2025-69723", "publisher": "MITRE", "title": "A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrar", "summary": "A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00148, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:33.233", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-69723"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03646, "pinned": false}, {"id": "CVE-2026-52356", "publisher": "MITRE", "title": "An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WW", "summary": "An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T16:16:51.870", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52356"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-50787", "publisher": "MITRE", "title": "e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in rest", "summary": "e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l, a, tf, ql) without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via excessive memory and CPU consumption.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T16:16:51.733", "modified": "2026-10-23T19:57:42.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50787"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-55888", "publisher": "GitHub, Inc.", "title": "XDG Desktop Portal is a desktop integration portal", "summary": "XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). The FileChooser.SaveFiles method takes optional filenames which get appended to the selected directory by backends. The backends are supposed to check that the file does not exist yet. The fil", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.090", "modified": "2026-10-23T19:54:04.270", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55888"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-69673", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker", "summary": "Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00457, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:57.557", "modified": "2026-10-23T19:51:30.777", "products": [{"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.3231"], "fixed": "10.0.28000.3231", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26300.9711"], "fixed": "10.0.26300.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2025", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.33650"], "fixed": "10.0.26100.33650", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69673"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69673"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38705, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows Server 2025 (Server Core installation)", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows Server 2025", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 23H2 for ARM64-based Systems", "pkg": "KB5126653", "status": "fixed", "fixed": "10.0.22631.7652", "cmd": "Install KB5126653 via Windows Update, then verify:\nGet-HotFix -Id KB5126653", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653", "note": "KB5126653"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69718", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a", "summary": "Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00963, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:57.997", "modified": "2026-10-23T19:50:38.367", "products": [{"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.3231"], "fixed": "10.0.28000.3231", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26300.9711"], "fixed": "10.0.26300.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2025", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.33650"], "fixed": "10.0.26100.33650", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69718"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69718"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6133, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows Server 2025 (Server Core installation)", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows Server 2025", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 23H2 for ARM64-based Systems", "pkg": "KB5126653", "status": "fixed", "fixed": "10.0.22631.7652", "cmd": "Install KB5126653 via Windows Update, then verify:\nGet-HotFix -Id KB5126653", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653", "note": "KB5126653"}], "vendors_checked": "2026-10-23T20:23:41.997174+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69733", "publisher": "Microsoft Corporation", "title": "Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.", "summary": "Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00439, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:58.307", "modified": "2026-10-23T19:49:40.630", "products": [{"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.3231"], "fixed": "10.0.28000.3231", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26300.9711"], "fixed": "10.0.26300.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2025", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.33650"], "fixed": "10.0.26100.33650", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69733"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69733"}], "cwe": ["CWE-426"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.37171, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows Server 2025 (Server Core installation)", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows Server 2025", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 23H2 for ARM64-based Systems", "pkg": "KB5126653", "status": "fixed", "fixed": "10.0.22631.7652", "cmd": "Install KB5126653 via Windows Update, then verify:\nGet-HotFix -Id KB5126653", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653", "note": "KB5126653"}], "vendors_checked": "2026-10-23T20:29:42.657629+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-108132", "publisher": "Microsoft Corporation", "title": "Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.", "summary": "Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:03.530", "modified": "2026-10-23T19:47:11.933", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2016", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108132"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108132"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.15727, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 10 Version 1607 for 32-bit Systems", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows 10 Version 1607 for x64-based Systems", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows Server 2016", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows Server 2016 (Server Core installation)", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-108135", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a", "summary": "Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.", "cvss": 7.0, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:03.960", "modified": "2026-10-23T19:46:13.093", "products": [{"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.3231"], "fixed": "10.0.28000.3231", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108135"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108135"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.18213, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 10 Version 21H2 for 32-bit Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19044.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}, {"os": "Windows 10 Version 21H2 for ARM64-based Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19044.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}, {"os": "Windows 10 Version 21H2 for x64-based Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19044.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}, {"os": "Windows 10 Version 22H2 for 32-bit Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19045.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}, {"os": "Windows 10 Version 22H2 for ARM64-based Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19045.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19677", "publisher": "MON-CSIRT", "title": "An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14\u00a0allows ", "summary": "An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14\u00a0allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary operating system commands via manipulation of registration parameters containing a valid tenant name and existing user identifier.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00533, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T02:16:57.560", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19677"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44243, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-16762", "publisher": "TQtC", "title": "An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause dispropor", "summary": "An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application parse attacker-influenced XML; no authentication, privileges, or user interaction beyond ingesting the input are needed. There is no loss of confidentiality or integrity \u2014 no data disclosure, dat", "cvss": 8.7, "sev": "HIGH", "epss": 0.00426, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.647", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16762"}], "cwe": ["CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:A/V:X/RE:L/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35872, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-19678", "publisher": "MON-CSIRT", "title": "A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in o", "summary": "A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00386, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T02:16:57.700", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19678"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31483, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114644", "publisher": "MongoDB, Inc.", "title": "The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserializa", "summary": "The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes untrusted content with the library retains data derived from that content for the lifetime of the process, with no limit on how much accumulates. An unauthenticated remote party who can cause such content to be deserialized can drive unbounded memory growth, exhausting", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00481, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.023", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114644"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40538, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114654", "publisher": "MongoDB, Inc.", "title": "A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range bi", "summary": "A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire representation, producing binary elements that misdeclare their type or length. An unauthenticated party able to supply text parsed by an affected applica", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00349, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:39.547", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114654"}], "cwe": ["CWE-681"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27297, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114648", "publisher": "MongoDB, Inc.", "title": "The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-", "summary": "The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter identifiers used in LINQ queries before placing them into the field paths it sends to the server. An application user whose input reaches these positions can redirect a query or update to fields the application did not name, which can expose other users' documents and widen updates beyond the intended data. Certain values can also ", "cvss": 7.6, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.567", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114648"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23917, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114646", "publisher": "MongoDB, Inc.", "title": "A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver", "summary": "A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an application constructs a raw or lazy BSON document object from externally supplied binary data, the driver does not verify that the size quantity declared inside that data matches the amount of data actually provided, and it copies the data onto the wire unchanged. An unauthenticated party who can supply binary content to such an app", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00263, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.300", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114646"}], "cwe": ["CWE-130"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17172, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-57845", "publisher": "VulnCheck", "title": "Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers t", "summary": "Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset(\"pandas\", data_files=...), the embedd", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T16:16:52.000", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57845"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115728", "publisher": "VulnCheck", "title": "@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content", "summary": "@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition() caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Disposition parameter lacking an equals sign, triggering quadratic backtracking that blocks the event loop.", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:08.590", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115728"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114655", "publisher": "MongoDB, Inc.", "title": "libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values fro", "summary": "libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with write access to the key vault collection can alter the structure of these requests, including adding members to request bodies and token claims that the", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:40.130", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114655"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.17827, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "libmongocrypt", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libmongocrypt", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114652", "publisher": "MongoDB, Inc.", "title": "A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C# Dr", "summary": "A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C# Driver can cause application-supplied values to be interpreted as query/update logic rather than as literal data. An application user who can influence the content of values that the application passes into the affected builder surface, without any special privilege beyond ordinary read-write application access, may cause stored data to be ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:39.147", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114652"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21483, "pinned": false}, {"id": "CVE-2026-115504", "publisher": "VulnCheck", "title": "CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts atta", "summary": "CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string array, enabling arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00135, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.313", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115504"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02683, "pinned": false}, {"id": "CVE-2026-115726", "publisher": "VulnCheck", "title": "Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by", "summary": "Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=True after model replies or /editor use, running commands with the victim's privileges.", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:13.413", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115726"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114651", "publisher": "MongoDB, Inc.", "title": "A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left ", "summary": "A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps certain primitive collection types can cause residual bytes from unrelated data processed earlier on the same execution thread to be surfaced as legiti", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00391, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:39.003", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114651"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.3203, "pinned": false}, {"id": "CVE-2026-114653", "publisher": "MongoDB, Inc.", "title": "A client-side encryption schema construction component in the MongoDB C# Driver places caller-supplied field i", "summary": "A client-side encryption schema construction component in the MongoDB C# Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that designates certain fields for client-side field-level encryption may have the protection silently fail to apply, so data intended to be encrypted is stored and returned in cleartext; conversely, ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00214, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:39.307", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114653"}], "cwe": ["CWE-185"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11153, "pinned": false}, {"id": "CVE-2026-114643", "publisher": "MongoDB, Inc.", "title": "The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved ", "summary": "The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the server and the driver resolve different values for the same record. Affected records can also become unreadable through the driver, interrupting application ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00372, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:37.880", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114643"}], "cwe": ["CWE-694"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29943, "pinned": false}, {"id": "CVE-2026-114649", "publisher": "MongoDB, Inc.", "title": "The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether ", "summary": "The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's issuer and serial number, without that user's private key, can be given connections authenticated with the other user's certificate. Database operations ca", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.002, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.703", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114649"}], "cwe": ["CWE-1025"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09275, "pinned": false}, {"id": "CVE-2026-114650", "publisher": "MongoDB, Inc.", "title": "A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for clien", "summary": "A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion loses information, so the encryption layer fails to associate the operation with its configured encryption rules and the operation proceeds without an error being raised. An application user with", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00108, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.837", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114650"}], "cwe": ["CWE-838"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01132, "pinned": false}, {"id": "CVE-2026-114645", "publisher": "MongoDB, Inc.", "title": "A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause", "summary": "A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side configuration, in conjunction with the affected authentication mechanism, can cause the driver to write outside the bounds of the allocated buffer. This may res", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.157", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114645"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05573, "pinned": false}, {"id": "CVE-2026-114647", "publisher": "MongoDB, Inc.", "title": "The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar si", "summary": "The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in FindOneAndReplace, unlike other replace operations. An application that builds such a document from user-supplied field names can have the server apply update operators instead of a full replacement. The effect is limited to the document matched by the application's own filter, whose contents can be modified in ways the application ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:38.437", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114647"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16615, "pinned": false}, {"id": "CVE-2026-115754", "publisher": "VulnCheck", "title": "serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attacke", "summary": "serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function source text with an unescaped </script. Attackers controlling a function's source via a spoofed toString() can combine surrounding output delimiters and later values to inject live markup such as img onerror handlers.", "cvss": 4.7, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.590", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115754"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115730", "publisher": "VulnCheck", "title": "i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect tr", "summary": "i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load attacker-hosted translations, enabling UI content injection and cross-site scripting.", "cvss": 3.1, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:08.887", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115730"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115724", "publisher": "VulnCheck", "title": "VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() tha", "summary": "VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissions can declare these authorities and send a crafted VIEW intent to the exported StartActivity, making VLC write attacker-chosen content under an attacker-chosen name in the shared Download directory, overwritin", "cvss": 2.9, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:13.130", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115724"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-95620", "publisher": "TQtC", "title": "A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module ", "summary": "A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.", "cvss": 2.1, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.080", "modified": "2026-10-23T19:45:03.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95620"}], "cwe": ["CWE-416"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:L/U:Green", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-110063", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allo", "summary": "Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00888, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:00.750", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110063"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58949, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110063", "date": "2026-10-22"}], "buzz": 1, "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-83938", "publisher": "Microsoft Corporation", "title": "Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized ", "summary": "Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00668, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:19:18.540", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83938"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51344, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83938", "date": "2026-10-22"}], "buzz": 1, "pinned": false, "ssvc": null}, {"id": "CVE-2026-97785", "publisher": "Microsoft Corporation", "title": "Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.", "summary": "Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00598, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:20:13.483", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97785"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47969, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97785", "date": "2026-10-22"}], "buzz": 1, "pinned": false, "ssvc": null}, {"id": "CVE-2026-111594", "publisher": "ICS-CERT", "title": "InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to vie", "summary": "InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:01.060", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111594"}], "cwe": ["CWE-319"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.0753, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "InterSystems Corporation InterSystems IRIS for Health", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-115517", "publisher": "KNIME AG", "title": "Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an a", "summary": "Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the runnin", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00431, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:48.713", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115517"}], "cwe": ["CWE-653"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.36253, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115863", "publisher": "MITRE", "title": "ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message", "summary": "ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then walks DNS labels with an unbounded \"c += jump + 1\" loop. A crafted DHCPv6 REPLY with a DOMAIN_LIST option of >= 1025 non-zero bytes makes the label wal", "cvss": 7.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T18:17:21.757", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115863"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-90458", "publisher": "MITRE", "title": "OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BM", "summary": "OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00277, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:19.367", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-90458"}], "cwe": ["CWE-1287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19101, "pinned": false}, {"id": "CVE-2026-89419", "publisher": "MITRE", "title": "OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH t", "summary": "OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:19.113", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89419"}], "cwe": ["CWE-424"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20233, "pinned": false}, {"id": "CVE-2026-115638", "publisher": "MITRE", "title": "OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amou", "summary": "OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00212, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:16.180", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115638"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10946, "pinned": false}, {"id": "CVE-2026-115657", "publisher": "KNIME AG", "title": "When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions b", "summary": "When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup. An attacker with access to log files can steal the credentials and use the proxy as the user who configured the proxy settings. The issue has been fixed in LTS versions 5.8.4 and 5.12.0 and later.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00105, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.510", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115657"}], "cwe": ["CWE-532"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00999, "pinned": false}, {"id": "CVE-2026-115519", "publisher": "KNIME AG", "title": "Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthen", "summary": "Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.", "cvss": 2.1, "sev": "LOW", "epss": 0.00186, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:48.870", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115519"}], "cwe": ["CWE-614", "CWE-1004"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07822, "pinned": false}, {"id": "CVE-2025-65200", "publisher": "MITRE", "title": "An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content h", "summary": "An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00181, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:32.260", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-65200"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07296, "pinned": false}, {"id": "CVE-2025-45528", "publisher": "MITRE", "title": "An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary co", "summary": "An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T16:16:50.607", "modified": "2026-10-23T19:43:46.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-45528"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 0, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-108359", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a value, the reader materializes a cell for every repetition without checking the spreadsheet row limit, so a small attacker-controlled ODS file can consume ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:26.740", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108359"}], "cwe": ["CWE-400", "CWE-789"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33843, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-55981", "publisher": "CSA", "title": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a leg", "summary": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00304, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T07:16:38.420", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55981"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.21992, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114612", "publisher": "GitHub, Inc.", "title": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format", "summary": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authenticated internal user to have crafted metadata containing a forged administrator credential encrypted and returned by the API-key flow. Replaying that ciphertext as a bearer token causes the ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00235, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:37.540", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114612"}], "cwe": ["CWE-269", "CWE-345", "CWE-441"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.13629, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-53942", "publisher": "GitHub, Inc.", "title": "Conda Organization Infrastructure is a centralized location for infrastructure codes", "summary": "Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is triggered by issue_comment events containing @conda-bot render or @conda-bot recreate. For the render path, the workflow obtains the pull request head repository and branch from the PR API, che", "cvss": 9.9, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.157", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53942"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-55889", "publisher": "GitHub, Inc.", "title": "XDG Desktop Portal is a desktop integration portal", "summary": "XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to resources. The sharing of the token transfers access to the resource and is supposed to happen out of band. The tokens were generated with g_random_int o", "cvss": 8.3, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.230", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55889"}], "cwe": ["CWE-330", "CWE-337"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-107858", "publisher": "Google Inc.", "title": "Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (", "summary": "Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited b", "cvss": 7.2, "sev": "HIGH", "epss": 0.0036, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:03.733", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107858"}], "cwe": ["CWE-306", "CWE-942", "CWE-1385"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28571, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-106069", "publisher": "HackerOne", "title": "A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different", "summary": "A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`.\n\n`tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the ope", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:19.740", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106069"}], "cwe": ["CWE-295"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-22.23.4-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-22.23.4-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105483", "publisher": "HackerOne", "title": "A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenti", "summary": "A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`\uff11\uff12\uff17.0.0.1`).\n\n`tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name ins", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:19.573", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105483"}], "cwe": ["CWE-295"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-105482", "publisher": "HackerOne", "title": "A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.re", "summary": "A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options.\r\n\r\nBecause the name is passed to c-ares as a C string, resolving attacker.example\\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate ", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:19.427", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105482"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "nodejs", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-22.23.4-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-22.23.4-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "nodejs", "status": "fixed", "fixed": "nodejs-24.22.1-r0", "cmd": "apk add --upgrade nodejs\napk info -v nodejs", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "CaterMaoZi/CVE-2026-105482-POC (8 stars)", "url": "https://github.com/CaterMaoZi/CVE-2026-105482-POC", "stars": 8}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114609", "publisher": "GitHub, Inc.", "title": "fpdf2 is a PDF creation library for Python", "summary": "fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through FPDF.image(), FPDF.write_html() HTML <img src> values, SVG <image href> or xlink:href values, and template image fields. This can cause outbound requests to attacker-selected internal or external services and local file open attempts, although local content is expo", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:28.060", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114609"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1575, "pinned": false}, {"id": "CVE-2026-105481", "publisher": "HackerOne", "title": "A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent b", "summary": "A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931.\n\nThe guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event loop polls for I/O. If an unsolicited response has already reached the socket but has not been read yet when the socket is handed to a new request, for e", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:19.250", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105481"}], "cwe": ["CWE-367"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93336", "publisher": "Canonical Ltd.", "title": "Missing authorization in the unit resources download route in Canonical Juju\u00a04.0 through 4.0.15 allows a contr", "summary": "Missing authorization in the unit resources download route in Canonical Juju\u00a04.0 through 4.0.15 allows a controller-authenticated principal (a unit agent,\u00a0or a user with only login permission) to read any application's charm resource\u00a0in any model,\u00a0 including container-registry credentials, via a crafted request\u00a0naming an arbitrary unit.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00215, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:32.157", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93336"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11331, "pinned": false}, {"id": "CVE-2026-114610", "publisher": "GitHub, Inc.", "title": "fpdf2 is a PDF creation library for Python", "summary": "fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default clone=True deep-copy behavior copies the complete referenced graphics tree during FPDF.image() processing. Repeating references at each nesting level makes the in-memory object count and processing work grow exponentially, allowing a small user-controlled SVG to consume ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00305, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:28.227", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114610"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22099, "pinned": false}, {"id": "CVE-2026-108360", "publisher": "GitHub, Inc.", "title": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files", "summary": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Worksheet\\Drawing::setPath validates only the initial external-image URL with setIsWhitelisted when setAllowExternalImages is enabled. The HTTP stream context permits PHP to follow a redirect without applying the callback to the redirected URL, so a permitted image host can redirect the server to an internal address ", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:26.897", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108360"}], "cwe": ["CWE-863", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12007, "pinned": false}, {"id": "CVE-2026-106072", "publisher": "HackerOne", "title": "A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP end", "summary": "A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`.\n\n`tls.checkServerIdentity()` did not classify these hosts as IP addresses, but normalized them to their canonical form and matched the result against the certificate DNS names. A certificate containing `DNS:127.", "cvss": 6.7, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:20.203", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106072"}], "cwe": ["CWE-295"], "vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-106074", "publisher": "HackerOne", "title": "A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUI", "summary": "A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.\n\nIf any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns t", "cvss": 4.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:20.473", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106074"}], "cwe": ["CWE-330"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115567", "publisher": "GitHub, Inc.", "title": "Tokio is a runtime for writing applications with Rust", "summary": "Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The race caused a use-after-free on the timer's waker and task state in safe Rust, which could produce assertion panics, task reference-count corruption, o", "cvss": 5.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T18:17:21.303", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115567"}], "cwe": ["CWE-362"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-63243", "publisher": "CSA", "title": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Kat", "summary": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T07:16:38.563", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63243"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16851, "pinned": false}, {"id": "CVE-2026-106070", "publisher": "HackerOne", "title": "A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entr", "summary": "A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails.\n\nWhen `zipEntry.modified` is read on an archive whose local header does not match its central directory, either directly or while compacting the archive, the validation error is caught but the parsed local header is left cached without a content offset. A later content read then retur", "cvss": 3.7, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:19.917", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106070"}], "cwe": ["CWE-840"], "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-55422", "publisher": "GitHub, Inc.", "title": "conda-forge is a GitHub organization containing repositories of conda recipes", "summary": "conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (the project has no DOMPurify or equivalent dependency). JSON files are produced automatically by the conda-forge autotick bot (regro/cf-scripts) while it processes every conda-forge feedstock and its upstream so", "cvss": 4.6, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:09.940", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55422"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-106071", "publisher": "HackerOne", "title": "A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildca", "summary": "A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.\n\nWhen the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as a match. For example, `--allow-fs-read=/etc/passwd.*` also allows reading `/etc/passwd`. This requires the wildcard grant to sit directly under the roo", "cvss": 3.6, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:20.060", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106071"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-54238", "publisher": "GitHub, Inc.", "title": "Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets", "summary": "Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST broadcast endpoints accept an expired JWT when the exp claim is encoded as a JSON string instead of a JSON number. The same route rejects an expired integer exp token signed with the same tenant secret. The accepted request returns 202 and emits the broadcast to subscribers. This could allow an unauthenticated attacker can broad", "cvss": 3.1, "sev": "LOW", "epss": 0.00206, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:28.993", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54238"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10198, "pinned": false}, {"id": "CVE-2026-106073", "publisher": "HackerOne", "title": "A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read", "summary": "A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`.\n\nAs a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directorie", "cvss": 3.3, "sev": "LOW", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:20.343", "modified": "2026-10-23T19:42:24.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106073"}], "cwe": ["CWE-284"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-53921", "publisher": "GitHub, Inc.", "title": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt", "summary": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer (pdbuf) when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two independent overflow sites exist in the same call chain, both reachable from the network via a single unauthenticated UDP packet. odhcpd runs as root on Ope", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.710", "modified": "2026-10-23T19:37:11.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53921"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-53918", "publisher": "GitHub, Inc.", "title": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt", "summary": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message `first` lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network client can make the first IA set `first`, then make a later same-IAID IA fail the on-link check and free that same lease, leaving `first` dangling. A f", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.423", "modified": "2026-10-23T19:37:11.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53918"}], "cwe": ["CWE-416", "CWE-672", "CWE-825"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-55606", "publisher": "GitHub, Inc.", "title": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt", "summary": "odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp() size parameter. On little-endian hosts, this causes memcmp() to read far beyond the stack buffer \u2014 a single unauthenticated DHCPv6 packet triggers a 2560-byte overread from a 128-byte buffer. At time of publication, there", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.850", "modified": "2026-10-23T19:37:11.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55606"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-86055", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no trusted-host validation. An unauthenticated attacker who submits a forgot-password request for a known account while sending a spoofed Host header causes Part-DB to email that account a reset link whose hostname is", "cvss": 8.7, "sev": "HIGH", "epss": 0.004, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:19.060", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86055"}], "cwe": ["CWE-640"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33061, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-54630", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension blocklist does not include phar. AttachmentSubmitHandler::renameBlacklistedExtensions() rewrites dangerous extensions (php, phtml, sh, cgi, py, js, html, htaccess, ...) to .txt, but phar is ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00234, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:17.007", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54630"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.13475, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-54615", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the \"Extra\" column of the activity-log table (/log) and in element history tables. Every branch of LogEntryExtraFormatter::getInternalFormat() runs user-controlled strings through htmlspecialchars() before placing them into the HTML it returns \u2014 except the CollectionElementDeleted branch, which ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:16.833", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54615"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21259, "pinned": false}, {"id": "CVE-2026-39902", "publisher": "GitHub, Inc.", "title": "Cacti is an open source performance and fault management framework", "summary": "Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `$\\\\n\\r]) omitted single-quote, double-quote, redirect operators, subshell parens and braces. An authenticated admin could save an input_string` containing single-quote, redirect operator, or subshell parens, and pass the check. This issue has been patched in version 1.2.31.", "cvss": 7.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:30.873", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39902"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Alpine 3.24", "pkg": "cacti", "status": "fixed", "fixed": "cacti-1.2.31-0", "cmd": "apk add --upgrade cacti\napk info -v cacti", "url": null, "note": null}], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-55600", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw filter. These messages include translated placeholders populated with user-controlled Part names. A user who can edit a Part name can store HTML markup in the Part name. When another user imports a BOM CSV referencing that Part ID, the malicious Part name is rendered as HTM", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:17.343", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55600"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21259, "pinned": false}, {"id": "CVE-2026-49442", "publisher": "GitHub, Inc.", "title": "Cacti is an open source performance and fault management framework", "summary": "Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does n", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.003", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49442"}], "cwe": ["CWE-204"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-86018", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side \u201cDownload external file\u201d attachment feature. When server-side attachment downloads are enabled, Part-DB downloads the remote file and streams it directly to disk without enforcing the configured MAX_ATTACHMENT_FILE_SIZE limit. A", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:18.227", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86018"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1856, "pinned": false}, {"id": "CVE-2026-86019", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces the configured attachment size limit for normal browser-based file uploads, but the API base64 upload path does not apply the same size validation. As a ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00249, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:18.490", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86019"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15309, "pinned": false}, {"id": "CVE-2026-54631", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APP_SECRET (a03498528f5a5fc089273ec9ae5b2849). The official Docker image jbtronics/part-db1 does not override or randomize this value at container start-up. Because Symfony uses APP_SECRET (via kernel.secret) as the HMAC key for signing remember-me cookies, any attac", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00109, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:17.177", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54631"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01181, "pinned": false}, {"id": "CVE-2026-59188", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled filename extension rather than actual file content type. An authenticated attacker can upload a malicious SVG with JavaScript payload using a non-SVG extension (e.g., .jpg), bypassing sanitization entirely. When any user views the attachment inline, the browser receives Co", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0015, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:17.937", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59188"}], "cwe": ["CWE-79", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03837, "pinned": false}, {"id": "CVE-2026-46531", "publisher": "GitHub, Inc.", "title": "Cacti is an open source performance and fault management framework", "summary": "Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm (default General Administration role) can persist an arbitrary SQL fragment in the automation_tree_rule_items.field column. The fragment is later concatenated directly into a SELECT ... AS sou", "cvss": 5.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:31.317", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46531"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-86020", "publisher": "GitHub, Inc.", "title": "Part-DB is an open source inventory management system for electronic components", "summary": "Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contains a spreadsheet formula injection vulnerability in the part import/export workflow. An authenticated user with permission to import parts can import a CSV file containing formula-prefixed values, such as =1+1, into user-controlled part fields. When the affected part is later exported as an XLSX spreadsheet, Part-DB writes the a", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00119, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:18.753", "modified": "2026-10-23T19:36:32.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86020"}], "cwe": ["CWE-20", "CWE-1236"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01681, "pinned": false}, {"id": "CVE-2026-114616", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length key material. If an application's secret lookup can return an empty string or empty bytes, a remote attacker can compute the deterministic HS256, HS384, or HS512 signature for arbitrary token claims and have Authlib treat the token as authentic. This issue is fixed in ve", "cvss": 7.4, "sev": "HIGH", "epss": 0.00212, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:04.420", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114616"}], "cwe": ["CWE-287", "CWE-326", "CWE-1391"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.10916, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-authlib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-authlib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL command line assistant", "pkg": "rhel-cla/rhel-knowledge-bridge-rhel10", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114615", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed algorithm registry and already configure verification with PEM or certificate bytes containing such a prefix, an unauthenticated attacker who knows tho", "cvss": 7.4, "sev": "HIGH", "epss": 0.00127, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:04.257", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114615"}], "cwe": ["CWE-184", "CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.02184, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "python-authlib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-authlib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL command line assistant", "pkg": "rhel-cla/rhel-knowledge-bridge-rhel10", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114620", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object() hook before applying a destination or registration policy; the hook itself performs no network request, while the documentation demonstrates an unrestricted HTTP fetch. In deployments whose integrator implement", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0029, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:05.090", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114620"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20454, "pinned": false}, {"id": "CVE-2026-114618", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences() returns an empty list, causing JWTBearerGrant.verify_claims() to require only that an aud claim exists without matching the current authorization server. An attacker holding a legitimate assertion for another service can present it to a server that shares the signing key and uses the default grant, obtaini", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:04.747", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114618"}], "cwe": ["CWE-287", "CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1243, "pinned": false}, {"id": "CVE-2026-114617", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid relying parties, or applications that directly accept externally supplied ID tokens, an attacker with a captured validly signed token can bypass the ", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00188, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:04.580", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114617"}], "cwe": ["CWE-294", "CWE-807"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07978, "pinned": false}, {"id": "CVE-2026-114619", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw request.payload.scope for openid after the parent grant has filtered allowed scopes into request.scope. A registered client permitted an ID token response type but not the openid scope can add openid to the request, obtain user consent, and receive a signed ID token contai", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:04.930", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114619"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04466, "pinned": false}, {"id": "CVE-2026-114614", "publisher": "GitHub, Inc.", "title": "Authlib is a Python library which builds OAuth and OpenID Connect servers", "summary": "Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host is an external non-loopback system. An external party able to supply a URL to OIDC RP-Initiated Logout registration, authorization-server metadata va", "cvss": 2.6, "sev": "LOW", "epss": 0.00177, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T21:17:16.683", "modified": "2026-10-23T19:34:14.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114614"}], "cwe": ["CWE-601", "CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06891, "pinned": false}, {"id": "CVE-2026-108136", "publisher": "Microsoft Corporation", "title": "Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local", "summary": "Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00318, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:04.100", "modified": "2026-10-23T19:30:41.010", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108136"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108136"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.23554, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows Server 2012", "pkg": "KB5126835", "status": "fixed", "fixed": "6.2.9200.26434", "cmd": "Install KB5126835 via Windows Update, then verify:\nGet-HotFix -Id KB5126835", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835", "note": "KB5126835"}, {"os": "Windows Server 2012 (Server Core installation)", "pkg": "KB5126835", "status": "fixed", "fixed": "6.2.9200.26434", "cmd": "Install KB5126835 via Windows Update, then verify:\nGet-HotFix -Id KB5126835", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835", "note": "KB5126835"}, {"os": "Windows Server 2012 R2", "pkg": "KB5126836", "status": "fixed", "fixed": "6.3.9600.23470", "cmd": "Install KB5126836 via Windows Update, then verify:\nGet-HotFix -Id KB5126836", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836", "note": "KB5126836"}, {"os": "Windows Server 2012 R2 (Server Core installation)", "pkg": "KB5126836", "status": "fixed", "fixed": "6.3.9600.23470", "cmd": "Install KB5126836 via Windows Update, then verify:\nGet-HotFix -Id KB5126836", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836", "note": "KB5126836"}, {"os": "Windows 10 Version 1607 for 32-bit Systems", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-89320", "publisher": "Eclipse Foundation", "title": "`HmacShaCryptor.Hash` never hashed its input", "summary": "`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K(\"\")` \u2014 the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.610", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89320"}], "cwe": ["CWE-354"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06549, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-89315", "publisher": "Eclipse Foundation", "title": "`JwtClaims.MarshalJSON` built a Go struct at runtime with `reflect.StructOf`, synthesising a field named `\"A\" ", "summary": "`JwtClaims.MarshalJSON` built a Go struct at runtime with `reflect.StructOf`, synthesising a field named `\"A\" + claimName` for each untyped claim. `reflect.StructOf` **panics** when a field name is not a valid Go identifier, or when it duplicates another field. Both conditions are reachable from ordinary JWT claim names.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.027", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89315"}], "cwe": ["CWE-248"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15846, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89314", "publisher": "Eclipse Foundation", "title": "`jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validati", "summary": "`jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with the **square** of the entry count. Because the check runs on every JWK and JWKS unmarshal, a modestly sized but hostile JWKS document could occupy a CPU core for many seconds.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:07.913", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89314"}], "cwe": ["CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15846, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89312", "publisher": "Eclipse Foundation", "title": "`AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length", "summary": "`AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an error when a GCM nonce is not exactly `NonceSize()` bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:07.663", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89312"}], "cwe": ["CWE-248"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1585, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89318", "publisher": "Eclipse Foundation", "title": "`JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` withou", "summary": "`JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an error when a GCM nonce is not exactly `NonceSize()` bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.380", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89318"}], "cwe": ["CWE-248"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.05609, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89319", "publisher": "Eclipse Foundation", "title": "`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field", "summary": "`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and used it without any validation. A truncated field panics `binary.BigEndian.Uint64`, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with a slice-bounds error.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.493", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89319"}], "cwe": ["CWE-129"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.10299, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89316", "publisher": "Eclipse Foundation", "title": "`LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions", "summary": "`LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`. A JWK declaring `\"kty\":\"EC\"` together with a non-EC `\"alg\"` \u2014 which RFC 7517 \u00a74.4 permits \u2014 reaches that assertion and **panics**.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.143", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89316"}], "cwe": ["CWE-248"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.10298, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89313", "publisher": "Eclipse Foundation", "title": "`JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JW", "summary": "`JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JWKS cache. When the requested `kid` was not present, the trailing naked `return` handed the caller the last key in the JWKS document together with a `nil` error \u2014 a confidently wrong answer instead of \"not found\".", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:07.797", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89313"}], "cwe": ["CWE-706"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.10298, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-89317", "publisher": "Eclipse Foundation", "title": "gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it", "summary": "gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it. RFC 7515 \u00a74.1.11 requires a recipient to reject a JWS whose listed critical extension parameters it does not understand. gose implements no header extensions, so every token carrying a non-empty `crit` should have been rejected \u2014 and none were.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00147, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:08.260", "modified": "2026-10-23T19:30:07.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89317"}], "cwe": ["CWE-20", "CWE-347", "CWE-1288"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.03593, "pinned": false}, {"id": "CVE-2026-108396", "publisher": "Microsoft Corporation", "title": "Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz", "summary": "Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:04.800", "modified": "2026-10-23T19:29:29.237", "products": [{"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108396"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108396"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.08501, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 21H2 for 32-bit Systems", "pkg": "KB5126657", "status": "fixed", "fixed": "10.0.19044.7807", "cmd": "Install KB5126657 via Windows Update, then verify:\nGet-HotFix -Id KB5126657", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657", "note": "KB5126657"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-115812", "publisher": "AMZN", "title": "Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and e", "summary": "Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive.\n\n\n\nMulti Model Server is end of life and no fixed version is available. Users should discontinue use of Multi Model Server and migrate to a supported model serving solution.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T18:17:21.460", "modified": "2026-10-23T19:23:01.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115812"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-148-aws/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-115813", "publisher": "AMZN", "title": "Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and ea", "summary": "Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL.\n\n\n\nMulti Model Server is end of life and no fixed version is available. Users should discontinue use of Multi Model Server and migrate to a supported model serving solution.", "cvss": 5.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T18:17:21.617", "modified": "2026-10-23T19:23:01.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115813"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-148-aws/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-115845", "publisher": "AMZN", "title": "An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server ", "summary": "An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.\n\n\n\nAWS fixed this issue service-side. No customer action is required.", "cvss": 6.4, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T19:17:44.643", "modified": "2026-10-23T19:23:01.467", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115845"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-149-aws/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-19754", "publisher": "Fluid Attacks", "title": "Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function", "summary": "Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL template and interpolated directly into a PostgreSQL expression. The generated SQL executes through Baserow's database connection with the Baserow PostgreSQL role permissions, allowing data outsid", "cvss": 8.6, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-09-02", "pub": "2026-09-02T04:17:51.537", "modified": "2026-10-23T19:17:44.790", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19754"}], "cwe": ["CWE-89"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.32195, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "fluidattacks.com/es/advisories/superestrella", "url": "https://fluidattacks.com/es/advisories/superestrella"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-114400", "publisher": "VulnCheck", "title": "Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers t", "summary": "Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express.static serves the public/ directory before the hasAuth-guarded /uploads mount, attackers who know or guess a ticket ObjectId and filename can retrieve confidential attachments.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00523, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T13:18:31.217", "modified": "2026-10-23T19:17:44.007", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114400"}], "cwe": ["CWE-552"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43558, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-114392", "publisher": "VulnCheck", "title": "Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read ", "summary": "Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attackers can enumerate sequential ticket uids to read every ticket's subject, issue, comments, owner and assignee, because the apiTickets.single handler skips group membership checks.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T13:18:29.767", "modified": "2026-10-23T19:17:43.870", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114392"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12284, "pinned": false}, {"id": "CVE-2026-113876", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions", "summary": "SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not READ permissions could submit a conditional create whose predicate matches an existing resource and receive the target resource's contents.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00248, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:36.367", "modified": "2026-10-23T19:17:43.737", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113876"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15176, "pinned": false}, {"id": "CVE-2026-113875", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creatio", "summary": "On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access.", "cvss": 3.1, "sev": "LOW", "epss": 0.00174, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:36.190", "modified": "2026-10-23T19:17:43.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113875"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06539, "pinned": false}, {"id": "CVE-2026-113874", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a", "summary": "SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00234, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:27.237", "modified": "2026-10-23T19:17:43.483", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113874"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13461, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-113873", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to se", "summary": "SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00344, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:27.077", "modified": "2026-10-23T19:17:43.350", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113873"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26685, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111633", "publisher": "VulnCheck", "title": "ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to f", "summary": "ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize endpoints, modifying articles and products and reading form submissions.", "cvss": 8.6, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:43.607", "modified": "2026-10-23T19:17:43.070", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111633"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26245, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111628", "publisher": "VulnCheck", "title": "10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level user", "summary": "10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in includes/utils.php unserializes on the destination site, storing attacker-defined objects whose impact depends on loaded gadget classes.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:42.907", "modified": "2026-10-23T19:17:42.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111628"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18279, "pinned": false}, {"id": "CVE-2026-111623", "publisher": "VulnCheck", "title": "Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenti", "summary": "Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role system prompts, write conversation history, consume LLM/STT/TTS credentials, and overwrite device metadata.", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00364, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:42.133", "modified": "2026-10-23T19:17:42.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111623"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29112, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111618", "publisher": "VulnCheck", "title": "CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and a", "summary": "CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated archives.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:41.393", "modified": "2026-10-23T19:17:42.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111618"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27766, "pinned": false}, {"id": "CVE-2026-111613", "publisher": "VulnCheck", "title": "AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to", "summary": "AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with allowLoadLocalInfile=true pointing to an attacker-controlled server to read arbitrary files from the data-dts host.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:40.680", "modified": "2026-10-23T19:17:42.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111613"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39966, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111608", "publisher": "VulnCheck", "title": "Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merc", "summary": "Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENT_DIVISION_RECEIVER_DELETE who own a receiver group whose id matches a victim's receiver id can delete the victim's profit-sharing receiver.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00246, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:39.957", "modified": "2026-10-23T19:17:42.373", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111608"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14934, "pinned": false}, {"id": "CVE-2026-111603", "publisher": "VulnCheck", "title": "PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authent", "summary": "PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details and attachment download endpoints to obtain course structure and attachment files from other departments.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:39.220", "modified": "2026-10-23T19:17:42.233", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111603"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15533, "pinned": false}, {"id": "CVE-2026-109219", "publisher": "Wordfence", "title": "The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_u", "summary": "The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-supplied image_path parameter, whose basename-derived file name bypasses the extension allowlist applied only to the separate file_name parameter. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00685, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T05:17:29.100", "modified": "2026-10-23T19:17:41.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109219"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52073, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-42018", "publisher": "JFrog", "title": "JFrog Artifactory Improper Authentication Vulnerability", "summary": "JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.", "cvss": 7.5, "sev": "HIGH", "epss": 0.09805, "kev": true, "added": "2026-08-12", "pub": "2026-08-12T18:17:29.473", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.111.20", ">= 7.117.0 and < 7.117.27", ">= 7.125.0 and < 7.125.19", ">= 7.133.0 and < 7.133.28", ">= 7.146.0 and < 7.146.8"], "fixed": "7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.8", "safe": "before 7.117.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.111.20 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.117.0 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.117.0>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.117.0>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42018"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-25", "kev_added": "2026-09-11", "ransom": false, "priority": 80, "tier": "P0", "why": ["High severity", "EPSS top 4%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.95546, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-20", "url": "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201"}, {"kind": "nuclei", "name": "JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42018.yaml"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Wiz Research", "group": "research", "title": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329", "url": "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201", "date": "2026-09-10"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-73296", "publisher": "GitHub, Inc.", "title": "Microsoft UFO open-source framework for intelligent automation across devices and platforms", "summary": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key,", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.03652, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.780", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73296"}], "cwe": ["CWE-306", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 71, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.89562, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "0xBlackash/CVE-2026-73296 (0 stars)", "url": "https://github.com/0xBlackash/CVE-2026-73296", "stars": 0}, {"kind": "writeup", "name": "github.com/microsoft/UFO/security/advisories/GHSA-24fq-m9rr-g3mm", "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-24fq-m9rr-g3mm"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59124", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized at", "summary": "Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01532, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:06.287", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows app", "vendor": "microsoft", "type": "app", "affected": ["< 2.0.1314.0"], "fixed": "2.0.1314.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy windows-app || rpm -q windows-app || windows-app --version"}, {"label": "2. UPGRADE to 2.0.1314.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade windows-app"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade windows-app"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59124"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59124"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 66, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.74605, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12571", "publisher": "ManageEngine", "title": "An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.", "summary": "An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.03272, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:17:46.940", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12571"}], "cwe": ["CWE-287", "CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.88354, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73240", "publisher": "Apache Software Foundation", "title": "Specifically crafted inputs may lead to git argument injection in Apache Allura.\n\nThis issue affects Apache Al", "summary": "Specifically crafted inputs may lead to git argument injection in Apache Allura.\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01043, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.307", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "allura", "vendor": "apache", "type": "app", "affected": ["< 1.19.1"], "fixed": "1.19.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy allura || rpm -q allura || allura --version"}, {"label": "2. UPGRADE to 1.19.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade allura"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade allura"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73240"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/10gnxblhomk2z4gxcyyb4t3p4zxsdddv"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.63817, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73299", "publisher": "GitHub, Inc.", "title": "Prompty is a markdown file format (.prompty) for LLM prompts", "summary": "Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype properties to execute JavaScript in the host Node.js process. This issue is fixed in versions 0.1.5 and 2.0.0-beta.5.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01784, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:18:15.197", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73299"}], "cwe": ["CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.78144, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49819", "publisher": "GitHub, Inc.", "title": "UpSnap is a wake on lan web app", "summary": "UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superuser`. The vulnerable code lacks any authentication, setup token, IP allow-list, or rate limit and is gated only by a `totalSuperusers > 0` count check \u2014 a condition that is false on every fresh install \u2014 allowing ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0108, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.747", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49819"}], "cwe": ["CWE-78", "CWE-269", "CWE-306", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.64853, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/seriousm4x/UpSnap/security/advisories/GHSA-w4jr-728f-5jhq", "url": "https://github.com/seriousm4x/UpSnap/security/advisories/GHSA-w4jr-728f-5jhq"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-50516", "publisher": "Microsoft Corporation", "title": "Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privile", "summary": "Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00831, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:02.900", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure kubernetes service", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-kubernetes-service || rpm -q azure-kubernetes-service || azure-kubernetes-service --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50516"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.57171, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-27302", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi", "summary": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01166, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:25.603", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": [">= 7.2.1 and < 7.4.4"], "fixed": "7.4.4", "safe": "before 7.2.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to 7.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison campaign\nsudo apt install campaign=<VERSION_BEFORE_7.2.1>\nsudo apt-mark hold campaign"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list campaign\nsudo dnf downgrade campaign-<VERSION_BEFORE_7.2.1>\nsudo dnf versionlock add campaign"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27302"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-123.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.67075, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73519", "publisher": "VulnCheck", "title": "WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and publ", "summary": "WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth() gate without any session, API key, or user account. Attackers can reach an affected node's management port to enumerate all Docker and LXC containers on t", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01241, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:17.600", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73519"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.68984, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "squeeze440/CVE-2026-73519-WolfStack-PoC (0 stars)", "url": "https://github.com/squeeze440/CVE-2026-73519-WolfStack-PoC", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72748", "publisher": "VulnCheck", "title": "AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpo", "summary": "AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without authentication. Attackers can exhaust disk space causing denial of service, poison the video encoding pipeline, or chain this with local file inclusion to achieve remote code execution.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.01189, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:05.813", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72748"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.67718, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/WWBN/AVideo/security/advisories/GHSA-v7p7-jccx-h37c", "url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-v7p7-jccx-h37c"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69223", "publisher": "Apache Software Foundation", "title": "Apache Allura's webhooks are vulnerable to\u00a0Server-Side Request Forgery (SSRF).\n\nThis issue affects Apache Allu", "summary": "Apache Allura's webhooks are vulnerable to\u00a0Server-Side Request Forgery (SSRF).\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00781, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:06.750", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "allura", "vendor": "apache", "type": "app", "affected": ["< 1.19.1"], "fixed": "1.19.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy allura || rpm -q allura || allura --version"}, {"label": "2. UPGRADE to 1.19.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade allura"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade allura"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69223"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/9xpltfm6nombd7rdrx5o0hh8kxmm82pb"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55492, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73297", "publisher": "GitHub, Inc.", "title": "Microsoft UFO open-source framework for intelligent automation across devices and platforms", "summary": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedded IPv4 destinations, allowing an unauthenticated remote attacker who can influence URLs processed by validate_url to bypass the SSRF guard and reach ", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.02903, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.933", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73297"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 59, "tier": "P2", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.8687, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58231", "publisher": "SAP SE", "title": "SAP Commerce Cloud allows an unauthenticated\nattacker to abuse a default authentication client and submit spec", "summary": "SAP Commerce Cloud allows an unauthenticated\nattacker to abuse a default authentication client and submit specially crafted\ninput to certain functions lacking sufficient validation. Successful\nexploitation could enable arbitrary code execution and compromise internal\ncomponents, resulting in high impact on confidentiality, integrity, and\navailability of the application.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00855, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T11:17:15.390", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58231"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57971, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-58231 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-58231", "stars": 0}, {"kind": "poc", "name": "WildanDeveloper/CVE-2026-58231 (0 stars)", "url": "https://github.com/WildanDeveloper/CVE-2026-58231", "stars": 0}, {"kind": "poc", "name": "SAP-system-update/CVE-2026-58231 (0 stars)", "url": "https://github.com/SAP-system-update/CVE-2026-58231", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17061", "publisher": "Dassault Syst\u00e8mes", "title": "A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through", "summary": "A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00812, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:27.783", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17061"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56573, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16956", "publisher": "IBM Corporation", "title": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to impr", "summary": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0086, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:25.133", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2 mirror for i", "vendor": "ibm", "type": "app", "affected": [">= 7.4 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2-mirror-for-i || rpm -q db2-mirror-for-i || db2-mirror-for-i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2-mirror-for-i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2-mirror-for-i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.4 (Debian / Ubuntu)", "cmd": "apt-cache madison db2-mirror-for-i\nsudo apt install db2-mirror-for-i=<VERSION_BEFORE_7.4>\nsudo apt-mark hold db2-mirror-for-i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2-mirror-for-i\nsudo dnf downgrade db2-mirror-for-i-<VERSION_BEFORE_7.4>\nsudo dnf versionlock add db2-mirror-for-i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16956"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283281"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58124, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48056", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0  improperly validate executable paths supplied to the \u00a0run-download\u00a0 IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application\u2019s privileges. Version 2.5.0 contains a patch.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00553, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:14.170", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48056"}], "cwe": ["CWE-20", "CWE-749"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45473, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-x267-77m6-qjc9", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-x267-77m6-qjc9"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71966", "publisher": "VulnCheck", "title": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the re", "summary": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated attackers to execute arbitrary OS commands by controlling a remote server's API response. Attackers can inject malicious commands through a crafted directory name in the remote server's API response, which bypasses security middleware validation and is passed unsanitized to the OS com", "cvss": 8.8, "sev": "HIGH", "epss": 0.03276, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:32.723", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71966"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.88364, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/", "url": "https://themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17218", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds w", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00795, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:25.867", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17218"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283277"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55995, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16770", "publisher": "CPANSec", "title": "PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the sourc", "summary": "PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document.\n\nFor an HTML string or file source, the constructor collects every <meta name=\"pdf-webkit-KEY\" content=\"VALUE\"> element in the document head through _pdf_webkit_meta_tags and turns each one into a wkhtmltopdf command line option. KEY is normalized to an option name matching --[a-z0-9-]+ but is not checked against an allow list", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:31.763", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16770"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53602, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72603", "publisher": "TuranSec", "title": "An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to exe", "summary": "An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file without neutralizing newline characters, allowing injection of arbitrary directives that are executed by wg-quick with root privileges. An attacker with clien", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.02235, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.383", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72603"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.82676, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65815", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to exe", "summary": "Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01694, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:01.157", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "dynamics 365", "vendor": "microsoft", "type": "app", "affected": [">= 9.1 and < 9.1.47.06"], "fixed": "9.1.47.06", "safe": "before 9.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamics-365 || rpm -q dynamics-365 || dynamics-365 --version"}, {"label": "2. UPGRADE to 9.1.47.06 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamics-365"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamics-365"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.1 (Debian / Ubuntu)", "cmd": "apt-cache madison dynamics-365\nsudo apt install dynamics-365=<VERSION_BEFORE_9.1>\nsudo apt-mark hold dynamics-365"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list dynamics-365\nsudo dnf downgrade dynamics-365-<VERSION_BEFORE_9.1>\nsudo dnf versionlock add dynamics-365"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65815"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65815"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.76957, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70321", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code", "summary": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01694, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:09.760", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "sharepoint server", "vendor": "microsoft", "type": "app", "affected": ["< 16.0.19725.20522"], "fixed": "16.0.19725.20522", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sharepoint-server || rpm -q sharepoint-server || sharepoint-server --version"}, {"label": "2. UPGRADE to 16.0.19725.20522 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sharepoint-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sharepoint-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70321"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70321"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.76959, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Microsoft SharePoint Server Subscription Edition", "pkg": "KB5002893", "status": "fixed", "fixed": "16.0.19725.20522", "cmd": "Install KB5002893 via Windows Update, then verify:\nGet-HotFix -Id KB5002893", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108767", "note": "KB5002893"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-34265", "publisher": "SAP SE", "title": "SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG pro", "summary": "SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00642, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:20.240", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34265"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50142, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19425", "publisher": "TWCERT/CC", "title": "Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability", "summary": "Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00644, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T05:17:14.680", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19425"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50284, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63294", "publisher": "Canonical Ltd.", "title": "A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system", "summary": "A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to process unconfined configuration metadata and execute a", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00878, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.187", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12", ">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "4.0.12, 5.0.8, 5.21.6, 6.10", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63294"}, {"t": "Third Party Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m"}, {"t": "Third Party Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.58679, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72550", "publisher": "TuranSec", "title": "An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attac", "summary": "An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a bare PDO::query() call, enabling stacked statement injection. An unauthenticated attacker can read, modify, or delete the entire database.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00608, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.607", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72550"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48448, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "abdugafforov-bobur/CVE-2026-72550-poc (0 stars)", "url": "https://github.com/abdugafforov-bobur/CVE-2026-72550-poc", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72599", "publisher": "TuranSec", "title": "An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL ", "summary": "An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents including administrator credentials.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00608, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.907", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72599"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48448, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17083", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buff", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00802, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:39.260", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17083"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283276"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56242, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63298", "publisher": "Canonical Ltd.", "title": "An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling a", "summary": "An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privi", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0069, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.713", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12", ">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and <= 6.9"], "fixed": "4.0.12, 5.0.8, 5.21.6", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63298"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-vfh7-q59q-54v2"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-vfh7-q59q-54v2"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.52239, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-vfh7-q59q-54v2", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-vfh7-q59q-54v2"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48160", "publisher": "GitHub, Inc.", "title": "react-tracked provides state usage tracking with Proxies", "summary": "react-tracked provides state usage tracking with Proxies. Between 2026-05-18 19:26:36 and 2026-05-19 15:22:45, the default branch contained malicious commits 6978272a7d6ca02225cb747ea69f427512e33699 through 949f1a3d6bb1ff7d1a0dec892afd773e742627e8 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00671, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:23.303", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48160"}], "cwe": ["CWE-506"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51454, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48381", "publisher": "Adobe Systems Incorporated", "title": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm", "summary": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00785, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:28.247", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "campaign", "vendor": "adobe", "type": "app", "affected": [">= 7.2.1 and < 7.4.4"], "fixed": "7.4.4", "safe": "before 7.2.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy campaign || rpm -q campaign || campaign --version"}, {"label": "2. UPGRADE to 7.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade campaign"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade campaign"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison campaign\nsudo apt install campaign=<VERSION_BEFORE_7.2.1>\nsudo apt-mark hold campaign"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list campaign\nsudo dnf downgrade campaign-<VERSION_BEFORE_7.2.1>\nsudo dnf versionlock add campaign"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48381"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/campaign/apsb26-123.html"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55638, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19001", "publisher": "MongoDB, Inc.", "title": "The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application s", "summary": "The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:37.307", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "bi connector odbc driver", "vendor": "mongodb", "type": "app", "affected": [">= 1.0.0 and < 1.4.9"], "fixed": "1.4.9", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-connector-odbc-driver || rpm -q bi-connector-odbc-driver || bi-connector-odbc-driver --version"}, {"label": "2. UPGRADE to 1.4.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bi-connector-odbc-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bi-connector-odbc-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-connector-odbc-driver\nsudo apt install bi-connector-odbc-driver=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold bi-connector-odbc-driver"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-connector-odbc-driver\nsudo dnf downgrade bi-connector-odbc-driver-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add bi-connector-odbc-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19001"}, {"t": "Vendor Advisory, Release Notes", "u": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44574, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18749", "publisher": "CERT/CC", "title": "The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shar", "summary": "The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid \u2014 leaks not-yet-released coordinator material to vendors on the case.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00512, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:14.933", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18749"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42792, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59500", "publisher": "Israel National Cyber Directorate", "title": ": Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft ", "summary": ": Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00498, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.017", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59500"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41801, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13738", "publisher": "Commvault", "title": "CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operati", "summary": "CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations.  Software customers upgrade to resolved maintenance release.  Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00628, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:37.923", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "commvault", "vendor": "commvault", "type": "app", "affected": [">= 11.36.0 and < 11.36.114", ">= 11.40.0 and < 11.40.63", ">= 11.44.0 and < 11.44.11", ">= 11.46.0 and < 11.46.10"], "fixed": "11.36.114, 11.40.63, 11.44.11, 11.46.10", "safe": "before 11.36.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commvault || rpm -q commvault || commvault --version"}, {"label": "2. UPGRADE to 11.36.114 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commvault"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commvault"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.36.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commvault\nsudo apt install commvault=<VERSION_BEFORE_11.36.0>\nsudo apt-mark hold commvault"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commvault\nsudo dnf downgrade commvault-<VERSION_BEFORE_11.36.0>\nsudo dnf versionlock add commvault"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13738"}, {"t": "Vendor Advisory", "u": "https://documentation.commvault.com/securityadvisories/CV_2026_07_9.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49479, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18129", "publisher": "ivanti", "title": "Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7", "summary": "Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections.", "cvss": 8.1, "sev": "HIGH", "epss": 0.01455, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.327", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18129"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.73269, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63293", "publisher": "Canonical Ltd.", "title": "A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations o", "summary": "A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00592, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.060", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12"], "fixed": "4.0.12", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63293"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-j825-cg34-5fr5"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-j825-cg34-5fr5"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.47616, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-j825-cg34-5fr5", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-j825-cg34-5fr5"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63299", "publisher": "Canonical Ltd.", "title": "An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and vol", "summary": "An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before moving a volume across projects, and volume snapshot restore operations skip the AllowVolumeUpdate check when the configuration is nil (Config == nil). An ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00588, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.830", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "5.0.8, 5.21.6, 6.10", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63299"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-5h78-p252-989h"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.47423, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-5h78-p252-989h", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-5h78-p252-989h"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73414", "publisher": "GitHub, Inc.", "title": "Shescape is a simple shell escape library for JavaScript", "summary": "Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js does not escape `(` and `)` when applications use the escape or escapeAll APIs on Windows with shell set to cmd.exe, or with shell set to true when CMD is the default. An attacker-controlled argument can break out of a parenthesized CMD construct and inject shell syntax depending on the original command, resulting in a", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00889, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:56.510", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73414"}], "cwe": ["CWE-78", "CWE-150"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58977, "vendors": [{"os": "npm", "pkg": "shescape", "status": "fixed", "fixed": "2.1.14", "cmd": "npm install shescape@\">=2.1.14\"\nnpm ls shescape", "url": "https://github.com/advisories/GHSA-w4hw-qcx7-56pr", "note": "vulnerable: < 2.1.14"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-66898", "publisher": "Canonical Ltd.", "title": "A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import ", "summary": "A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00592, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:39.700", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12", ">= 5.0.0 and < 5.0.4", ">= 5.1 and < 5.21.2", "6.0"], "fixed": "4.0.12, 5.0.4, 5.21.2", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66898"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.47617, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49481", "publisher": "GitHub, Inc.", "title": "UpSnap is a wake on lan web app", "summary": "UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap\u2019s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-controlled values can be inserted into the wake_cmd and shutdown_cmd templates and executed via /bin/sh -c (Linux) or cmd /C (Windows) without sanitization, resulting in an authenticated Remote Cod", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.01483, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:21.363", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49481"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.73785, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-47717", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01375, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:20.643", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47717"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.71821, "vendors": [{"os": "npm", "pkg": "fuxa-server", "status": "fixed", "fixed": "1.3.1", "cmd": "npm install fuxa-server@\">=1.3.1\"\nnpm ls fuxa-server", "url": "https://github.com/advisories/GHSA-q3w6-q3hc-c5x6", "note": "vulnerable: = 1.3.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [{"kind": "nuclei", "name": "FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47717.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73501", "publisher": "GitHub, Inc.", "title": "kin-openapi is a Go project for handling OpenAPI files", "summary": "kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI security requirement to be satisfied for unauthenticated requests when an application relies on ValidationHandler as its enforcement middleware. The no-", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00426, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:17.443", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73501"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35852, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "golang-github-getkin-kin-openapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "golang-github-getkin-kin-openapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "go-fdo-server", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana-pcp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "osbuild-composer", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13716", "publisher": "GitLab Inc.", "title": "Path traversal in server import and admin file upload in Crafty Controller", "summary": "Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00802, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:12.870", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "crafty controller", "vendor": "craftycontrol", "type": "app", "affected": [">= 4.4.0 and < 4.10.8"], "fixed": "4.10.8", "safe": "before 4.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy crafty-controller || rpm -q crafty-controller || crafty-controller --version"}, {"label": "2. UPGRADE to 4.10.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade crafty-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade crafty-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison crafty-controller\nsudo apt install crafty-controller=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold crafty-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list crafty-controller\nsudo dnf downgrade crafty-controller-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add crafty-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13716"}, {"t": "Exploit, Vendor Advisory", "u": "https://gitlab.com/crafty-controller/crafty-4/-/work_items/727"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/crafty-controller/crafty-4/-/work_items/740"}, {"t": "Exploit, Vendor Advisory", "u": "https://gitlab.com/crafty-controller/crafty-4/-/work_items/727"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.56212, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gitlab.com/crafty-controller/crafty-4/-/work_items/727", "url": "https://gitlab.com/crafty-controller/crafty-4/-/work_items/727"}, {"kind": "writeup", "name": "gitlab.com/crafty-controller/crafty-4/-/work_items/740", "url": "https://gitlab.com/crafty-controller/crafty-4/-/work_items/740"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59133", "publisher": "Microsoft Corporation", "title": "Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized ", "summary": "Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00913, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:07.610", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows app", "vendor": "microsoft", "type": "app", "affected": ["< 2.0.1193.0"], "fixed": "2.0.1193.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy windows-app || rpm -q windows-app || windows-app --version"}, {"label": "2. UPGRADE to 2.0.1193.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade windows-app"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade windows-app"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59133"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59133"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.59735, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65768", "publisher": "Microsoft Corporation", "title": "Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android ", "summary": "Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00939, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:56.117", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["< 1.0.0.2026133602"], "fixed": "1.0.0.2026133602", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "2. UPGRADE to 1.0.0.2026133602 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade teams"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade teams"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65768"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65768"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.6056, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:12:48.430812+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65811", "publisher": "Microsoft Corporation", "title": "Improper input validation in Power BI allows an authorized attacker to execute code over a network.", "summary": "Improper input validation in Power BI allows an authorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00958, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:00.723", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "power bi report server", "vendor": "microsoft", "type": "app", "affected": ["< 15.0.1121.120"], "fixed": "15.0.1121.120", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy power-bi-report-server || rpm -q power-bi-report-server || power-bi-report-server --version"}, {"label": "2. UPGRADE to 15.0.1121.120 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade power-bi-report-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade power-bi-report-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65811"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65811"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.61144, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73298", "publisher": "GitHub, Inc.", "title": "The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-ag", "summary": "The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the Container Migration Solution Accelerator, specifically an authenticated IDOR (Insecure Direct Object Reference) that allows users to read, write, and delete", "cvss": 8.7, "sev": "HIGH", "epss": 0.00968, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:18:15.057", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73298"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.61498, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62420", "publisher": "Canonical Ltd.", "title": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project securit", "summary": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving an instance cross-project to a different cluster member via POST /1.0/instances/{name} with migration: true, project: <target>, and target: <member>, the destination node skips all project restriction checks because the request arrives as an internal cluster notification", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:46.897", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "5.0.8, 5.21.6, 6.10", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62420"}, {"t": "Patch", "u": "https://github.com/canonical/lxd/pull/18605"}, {"t": "Patch", "u": "https://github.com/canonical/lxd/pull/18651"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-v9wr-9r7q-fh4g"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-v9wr-9r7q-fh4g"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.44606, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-v9wr-9r7q-fh4g", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-v9wr-9r7q-fh4g"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63300", "publisher": "Canonical Ltd.", "title": "An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allo", "summary": "An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on a restricted project to bypass project-level security restrictions. When migrating an instance between projects, LXD fails to validate the instance's configuration against the target project's enforced restrictions (such as restricted.containers.lowlevel, restricted.dev", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00539, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.953", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "5.0.8, 5.21.6, 6.10", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63300"}, {"t": "Exploit, Patch", "u": "https://github.com/canonical/lxd/pull/18605"}, {"t": "Patch", "u": "https://github.com/canonical/lxd/pull/18651"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-5g5r-wh97-qcq2"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.44606, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-5g5r-wh97-qcq2", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-5g5r-wh97-qcq2"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73483", "publisher": "VulnCheck", "title": "Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@fl", "summary": "Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and args parameters to puppeteer.launch(), which internally invokes child_process.spawn() outside the sandbox boundary. This allows execution of arbitrary ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00621, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:23.540", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.2"], "fixed": "newer than 3.1.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73483"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact"], "fix": true, "watched": false, "epss_pct": 0.4916, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-9gvv-qjj3-2p6g", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-9gvv-qjj3-2p6g", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48046", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote code execution. Version 2.5.0 contains a patch.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00355, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:14.020", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48046"}], "cwe": ["CWE-494"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28043, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-vj74-r9xm-37mj", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-vj74-r9xm-37mj"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48161", "publisher": "GitHub, Inc.", "title": "react18-use is a React 19 use hook shim", "summary": "react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` ag", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00671, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T23:16:51.343", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48161"}], "cwe": ["CWE-506"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51454, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13737", "publisher": "Commvault", "title": "CommServe contained an allowlist bypass vulnerability affecting command execution authorization", "summary": "CommServe contained an allowlist bypass vulnerability affecting command execution authorization.  Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:37.180", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "commvault", "vendor": "commvault", "type": "app", "affected": [">= 11.36.0 and < 11.36.114", ">= 11.40.0 and < 11.40.63", ">= 11.44.0 and < 11.44.11", ">= 11.46.0 and < 11.46.10"], "fixed": "11.36.114, 11.40.63, 11.44.11, 11.46.10", "safe": "before 11.36.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commvault || rpm -q commvault || commvault --version"}, {"label": "2. UPGRADE to 11.36.114 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commvault"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commvault"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.36.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commvault\nsudo apt install commvault=<VERSION_BEFORE_11.36.0>\nsudo apt-mark hold commvault"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commvault\nsudo dnf downgrade commvault-<VERSION_BEFORE_11.36.0>\nsudo dnf versionlock add commvault"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13737"}, {"t": "Vendor Advisory", "u": "https://documentation.commvault.com/securityadvisories/CV_2026_07_8.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43492, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18125", "publisher": "ivanti", "title": "An out-of-bounds\u00a0read in\u00a0the\u00a0Agent of\u00a0Ivanti Endpoint Manager\u00a0before\u00a0version 2024 SU7\u00a0allows a\u00a0remote unauthen", "summary": "An out-of-bounds\u00a0read in\u00a0the\u00a0Agent of\u00a0Ivanti Endpoint Manager\u00a0before\u00a0version 2024 SU7\u00a0allows a\u00a0remote unauthenticated\u00a0attacker to\u00a0crash an agent service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01595, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.053", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18125"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.75545, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-57104", "publisher": "Microsoft Corporation", "title": "Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00863, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:04.610", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure storage explorer", "vendor": "microsoft", "type": "app", "affected": ["< 1.45.0"], "fixed": "1.45.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-storage-explorer || rpm -q azure-storage-explorer || azure-storage-explorer --version"}, {"label": "2. UPGRADE to 1.45.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade azure-storage-explorer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade azure-storage-explorer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57104"}, {"t": "Vendor Advisory, Release Notes", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57104"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58219, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62785", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized atta", "summary": "Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00819, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:32.103", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9418"], "fixed": "10.0.14393.9418", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9115"], "fixed": "10.0.17763.9115", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7663"], "fixed": "10.0.19044.7663", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7663"], "fixed": "10.0.19045.7663", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7517"], "fixed": "10.0.22631.7517", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9106"], "fixed": "10.0.26100.9106", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62785"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62785"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56792, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2019", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2022", "pkg": "KB5120242", "status": "fixed", "fixed": "10.0.20348.5499", "cmd": "Install KB5120242 via Windows Update, then verify:\nGet-HotFix -Id KB5120242", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242", "note": "KB5120242"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62795", "publisher": "Microsoft Corporation", "title": "Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to exec", "summary": "Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00819, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:33.390", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9418"], "fixed": "10.0.14393.9418", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9115"], "fixed": "10.0.17763.9115", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7663"], "fixed": "10.0.19044.7663", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7663"], "fixed": "10.0.19045.7663", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7517"], "fixed": "10.0.22631.7517", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9106"], "fixed": "10.0.26100.9106", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62795"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62795"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5679, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2019", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5120238", "status": "fixed", "fixed": "10.0.17763.9121", "cmd": "Install KB5120238 via Windows Update, then verify:\nGet-HotFix -Id KB5120238", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238", "note": "KB5120238"}, {"os": "Windows Server 2022", "pkg": "KB5120242", "status": "fixed", "fixed": "10.0.20348.5499", "cmd": "Install KB5120242 via Windows Update, then verify:\nGet-HotFix -Id KB5120242", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242", "note": "KB5120242"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69320", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Co", "summary": "Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00863, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:07.127", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69320"}, {"t": "Release Notes, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69320"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58219, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70326", "publisher": "Microsoft Corporation", "title": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri", "summary": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00778, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:10.393", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "sharepoint server", "vendor": "microsoft", "type": "app", "affected": ["< 16.0.19725.20522"], "fixed": "16.0.19725.20522", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sharepoint-server || rpm -q sharepoint-server || sharepoint-server --version"}, {"label": "2. UPGRADE to 16.0.19725.20522 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sharepoint-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sharepoint-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70326"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70326"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55413, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Microsoft SharePoint Server Subscription Edition", "pkg": "KB5002893", "status": "fixed", "fixed": "16.0.19725.20522", "cmd": "Install KB5002893 via Windows Update, then verify:\nGet-HotFix -Id KB5002893", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108767", "note": "KB5002893"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70336", "publisher": "Microsoft Corporation", "title": "Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacke", "summary": "Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00817, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:11.277", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70336"}, {"t": "Release Notes, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70336"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56724, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71962", "publisher": "VulnCheck", "title": "Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-", "summary": "Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's inclusion in the global authentication whitelist, which bypasses all session and API key verification. Attackers can supply valid chatflowId, chatId, and fileName identifiers to retrieve files from any chatflow on t", "cvss": 7.5, "sev": "HIGH", "epss": 0.00683, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:31.400", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": [">= 2.2.4 and <= 3.1.4"], "fixed": "newer than 3.1.4", "safe": "before 2.2.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.2.4 (Debian / Ubuntu)", "cmd": "apt-cache madison flowise\nsudo apt install flowise=<VERSION_BEFORE_2.2.4>\nsudo apt-mark hold flowise"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list flowise\nsudo dnf downgrade flowise-<VERSION_BEFORE_2.2.4>\nsudo dnf versionlock add flowise"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71962"}, {"t": "Exploit, Mitigation", "u": "https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649?utm_source=chatgpt.com"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51988, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649?utm_source=chatgpt.com", "url": "https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649?utm_source=chatgpt.com"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72765", "publisher": "VulnCheck", "title": "n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation", "summary": "n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00861, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.670", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": [">= 2.31.0 and < 2.31.5", "2.32.0"], "fixed": "2.31.5", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.31.5", "cmd": "npm install n8n@\">=2.31.5\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72765"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-gv7g-jm28-cr3m"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.58163, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59113", "publisher": "Microsoft Corporation", "title": "Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.", "summary": "Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00758, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:05.690", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59113"}, {"t": "Release Notes, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59113"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54731, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63296", "publisher": "Canonical Ltd.", "title": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restric", "summary": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypass", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00444, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.437", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "5.0.8, 5.21.6, 6.10", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63296"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.37663, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72508", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RH", "summary": "A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating Subscription Custom Resources (CRs) that leverage a highly privileged ServiceAccount (SA). This enables the tenant to deploy arbitrary cluster-scoped resources, leading to privilege escalation and potential arbitrary code execution acr", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0081, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:49.650", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72508"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.56497, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73268", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the cluster-curator-controller component of multicluster engine (MCE)", "summary": "A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob() function does not validate user-controlled input when unmarshaling the spec.install.overrideJob raw extension. Successful exploitation allows the injected Job to run with the controller's elevated privile", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00875, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:53.650", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73268"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.58593, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71471", "publisher": "Red Hat, Inc.", "title": "A flaw was found in acm-search-v2-rhel9", "summary": "A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This allows the attacker to deploy an arbitrary container image across all managed clusters. The consequence is remote code execution (RCE), enabling the attacker to execute commands and potentially access sen", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.01217, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:15.890", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71471"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.68403, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73500", "publisher": "GitHub, Inc.", "title": "etcd is a distributed key-value store for the data of a distributed system", "summary": "etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listener_tls.go, each connection handled by tlsListener.acceptLoop spawns a goroutine that blocks indefinitely inside tls.Conn.Handshake() and remains tracked in the pending map. Unbounded go", "cvss": 8.7, "sev": "HIGH", "epss": 0.00697, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:17.290", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73500"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52513, "vendors": [{"os": "Go", "pkg": "go.etcd.io/etcd/v3", "status": "fixed", "fixed": "3.7.1", "cmd": "go get go.etcd.io/etcd/v3@v3.7.1\ngo list -m go.etcd.io/etcd/v3", "url": "https://github.com/advisories/GHSA-6vch-q96h-7gc3", "note": "vulnerable: >= 3.7.0-alpha.0, < 3.7.1"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "etcd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "etcd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72789", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publi", "summary": "SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00504, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.270", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72789"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42202, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260726020813-a25c2dd06aae", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260726020813-a25c2dd06aae\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-v684-q882-jgmq", "note": "vulnerable: < 0.0.0-20260726020813-a25c2dd06aae"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-v684-q882-jgmq", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v684-q882-jgmq"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59503", "publisher": "Israel National Cyber Directorate", "title": ": Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an ", "summary": ": Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00427, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.380", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59503"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35905, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72911", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.29.0, the validate_template and render_template calls in erpnext/accounts/doctype/process_statement_of_accounts/process_statement_of_accounts.py render subject, body, and pdf_name fields with unrestricted globals including frappe.utils, allowing an authenticated user with a common operational role to inject template expressions, execute arbitrary server-", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00717, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.993", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72911"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.53283, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65767", "publisher": "Microsoft Corporation", "title": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for An", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00612, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:55.997", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["< 1.0.76.202611302"], "fixed": "1.0.76.202611302", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "2. UPGRADE to 1.0.76.202611302 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade teams"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade teams"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65767"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65767"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48674, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16860", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an u", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00746, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.397", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16860"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283282"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.54351, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73069", "publisher": "GitHub, Inc.", "title": "Twenty is an open-source CRM (customer relationship management) platform", "summary": "Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.15.0, Twenty allowed a workspace administrator with the DATA_MODEL permission to supply settings.asExpression for the system TS_VECTOR field searchVector through PATCH /rest/metadata/fields/:id or the updateOneField GraphQL mutation, causing buildSqlColumnDefinition in packages/twenty-server/src/engine/twenty-orm/workspace-schema-manager/utils/build-sql-column-de", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00655, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:38.090", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73069"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50768, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/twentyhq/twenty/security/advisories/GHSA-mm7j-q9q3-qqwj", "url": "https://github.com/twentyhq/twenty/security/advisories/GHSA-mm7j-q9q3-qqwj"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-47705", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later executed when an administrator opens the exported CSV in spreadsheet software such as Microsoft Excel or LibreOffice Calc. Version 3.17.0 patches the issue.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00558, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:27.123", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47705"}], "cwe": ["CWE-1236"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45749, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13739", "publisher": "Commvault", "title": "A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerabil", "summary": "A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs.  Software customers upgrade to resolved maintenance release.  Update Command Center.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0039, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.047", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "commvault", "vendor": "commvault", "type": "app", "affected": [">= 11.36.0 and < 11.36.114", ">= 11.40.0 and < 11.40.63", ">= 11.44.0 and < 11.44.11", ">= 11.46.0 and < 11.46.10"], "fixed": "11.36.114, 11.40.63, 11.44.11, 11.46.10", "safe": "before 11.36.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commvault || rpm -q commvault || commvault --version"}, {"label": "2. UPGRADE to 11.36.114 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commvault"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commvault"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.36.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commvault\nsudo apt install commvault=<VERSION_BEFORE_11.36.0>\nsudo apt-mark hold commvault"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commvault\nsudo dnf downgrade commvault-<VERSION_BEFORE_11.36.0>\nsudo dnf versionlock add commvault"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13739"}, {"t": "Vendor Advisory", "u": "https://documentation.commvault.com/securityadvisories/CV_2026_07_5.html"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3196, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-72535", "publisher": "TuranSec", "title": "A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attacke", "summary": "A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or authorization checks before creating a customer portal session linked to any tenant Stripe account. An attacker can access and manage subscription data for any tenant without credentials.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.733", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72535"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46622, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72536", "publisher": "TuranSec", "title": "A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attacke", "summary": "A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIntent GraphQL mutation. The mutation lacks authentication and authorization checks, exposing Stripe payment intent creation to unauthenticated callers. An attacker can create payment intents and alter billing for any tenant without credentials.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.857", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72536"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46621, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72551", "publisher": "TuranSec", "title": "A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role ", "summary": "A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system(), enabling a developer to escape the sandbox and gain OS command execution on the server. An attacker with a Developer-role account can achieve full server compromise.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01012, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.733", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72551"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.62881, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72556", "publisher": "TuranSec", "title": "A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS comman", "summary": "A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit() and canDelete() methods invoke nonexistent methods on the ZM\\User class, causing PHP __call() to return a truthy value that bypasses the permission check for all users. Any authenticated user can trigger filter-based OS command execution regardless of their assi", "cvss": 8.8, "sev": "HIGH", "epss": 0.01012, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.377", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72556"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.6288, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70340", "publisher": "Microsoft Corporation", "title": "Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.", "summary": "Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00798, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:11.640", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure cyclecloud", "vendor": "microsoft", "type": "app", "affected": ["< 8.9.1"], "fixed": "8.9.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-cyclecloud || rpm -q azure-cyclecloud || azure-cyclecloud --version"}, {"label": "2. UPGRADE to 8.9.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade azure-cyclecloud"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade azure-cyclecloud"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70340"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70340"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56093, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73413", "publisher": "GitHub, Inc.", "title": "Shescape is a simple shell escape library for JavaScript", "summary": "Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size across the escape, escapeAll, quote, and quoteAll APIs. An attacker who can supply a large untrusted input containing many flag fragments can consume CPU ", "cvss": 8.7, "sev": "HIGH", "epss": 0.0059, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:56.350", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73413"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47513, "vendors": [{"os": "npm", "pkg": "shescape", "status": "fixed", "fixed": "2.1.14", "cmd": "npm install shescape@\">=2.1.14\"\nnpm ls shescape", "url": "https://github.com/advisories/GHSA-gm3r-q2wp-hw87", "note": "vulnerable: >= 2.1.11, < 2.1.14"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72922", "publisher": "GitHub, Inc.", "title": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intellig", "summary": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogpt_platform/backend/backend/api/features/integrations/router.py webhook_ingress_generic route selected get_webhook_manager(provider) from the untrusted provider URL segment without verifying webhook.provider, allowing a request to /compass/webhooks/{webhook_id}/ingress to use CompassWebhookMana", "cvss": 8.2, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:38.350", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72922"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40203, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-349p-3c3r-8mjr", "url": "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-349p-3c3r-8mjr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72793", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint,", "summary": "SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing anonymous or publish-reader users to obtain the session-cookie signing key, OS username via pandoc path, and encrypted-notebook key material. Attackers can forge and tamper with session cookies to impersonate users, and on instances without access-auth codes configured, escalate to administrator privileges.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.837", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72793"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34081, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260725132049-2d8b98395a91", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260725132049-2d8b98395a91\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-h4v5-crx2-3cv4", "note": "vulnerable: < 0.0.0-20260725132049-2d8b98395a91"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-h4v5-crx2-3cv4", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h4v5-crx2-3cv4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72794", "publisher": "VulnCheck", "title": "siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system/getConf endpoint t", "summary": "siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system/getConf endpoint to unauthenticated users in publish mode. Attackers can retrieve the CookieKey value and forge valid session cookies to impersonate users or gain administrative access.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00422, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.977", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72794"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35507, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260725123945-77421530be4a", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260725123945-77421530be4a\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-34fj-mwm6-fjfg", "note": "vulnerable: < 0.0.0-20260725123945-77421530be4a"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-34fj-mwm6-fjfg", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-34fj-mwm6-fjfg"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72795", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEm", "summary": "SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.137", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72795"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3408, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260725125659-1ca1c3c9d94b", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260725125659-1ca1c3c9d94b\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-h6w7-xxcf-w2mq", "note": "vulnerable: < 0.0.0-20260725125659-1ca1c3c9d94b"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-h6w7-xxcf-w2mq", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h6w7-xxcf-w2mq"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-44758", "publisher": "SAP SE", "title": "SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit special", "summary": "SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00768, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:20.670", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44758"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55091, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72538", "publisher": "TuranSec", "title": "An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve r", "summary": "An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This represents a distinct code path from the incomplete fix applied for CVE-2026-5366 and allows command execution on the Prefect server.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00977, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.100", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72538"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.61813, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:19:13.517033+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-47299", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent all", "summary": "Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.", "cvss": 7.2, "sev": "HIGH", "epss": 0.01008, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:17:59.100", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure monitor agent", "vendor": "microsoft", "type": "app", "affected": [">= 1.0.0 and < 1.43"], "fixed": "1.43", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-monitor-agent || rpm -q azure-monitor-agent || azure-monitor-agent --version"}, {"label": "2. UPGRADE to 1.43 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade azure-monitor-agent"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade azure-monitor-agent"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison azure-monitor-agent\nsudo apt install azure-monitor-agent=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold azure-monitor-agent"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list azure-monitor-agent\nsudo dnf downgrade azure-monitor-agent-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add azure-monitor-agent"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47299"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47299"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.62733, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48397", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitr", "summary": "Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00974, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:29.427", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48397"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.61722, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63297", "publisher": "Canonical Ltd.", "title": "An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authe", "summary": "An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies. When copying an instance to a target project, LXD performs restriction checks before configuration merging is complete, creating a time-of-check to time-of-use (TOCTOU) condition. An attacker can exploit this flaw to copy instances with disallowe", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00343, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.583", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.9"], "fixed": "5.0.8, 5.21.6, 6.9", "safe": "before 5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 5.0.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_5.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_5.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63297"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-v989-qw7w-xvg4"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-v989-qw7w-xvg4"}], "cwe": ["CWE-367", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.26655, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73269", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the cluster-curator-controller component", "summary": "A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to cluster-wide control. This privilege escalation grants broad permissions, including the ability to access and manipulate secrets, manage cluster actions, a", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00561, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:53.793", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73269"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.45976, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59504", "publisher": "Israel National Cyber Directorate", "title": ": Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority", "summary": ": Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00427, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.500", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59504"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35906, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59506", "publisher": "Israel National Cyber Directorate", "title": ": Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ER", "summary": ": Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00413, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.840", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59506"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3449, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-69118", "publisher": "VulnCheck", "title": "Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering th", "summary": "Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:32.310", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69118"}], "cwe": ["CWE-863", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.56357, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/cachethq/cachet/issues/4621", "url": "https://github.com/cachethq/cachet/issues/4621"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72602", "publisher": "TuranSec", "title": "A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remo", "summary": "A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolute filesystem path parameter and returns a directory listing without authentication, as WIKI_AUTH_MODE defaults to false. An attacker can enumerate sensitive directory contents on the host sys", "cvss": 7.5, "sev": "HIGH", "epss": 0.00743, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.267", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72602"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5423, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72764", "publisher": "VulnCheck", "title": "n8n's JavaScript task runner shared a single module cache across all users' Code-node executions", "summary": "n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting their confidentiality, integrity, or availability. This is a cross-user isolation break within a single n8n instance and does not constitute a sandbox", "cvss": 8.8, "sev": "HIGH", "epss": 0.00813, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.530", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72764"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-9cmh-xcqm-5hqr"}], "cwe": ["CWE-668"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.56595, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72767", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability", "summary": "n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings, executing arbitrary commands as the n8n process user. Both self-hosted and cloud instances are affected.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00879, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.940", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72767"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-rcv6-pvrj-4xcg"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.58704, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72778", "publisher": "VulnCheck", "title": "Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remo", "summary": "Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling. Craft cleanses the outer request-controlled condition array via Component::cleanseConfig(), but Conditions::createCondition() later decodes and merges the JSON string in condition.config without re-running cleanseConfig() on the decoded configuration. ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00803, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.207", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72778"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.56286, "vendors": [{"os": "Composer (PHP)", "pkg": "craftcms/cms", "status": "fixed", "fixed": "5.10.6", "cmd": "composer require \"craftcms/cms:>=5.10.6\"", "url": "https://github.com/advisories/GHSA-265m-7826-wjqm", "note": "vulnerable: >= 5.0.0-RC1, < 5.10.6"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "TRX-0/CVE-2026-72778-craftcms-rce (0 stars)", "url": "https://github.com/TRX-0/CVE-2026-72778-craftcms-rce", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72781", "publisher": "VulnCheck", "title": "Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 contain a remote code execution v", "summary": "Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe (via the AllowedInSandbox attribute) and the sandbox allowlisting extends to the entire class hierarchy (craft\\base\\Component up to yii\\base\\Component), an authenticated attacker with permission to access the control panel can render a malicious T", "cvss": 8.8, "sev": "HIGH", "epss": 0.00786, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.657", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72781"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55684, "vendors": [{"os": "Composer (PHP)", "pkg": "craftcms/cms", "status": "fixed", "fixed": "5.10.7", "cmd": "composer require \"craftcms/cms:>=5.10.7\"", "url": "https://github.com/advisories/GHSA-f5wm-88jv-g5hx", "note": "vulnerable: >= 5.0.0-RC1, < 5.10.7"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "TRX-0/CVE-2026-72781-craftcms-sandbox-rce (0 stars)", "url": "https://github.com/TRX-0/CVE-2026-72781-craftcms-sandbox-rce", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-57105", "publisher": "Microsoft Corporation", "title": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", "cvss": 8.0, "sev": "HIGH", "epss": 0.0062, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:04.740", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "sharepoint server", "vendor": "microsoft", "type": "app", "affected": ["< 16.0.19725.20522", "2019"], "fixed": "16.0.19725.20522", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sharepoint-server || rpm -q sharepoint-server || sharepoint-server --version"}, {"label": "2. UPGRADE to 16.0.19725.20522 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sharepoint-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sharepoint-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57105"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57105"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49052, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}, {"os": "Microsoft SharePoint Server 2019", "pkg": "KB5002894", "status": "fixed", "fixed": "16.0.10417.20198", "cmd": "Install KB5002894 via Windows Update, then verify:\nGet-HotFix -Id KB5002894", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108774", "note": "KB5002894"}, {"os": "Microsoft SharePoint Server 2019", "pkg": "KB5002896", "status": "fixed", "fixed": "16.0.10417.20198", "cmd": "Install KB5002896 via Windows Update, then verify:\nGet-HotFix -Id KB5002896", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108773", "note": "KB5002896"}, {"os": "Microsoft SharePoint Server Subscription Edition", "pkg": "KB5002893", "status": "fixed", "fixed": "16.0.19725.20522", "cmd": "Install KB5002893 via Windows Update, then verify:\nGet-HotFix -Id KB5002893", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108767", "note": "KB5002893"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62869", "publisher": "Microsoft Corporation", "title": "Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoo", "summary": "Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:37.720", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "entra id", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy entra-id || rpm -q entra-id || entra-id --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62869"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62869"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.37491, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69306", "publisher": "Microsoft Corporation", "title": "Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a securi", "summary": "Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00541, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:07.000", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69306"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69306"}], "cwe": ["CWE-636"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.44757, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-16906", "publisher": "IBM Corporation", "title": "IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated pri", "summary": "IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00794, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.773", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.5", "7.6"], "fixed": null, "safe": "before 7.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.5 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.5>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.5>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16906"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283284"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55948, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17417", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00794, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:40.170", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17417"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283275"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55946, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17642", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00794, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:40.550", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17642"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283275"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.55947, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19656", "publisher": "Tenable Network Security, Inc.", "title": "ScadaLTS 2.7.8.1\u00a0exposes a server-side method that lacks authorization checks, allowing any authenticated user", "summary": "ScadaLTS 2.7.8.1\u00a0exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the context of the ScadaLTS server process (root), leading to full compromise of the underlying system.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.0052, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:42.933", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "scada-lts", "vendor": "scada-lts", "type": "app", "affected": ["2.7.8.1"], "fixed": null, "safe": "before 2.7.8.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scada-lts || rpm -q scada-lts || scada-lts --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.7.8.1 (Debian / Ubuntu)", "cmd": "apt-cache madison scada-lts\nsudo apt install scada-lts=<VERSION_BEFORE_2.7.8.1>\nsudo apt-mark hold scada-lts"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scada-lts\nsudo dnf downgrade scada-lts-<VERSION_BEFORE_2.7.8.1>\nsudo dnf versionlock add scada-lts"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19656"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43357, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71469", "publisher": "Red Hat, Inc.", "title": "A flaw was found in search-v2-api", "summary": "A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS).", "cvss": 7.5, "sev": "HIGH", "epss": 0.00737, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:15.760", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71469"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54006, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71193", "publisher": "MITRE", "title": "In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone", "summary": "In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an overlapping zone that conflicts with another tenant's zone. This enables cross-tenant DNS hijack (redirecting traffic to attacker-controlled IPs) and DNS ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00525, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:22.030", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71193"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.43683, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}, {"os": "Debian 12", "pkg": "designate", "status": "fixed", "fixed": "1:15.0.2-0+deb11u1", "cmd": "sudo apt update && sudo apt install --only-upgrade designate\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' designate)\" ge \"1:15.0.2-0+deb11u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "designate", "status": "fixed", "fixed": "1:20.0.0-2+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade designate\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' designate)\" ge \"1:20.0.0-2+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47702", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in the database as cleartext strings. An attacker who gains read access to the database (e.g., via SQL injection, backup exposure, or insider access) can extract all API tokens and impersonate any user without requiring a password or multi-factor authentication. Version 3.17.0 fixes the issue.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00299, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:30.560", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47702"}], "cwe": ["CWE-312"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21454, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73160", "publisher": "CIRCL", "title": "Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_eve", "summary": "Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints.\n\n\nThe URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domain names were accepted without resolving them first. An attacker could therefore use a hostname whose DNS record pointed to an internal address and caus", "cvss": 8.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T09:17:15.030", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73160"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33705, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17110", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obt", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00747, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:25.717", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17110"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54362, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18669", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00746, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:28.723", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18669"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283278"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.54351, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72798", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowin", "summary": "SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases to retrieve sensitive content, or bypass row filtering entirely when the first column is a non-block type.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00434, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.543", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72798"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36696, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260724121519-426991d155c0", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260724121519-426991d155c0\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-mfrj-v65r-979c", "note": "vulnerable: < 0.0.0-20260724121519-426991d155c0"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-mfrj-v65r-979c", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mfrj-v65r-979c"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-72804", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, ", "summary": "SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing anonymous readers to retrieve block-level content of password-protected documents. Attackers can call these endpoints without supplying a password to read protected document content and the complete reference topology.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.383", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72804"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36481, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260724091654-82e9ded423e4", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260724091654-82e9ded423e4\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-vpjw-wf5h-cgpq", "note": "vulnerable: < 0.0.0-20260724091654-82e9ded423e4"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19004", "publisher": "MongoDB, Inc.", "title": "An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing", "summary": "An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.", "cvss": 8.1, "sev": "HIGH", "epss": 0.005, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:37.577", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "bi connector odbc driver", "vendor": "mongodb", "type": "app", "affected": ["< 1.4.9"], "fixed": "1.4.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-connector-odbc-driver || rpm -q bi-connector-odbc-driver || bi-connector-odbc-driver --version"}, {"label": "2. UPGRADE to 1.4.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bi-connector-odbc-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bi-connector-odbc-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19004"}, {"t": "Release Notes, Vendor Advisory", "u": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41968, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17485", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive i", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00509, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:14.433", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17485"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282695"}], "cwe": ["CWE-125", "CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42584, "vendors": [{"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73493", "publisher": "GitHub, Inc.", "title": "Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services", "summary": "Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that completes a WebSocket handshake can send an unterminated fragmented message and drive unbounded heap growth in the server JVM, resulting in denial of service through OutOfMemoryError. Any http4s ", "cvss": 7.5, "sev": "HIGH", "epss": 0.0063, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.673", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73493"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49556, "vendors": [{"os": "Maven", "pkg": "org.http4s:http4s-blaze-server_2.13", "status": "fixed", "fixed": "0.23.18", "cmd": "Set org.http4s:http4s-blaze-server_2.13 to 0.23.18 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-7ppr-r889-mcf2", "note": "vulnerable: < 0.23.18"}, {"os": "Maven", "pkg": "org.http4s:http4s-blaze-server_2.12", "status": "fixed", "fixed": "0.23.18", "cmd": "Set org.http4s:http4s-blaze-server_2.12 to 0.23.18 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-7ppr-r889-mcf2", "note": "vulnerable: < 0.23.18"}, {"os": "Maven", "pkg": "org.http4s:http4s-blaze-server_3", "status": "fixed", "fixed": "1.0.0-M42", "cmd": "Set org.http4s:http4s-blaze-server_3 to 1.0.0-M42 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-7ppr-r889-mcf2", "note": "vulnerable: >= 1.0.0-M1, < 1.0.0-M42"}, {"os": "Fedora 46", "pkg": "fooyin", "status": "fixed", "fixed": "0.14.1-6.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a597ed324c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a597ed324c", "note": "FEDORA-2026-a597ed324c"}], "vendors_checked": "2026-10-23T19:22:11.387705+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-46382", "publisher": "GitHub, Inc.", "title": "The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms", "summary": "The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.090", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46382"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35419, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59499", "publisher": "Israel National Cyber Directorate", "title": ": Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon ", "summary": ": Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)..\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions).: All versions without Priwall v3.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:14.877", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59499"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34811, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59507", "publisher": "Israel National Cyber Directorate", "title": ": Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access", "summary": ": Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00335, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.963", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59507"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25727, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72543", "publisher": "TuranSec", "title": "An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticat", "summary": "An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks before returning the requested contact object. An attacker can enumerate and read all contact records including personally identifiable information witho", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.727", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72543"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4855, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72548", "publisher": "TuranSec", "title": "An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote ", "summary": "An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant Parse cloud function. The function accepts a contactId parameter and returns the full tenant record without authentication or authorization checks. An attacker can enumerate and disclose tenant configuration data for any organisation in the system.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00614, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.357", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72548"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48791, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72552", "publisher": "TuranSec", "title": "A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to", "summary": "A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint. The endpoint fetches any caller-supplied URL without applying a denylist or requiring authentication. An attacker can use this to scan internal services or exfiltrate data from cloud metadata endpoints.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.860", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72552"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48552, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72600", "publisher": "TuranSec", "title": "A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers t", "summary": "A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer PII via the /download router. The router is mounted without authentication middleware, making it publicly accessible. An attacker can enumerate MongoDB ObjectIds to download any invoice in the system without credentials.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.023", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72600"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48551, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72601", "publisher": "TuranSec", "title": "A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all for", "summary": "A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including personally identifiable information via the admin form-submission viewer. The viewer endpoint lacks an authentication check and the framework authentication helper fails open. An unauthenticated attacker can access all contact form submissions without credentials.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.143", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72601"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48551, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47285", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allo", "summary": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00922, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:17:58.970", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47285"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47285"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.59986, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65769", "publisher": "Microsoft Corporation", "title": "Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized at", "summary": "Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00922, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:56.240", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "teams", "vendor": "microsoft", "type": "app", "affected": ["< 8.8.1"], "fixed": "8.8.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy teams || rpm -q teams || teams --version"}, {"label": "2. UPGRADE to 8.8.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade teams"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade teams"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65769"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65769"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.59986, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66301", "publisher": "Microsoft Corporation", "title": "Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an a", "summary": "Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00995, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:01.277", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "dynamics 365", "vendor": "microsoft", "type": "app", "affected": [">= 9.1 and < 9.1.47.06"], "fixed": "9.1.47.06", "safe": "before 9.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dynamics-365 || rpm -q dynamics-365 || dynamics-365 --version"}, {"label": "2. UPGRADE to 9.1.47.06 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dynamics-365"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dynamics-365"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.1 (Debian / Ubuntu)", "cmd": "apt-cache madison dynamics-365\nsudo apt install dynamics-365=<VERSION_BEFORE_9.1>\nsudo apt-mark hold dynamics-365"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list dynamics-365\nsudo dnf downgrade dynamics-365-<VERSION_BEFORE_9.1>\nsudo dnf versionlock add dynamics-365"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66301"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66301"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.62337, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-16931", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handli", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:25.010", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16931"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283288"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45186, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17271", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper valida", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.557", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17271"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283276"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45182, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-17276", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to imprope", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00466, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.680", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17276"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.39352, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49467", "publisher": "GitHub, Inc.", "title": "Pingvin Share X is a secure and easy self-hosted file sharing platform", "summary": "Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when managing Time-based One-Time Password (TOTP) settings. The root cause is a missing `await` keyword on calls to the asynchronous `verifyPassword` method in `authTotp.service.ts` and the `authenticateUser` method in `auth.service.ts`. In JavaScript, an unawaited `Promise` is ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00617, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:30.637", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49467"}], "cwe": ["CWE-303", "CWE-304"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.48939, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67579", "publisher": "EEF", "title": "Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to injec", "summary": "Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer.\n\nRead actions with keyset pagination decode the client-supplied page[:after] or page[:before] cursor in decode_values/2 in lib/ash/page/keyset.ex using non_executable_binary_to_term/2 with [:safe]. Tha", "cvss": 7.4, "sev": "HIGH", "epss": 0.00611, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:48.440", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "ash framework", "vendor": "ash-hq", "type": "app", "affected": [">= 1.17.0 and < 3.31.3"], "fixed": "3.31.3", "safe": "before 1.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ash-framework || rpm -q ash-framework || ash-framework --version"}, {"label": "2. UPGRADE to 3.31.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ash-framework"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ash-framework"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison ash-framework\nsudo apt install ash-framework=<VERSION_BEFORE_1.17.0>\nsudo apt-mark hold ash-framework"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ash-framework\nsudo dnf downgrade ash-framework-<VERSION_BEFORE_1.17.0>\nsudo dnf versionlock add ash-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67579"}, {"t": "Third Party Advisory, Patch", "u": "https://cna.erlef.org/cves/CVE-2026-67579.html"}, {"t": "Patch", "u": "https://github.com/ash-project/ash/commit/91874dd5435bc0ffebd8a254acfa573b39b74520"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/ash-project/ash/security/advisories/GHSA-3gq3-9xm3-c8v3"}, {"t": "Third Party Advisory, Patch", "u": "https://osv.dev/vulnerability/EEF-CVE-2026-67579"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/ash-project/ash/security/advisories/GHSA-3gq3-9xm3-c8v3"}], "cwe": ["CWE-89", "CWE-502"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.4866, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/ash-project/ash/security/advisories/GHSA-3gq3-9xm3-c8v3", "url": "https://github.com/ash-project/ash/security/advisories/GHSA-3gq3-9xm3-c8v3"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-59505", "publisher": "Israel National Cyber Directorate", "title": ": Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft ", "summary": ": Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.623", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59505"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32401, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73484", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block nat", "summary": "Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:23.677", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73484"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.36759, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73030", "publisher": "VulnCheck", "title": "unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_dire", "summary": "unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives with symlink members or traversal sequences to write files to arbitrary filesystem locations accessible to the process.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00594, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:26.450", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73030"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.47721, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "unearth", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "unearth", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/frostming/unearth/issues/180", "url": "https://github.com/frostming/unearth/issues/180"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72801", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys throug", "summary": "SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline master-password cracking without rate limiting.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.973", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72801"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3408, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260724102025-3bc014c7dc32", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260724102025-3bc014c7dc32\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-8x84-r2ff-h8pq", "note": "vulnerable: < 0.0.0-20260724102025-3bc014c7dc32"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-8x84-r2ff-h8pq", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8x84-r2ff-h8pq"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19424", "publisher": "TWCERT/CC", "title": "Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability", "summary": "Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00514, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T03:17:36.157", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19424"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42989, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72533", "publisher": "TuranSec", "title": "An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged user", "summary": "An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before applying access controls, allowing crafted requests to be interpreted differently by the proxy and the authorization layer. Successful exploitation grants the", "cvss": 8.8, "sev": "HIGH", "epss": 0.00556, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.487", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72533"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.45634, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72545", "publisher": "TuranSec", "title": "An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticat", "summary": "An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target contact record. An attacker can corrupt or overwrite contact data for any user in the system without credentials.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00536, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.987", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72545"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44428, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72605", "publisher": "TuranSec", "title": "A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create ", "summary": "A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated account creation. An attacker can register an account and use it to access protected functionality on the server.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00536, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.623", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72605"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44428, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-56721", "publisher": "VulnCheck", "title": "CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object", "summary": "CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self", "cvss": 8.8, "sev": "HIGH", "epss": 0.00523, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:33.563", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56721"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43573, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-54981", "publisher": "Microsoft Corporation", "title": "Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an un", "summary": "Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00466, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:03.780", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "python", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy python || rpm -q python || python --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54981"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54981"}], "cwe": ["CWE-693", "CWE-829"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39463, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65675", "publisher": "Microsoft Corporation", "title": "No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a", "summary": "No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00637, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:55.427", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "github copilot chat", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy github-copilot-chat || rpm -q github-copilot-chat || github-copilot-chat --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65675"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65675"}], "cwe": ["CWE-862", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49935, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65806", "publisher": "Microsoft Corporation", "title": "Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network", "summary": "Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0084, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:00.310", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure cyclecloud", "vendor": "microsoft", "type": "app", "affected": ["< 8.9.2"], "fixed": "8.9.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-cyclecloud || rpm -q azure-cyclecloud || azure-cyclecloud --version"}, {"label": "2. UPGRADE to 8.9.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade azure-cyclecloud"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade azure-cyclecloud"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65806"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65806"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5747, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70335", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot a", "summary": "Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:11.153", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70335"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70335"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39071, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18713", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:28.967", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.2 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.2>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.2>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18713"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43664, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69106", "publisher": "JFrog", "title": "A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consu", "summary": "A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00519, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:18:11.273", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.146.28"], "fixed": "7.146.28", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.146.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69106"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4331, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17445", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:40.410", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17445"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283274"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34607, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-10543", "publisher": "IBM Corporation", "title": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a speciall", "summary": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00393, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:34.360", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10543"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282949"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32366, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-16033", "publisher": "Canonical Ltd.", "title": "A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained ", "summary": "A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory (specifically affecting virtual machine / QEMU driver execution paths). An attacker can exploit this flaw by providing a crafted image archive with malicious template direct", "cvss": 8.5, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.880", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12", ">= 5.0.0 and < 5.0.7"], "fixed": "4.0.12, 5.0.7", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16033"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-9hcm-hxh5-7xxh"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-9hcm-hxh5-7xxh"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.27612, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lxd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/canonical/lxd/security/advisories/GHSA-9hcm-hxh5-7xxh", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-9hcm-hxh5-7xxh"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19002", "publisher": "MongoDB, Inc.", "title": "A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Drive", "summary": "A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain c", "cvss": 8.1, "sev": "HIGH", "epss": 0.00404, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:37.440", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "bi connector odbc driver", "vendor": "mongodb", "type": "app", "affected": [">= 1.0.0 and < 1.4.9"], "fixed": "1.4.9", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-connector-odbc-driver || rpm -q bi-connector-odbc-driver || bi-connector-odbc-driver --version"}, {"label": "2. UPGRADE to 1.4.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bi-connector-odbc-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bi-connector-odbc-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-connector-odbc-driver\nsudo apt install bi-connector-odbc-driver=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold bi-connector-odbc-driver"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-connector-odbc-driver\nsudo dnf downgrade bi-connector-odbc-driver-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add bi-connector-odbc-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19002"}, {"t": "Vendor Advisory, Release Notes", "u": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33473, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72903", "publisher": "GitHub, Inc.", "title": "Tabby (formerly Terminus) is a highly configurable terminal emulator", "summary": "Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In tabby-ssh/src/session/sftp.ts, SFTPSession.readdir() and _makeFile() use POSIX path processing that preserves the backslashes as ordinary filename characters. In tabby-ssh/src/components/sftpPanel.component.ts, downloadFolderRecursive() propagates item.name into the local ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00492, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:24.980", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72903"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.41424, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Eugeny/tabby/security/advisories/GHSA-59p9-8gwf-v9v7", "url": "https://github.com/Eugeny/tabby/security/advisories/GHSA-59p9-8gwf-v9v7"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71965", "publisher": "VulnCheck", "title": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in th", "summary": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public key retrieval process to write an attacker-controlled public key directly to /root/.ssh/authorized_keys, granting persistent root access to the host syste", "cvss": 8.8, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:32.580", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71965"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39986, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/", "url": "https://themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-11810", "publisher": "Zephyr Project", "title": "The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updateh", "summary": "The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update server into a fixed two-level nested-array struct. After parsing it validates only the outer array length (objects_len != 2) and then dereferences objects[1].objects[0].objects.sha256sum via strlen() without checking that the inner object array of element [1] is non-empty.\n\nThe metadat", "cvss": 7.5, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:19.223", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11810"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39514, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:49:27.273077+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72557", "publisher": "TuranSec", "title": "An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of a", "summary": "An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The allowed_uploads configuration defaults to wildcard (*) and uploaded files are stored in a web-accessible directory. An attacker with any authenticated account can upload a PHP webshell and execute arbitrary OS commands on the server.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00479, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.547", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72557"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40429, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72606", "publisher": "TuranSec", "title": "A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to", "summary": "A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get() without host or IP validation, and ALLOW_NEW_REGISTRATIONS defaults to true enabling anonymous triggering. An attacker can reach internal services or cloud metadata ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00481, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.743", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72606"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40532, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72750", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled expression data directly in a raw SQL query, that data is not parameterized, allowing SQL injection. The fix adds an optional 'Query Parameters' field to bind values via positional placeholder", "cvss": 8.8, "sev": "HIGH", "epss": 0.00471, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.097", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72750"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-652q-gvq3-74qv"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39829, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72762", "publisher": "VulnCheck", "title": "n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Ima", "summary": "n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to write arbitrary files outside the node's working directory on the n8n instance.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00476, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.230", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72762"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-xmc9-4f2h-jf9c"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40155, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72766", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the", "summary": "n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be interpreted by the underlying mail library (Nodemailer) as a file path or URL, allowing arbitrary local file disclosure and server-side request forgery (SSRF).", "cvss": 7.5, "sev": "HIGH", "epss": 0.00444, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.807", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72766"}, {"t": "Vendor Advisory, Mitigation", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-2x35-3fw4-9jr4"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37639, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72775", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, wh", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential's privileges, allowing full read and write access.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00471, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.040", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.31.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72775"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-jqwr-vx3p-r266"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39828, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-16856", "publisher": "IBM Corporation", "title": "IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of ", "summary": "IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.277", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.5", "7.6"], "fixed": null, "safe": "before 7.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.5 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.5>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.5>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16856"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283284"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42176, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12004", "publisher": "IBM Corporation", "title": "IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Ve", "summary": "IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and information disclosure by crafting a malicious HTTP request.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00494, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:33.530", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "security verify access", "vendor": "ibm", "type": "app", "affected": [">= 10.0.0 and <= 10.0.9.2", "10.0.9.2 interim_fix1"], "fixed": "newer than 10.0.9.2", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy security-verify-access || rpm -q security-verify-access || security-verify-access --version"}, {"label": "2. UPGRADE to newer than 10.0.9.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade security-verify-access"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade security-verify-access"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison security-verify-access\nsudo apt install security-verify-access=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold security-verify-access"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list security-verify-access\nsudo dnf downgrade security-verify-access-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add security-verify-access"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "verify identity access", "vendor": "ibm", "type": "app", "affected": [">= 11.0 and <= 11.0.3"], "fixed": "newer than 11.0.3", "safe": "before 11.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy verify-identity-access || rpm -q verify-identity-access || verify-identity-access --version"}, {"label": "2. UPGRADE to newer than 11.0.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade verify-identity-access"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade verify-identity-access"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.0 (Debian / Ubuntu)", "cmd": "apt-cache madison verify-identity-access\nsudo apt install verify-identity-access=<VERSION_BEFORE_11.0>\nsudo apt-mark hold verify-identity-access"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list verify-identity-access\nsudo dnf downgrade verify-identity-access-<VERSION_BEFORE_11.0>\nsudo dnf versionlock add verify-identity-access"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "verify identity access container", "vendor": "ibm", "type": "app", "affected": [">= 11.0.0.0 and <= 11.0.3.0"], "fixed": "newer than 11.0.3.0", "safe": "before 11.0.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy verify-identity-access-container || rpm -q verify-identity-access-container || verify-identity-access-container --version"}, {"label": "2. UPGRADE to newer than 11.0.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade verify-identity-access-container"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade verify-identity-access-container"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison verify-identity-access-container\nsudo apt install verify-identity-access-container=<VERSION_BEFORE_11.0.0.0>\nsudo apt-mark hold verify-identity-access-container"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list verify-identity-access-container\nsudo dnf downgrade verify-identity-access-container-<VERSION_BEFORE_11.0.0.0>\nsudo dnf versionlock add verify-identity-access-container"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12004"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283079"}], "cwe": ["CWE-134"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41563, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-13361", "publisher": "IBM Corporation", "title": "IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.", "summary": "IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0049, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:34.857", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "informix dynamic server", "vendor": "ibm", "type": "app", "affected": [">= 15.0 and < 15.0.1.14", "12.10", "14.10"], "fixed": "15.0.1.14", "safe": "before 12.10", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy informix-dynamic-server || rpm -q informix-dynamic-server || informix-dynamic-server --version"}, {"label": "2. UPGRADE to 15.0.1.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade informix-dynamic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade informix-dynamic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.10 (Debian / Ubuntu)", "cmd": "apt-cache madison informix-dynamic-server\nsudo apt install informix-dynamic-server=<VERSION_BEFORE_12.10>\nsudo apt-mark hold informix-dynamic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list informix-dynamic-server\nsudo dnf downgrade informix-dynamic-server-<VERSION_BEFORE_12.10>\nsudo dnf versionlock add informix-dynamic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13361"}, {"t": "Patch, Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283143"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41242, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17082", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to im", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00498, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:39.130", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17082"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283276"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41778, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13105", "publisher": "IBM Corporation", "title": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when i", "summary": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00499, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.027", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i access client solutions", "vendor": "ibm", "type": "app", "affected": [">= 1.1.2 and < 1.1.9.14"], "fixed": "1.1.9.14", "safe": "before 1.1.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i-access-client-solutions || rpm -q i-access-client-solutions || i-access-client-solutions --version"}, {"label": "2. UPGRADE to 1.1.9.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i-access-client-solutions"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i-access-client-solutions"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i-access-client-solutions\nsudo apt install i-access-client-solutions=<VERSION_BEFORE_1.1.2>\nsudo apt-mark hold i-access-client-solutions"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i-access-client-solutions\nsudo dnf downgrade i-access-client-solutions-<VERSION_BEFORE_1.1.2>\nsudo dnf versionlock add i-access-client-solutions"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13105"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282954"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41899, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73495", "publisher": "GitHub, Inc.", "title": "blaze is a Scala library for building asynchronous pipelines, with a focus on network IO", "summary": "blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and 1.0.0-M42, blaze-server can merge HTTP/1.1 chunked-body trailer fields into Request.headers. Because trailer fields are attacker-controlled, an unauthenticated remote client can inject arbitrary header names and values, including X-Forwarded-For and internal authorization headers, that a fronting proxy sanitized from the request-header s", "cvss": 7.4, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.820", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73495"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40463, "vendors": [{"os": "Maven", "pkg": "org.http4s:blaze-http_2.13", "status": "fixed", "fixed": "0.23.18", "cmd": "Set org.http4s:blaze-http_2.13 to 0.23.18 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-46q4-43ph-c6fr", "note": "vulnerable: <= 0.23.17"}, {"os": "Maven", "pkg": "org.http4s:blaze-http_2.12", "status": "fixed", "fixed": "0.23.18", "cmd": "Set org.http4s:blaze-http_2.12 to 0.23.18 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-46q4-43ph-c6fr", "note": "vulnerable: <= 0.23.17"}, {"os": "Maven", "pkg": "org.http4s:blaze-http_3", "status": "fixed", "fixed": "0.23.18", "cmd": "Set org.http4s:blaze-http_3 to 0.23.18 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-46q4-43ph-c6fr", "note": "vulnerable: <= 0.23.17"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49473", "publisher": "GitHub, Inc.", "title": "@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar author", "summary": "@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issue where, under certain circumstances, the middleware matches incoming requests against Cedar action mappings using req.originalUrl, which includes the qu", "cvss": 8.8, "sev": "HIGH", "epss": 0.00469, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.587", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49473"}], "cwe": ["CWE-436", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39675, "vendors": [{"os": "npm", "pkg": "@cedar-policy/authorization-for-expressjs", "status": "fixed", "fixed": "0.3.0", "cmd": "npm install @cedar-policy/authorization-for-expressjs@\">=0.3.0\"\nnpm ls @cedar-policy/authorization-for-expressjs", "url": "https://github.com/advisories/GHSA-g4w6-vmgf-xqvx", "note": "vulnerable: <= 0.2.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-51583", "publisher": "MITRE", "title": "An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request For", "summary": "An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00399, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:14.323", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51583"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.3301, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/seiyaibuki0523/d8af15eb555808319a2633269a9ebb80", "url": "https://gist.github.com/seiyaibuki0523/d8af15eb555808319a2633269a9ebb80"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58243", "publisher": "SAP SE", "title": "SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing", "summary": "SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00442, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.160", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58243"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3742, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72534", "publisher": "TuranSec", "title": "A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with ", "summary": "A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adopts any existing group by name and replaces its membership without validating the source scope against the target group. An attacker can grant their provi", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.610", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72534"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34989, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72558", "publisher": "TuranSec", "title": "An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff to read the entire da", "summary": "An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff to read the entire database via the contact search RLIKE clause. The clause concatenates a user-supplied value into the SQL query without sanitization. An attacker with staff-level access can exfiltrate all database contents including donor and member records.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.697", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72558"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36188, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72561", "publisher": "TuranSec", "title": "A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authentic", "summary": "A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before applying new OIDC issuer settings. An attacker can redirect all SSO logins to an attacker-controlled identity provider, enabling credential harvesting for al", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.073", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72561"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34974, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72562", "publisher": "TuranSec", "title": "An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated bac", "summary": "An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause without parameterization. An attacker with backend access can exfiltrate or modify all database contents.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.190", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72562"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36188, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18972", "publisher": "Rapid7, Inc.", "title": "An authenticated attacker can spoof another GUI user's identity by sending their request with the custom heade", "summary": "An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \\\"Grpc-Metadata-USER\\\". This can lead to an account takeover attack from a user with low privileges to administrator.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.0035, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:17:56.997", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18972"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.27419, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72772", "publisher": "VulnCheck", "title": "n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login fea", "summary": "n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's permitted role ceiling covered that account. As a result, anyone able to obtain a token accepted by a configured trusted key (for example, a trusted issuer e", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.623", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 2.31.5", "2.32.0"], "fixed": "2.31.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.31.5", "cmd": "npm install n8n@\">=2.31.5\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72772"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-8342-988q-86cr"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3792, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18127", "publisher": "ivanti", "title": "External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote ", "summary": "External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00721, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.193", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18127"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.53452, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18860", "publisher": "Rapid7, Inc.", "title": "Velociraptor allows multi-tenant deployments named \"Orgs\".\n\nBy default Velociraptor, uses the ROOT org, but us", "summary": "Velociraptor allows multi-tenant deployments named \"Orgs\".\n\nBy default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment.\n\nUsers can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORG_ADMIN permission on the ROOT org.\n\nThis issue results from the Velociraptor server allowing for the deletion of Orgs by incorrectly checking the ORG_ADMIN permissi", "cvss": 8.7, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.887", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18860"}], "cwe": ["CWE-280"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37553, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73237", "publisher": "Apache Software Foundation", "title": "XSS vulnerability in Markdown handling in Apache Allura.\n\nThis issue affects Apache Allura: from 1.10.0 before", "summary": "XSS vulnerability in Markdown handling in Apache Allura.\n\nThis issue affects Apache Allura: from 1.10.0 before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00794, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:31.960", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "allura", "vendor": "apache", "type": "app", "affected": [">= 1.10.0 and < 1.19.1"], "fixed": "1.19.1", "safe": "before 1.10.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy allura || rpm -q allura || allura --version"}, {"label": "2. UPGRADE to 1.19.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade allura"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade allura"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.10.0 (Debian / Ubuntu)", "cmd": "apt-cache madison allura\nsudo apt install allura=<VERSION_BEFORE_1.10.0>\nsudo apt-mark hold allura"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list allura\nsudo dnf downgrade allura-<VERSION_BEFORE_1.10.0>\nsudo dnf versionlock add allura"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73237"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/p7bd1yz9v9wbsbc6hz3tjxozxnwyzqz0"}], "cwe": ["CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55974, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73238", "publisher": "Apache Software Foundation", "title": "XSS vulnerability in code display in Apache Allura.\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers a", "summary": "XSS vulnerability in code display in Apache Allura.\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00794, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.080", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "allura", "vendor": "apache", "type": "app", "affected": ["< 1.19.1"], "fixed": "1.19.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy allura || rpm -q allura || allura --version"}, {"label": "2. UPGRADE to 1.19.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade allura"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade allura"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73238"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/bbzhnvqlwvwbprnfg4g41s8wkc5bdfmk"}], "cwe": ["CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55974, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73239", "publisher": "Apache Software Foundation", "title": "Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types\u00a0in Apache", "summary": "Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types\u00a0in Apache Allura.\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00622, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.190", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "allura", "vendor": "apache", "type": "app", "affected": ["< 1.19.1"], "fixed": "1.19.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy allura || rpm -q allura || allura --version"}, {"label": "2. UPGRADE to 1.19.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade allura"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade allura"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73239"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/ryn6yomo897d43ovrd47g02t8ycmbxb3"}], "cwe": ["CWE-280", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.492, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18235", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00541, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:28.000", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18235"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44716, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13476", "publisher": "IBM Corporation", "title": "IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co", "summary": "IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00426, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.510", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "informix dynamic server", "vendor": "ibm", "type": "app", "affected": [">= 15.0 and < 15.0.1.13", "12.10", "14.10"], "fixed": "15.0.1.13", "safe": "before 12.10", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy informix-dynamic-server || rpm -q informix-dynamic-server || informix-dynamic-server --version"}, {"label": "2. UPGRADE to 15.0.1.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade informix-dynamic-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade informix-dynamic-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.10 (Debian / Ubuntu)", "cmd": "apt-cache madison informix-dynamic-server\nsudo apt install informix-dynamic-server=<VERSION_BEFORE_12.10>\nsudo apt-mark hold informix-dynamic-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list informix-dynamic-server\nsudo dnf downgrade informix-dynamic-server-<VERSION_BEFORE_12.10>\nsudo dnf versionlock add informix-dynamic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13476"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282827"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35825, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71473", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the `search-v2-operator` component", "summary": "A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container images. This ultimately results in container image injection on the managed cluster, potentially compromising its integrity.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.020", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71473"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39991, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71194", "publisher": "MITRE", "title": "In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queri", "summary": "In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00515, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:22.170", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71194"}], "cwe": ["CWE-669"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43057, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "designate", "status": "fixed", "fixed": "1:15.0.2-0+deb11u1", "cmd": "sudo apt update && sudo apt install --only-upgrade designate\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' designate)\" ge \"1:15.0.2-0+deb11u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "designate", "status": "fixed", "fixed": "1:20.0.0-2+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade designate\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' designate)\" ge \"1:20.0.0-2+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-0298", "publisher": "Palo Alto Networks, Inc.", "title": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of", "summary": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:45.560", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.0.15", "6.2.8", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0298"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0298"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25508, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)", "url": "https://security.paloaltonetworks.com/CVE-2026-0298", "date": "2026-09-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-59501", "publisher": "Israel National Cyber Directorate", "title": ": Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft ", "summary": ": Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.140", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59501"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25727, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72747", "publisher": "VulnCheck", "title": "AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to injec", "summary": "AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected script in the admin's browser session.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:05.663", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72747"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27892, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/WWBN/AVideo/security/advisories/GHSA-cfvq-r985-84wj", "url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-cfvq-r985-84wj"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73498", "publisher": "GitHub, Inc.", "title": "MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira)", "summary": "MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, \"rb\") in src/mcp_atlassian/confluence/attachments.py through _upload_attachment_direct() without calling validate_safe_path. An authenticated MCP client can read any file accessible to the server process and exfiltrate it to Confluence as", "cvss": 7.7, "sev": "HIGH", "epss": 0.00481, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.973", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73498"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.40522, "vendors": [{"os": "Python (pip)", "pkg": "mcp-atlassian", "status": "fixed", "fixed": "0.22.0", "cmd": "pip install --upgrade \"mcp-atlassian>=0.22.0\"\npip show mcp-atlassian", "url": "https://github.com/advisories/GHSA-g5r6-gv6m-f5jv", "note": "vulnerable: < 0.22.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72537", "publisher": "TuranSec", "title": "A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with ", "summary": "A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user ingest function adopts pre-existing local accounts by username without validating scope boundaries. An attacker can rewrite or delete any account, including t", "cvss": 8.8, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.977", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72537"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32699, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72769", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engi", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine. An authenticated user able to create or edit a workflow expression can abuse the engine's array-element access to obtain a reference to a host built-in and pollute its prototype in the main n8n process (a sandbox escape), leading to a denial of service. Both self-hosted and cloud instances running the VM expression engine are affected", "cvss": 8.1, "sev": "HIGH", "epss": 0.00514, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.220", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72769"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-hx4h-vr3m-45vh"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42928, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72773", "publisher": "VulnCheck", "title": "n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-sea", "summary": "n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affe", "cvss": 7.7, "sev": "HIGH", "epss": 0.00568, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.757", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 2.31.5", "2.32.0"], "fixed": "2.31.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.31.5", "cmd": "npm install n8n@\">=2.31.5\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72773"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-pf2q-pxhf-hgmw"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.46355, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19539", "publisher": "Secur0", "title": "Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CR", "summary": "Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CRM before 5.4.9 allows authenticated users of any company to read the full content (title, description, and attachments) of tickets belonging to another company, to hijack another company's tickets by reassigning their company_id, and to delete another company's tickets without any authorization check, via the ticket's numeric identifier, ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00439, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:13.580", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19539"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37138, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-11739", "publisher": "Netgear, Inc.", "title": "A command injection vulnerability in certain affected NETGEAR Nighthawk \ndevices allows a network-adjacent att", "summary": "A command injection vulnerability in certain affected NETGEAR Nighthawk \ndevices allows a network-adjacent attacker with the ability to intercept\n and modify local network traffic (attacker in the middle) to compromise\n the confidentiality and integrity of the affected device.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.01068, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:28.260", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "ms90 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.2.46"], "fixed": "1.0.2.46", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax20 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.17.142"], "fixed": "1.0.17.142", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax200 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.11.148"], "fixed": "1.0.11.148", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax35 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.17.142"], "fixed": "1.0.17.142", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax35v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.17.142"], "fixed": "1.0.17.142", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11739"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.6454, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53413", "publisher": "Zoom Video Communications, Inc.", "title": "Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a mee", "summary": "Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00494, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.580", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53413"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41539, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:53:34.841071+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-53413 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-53413", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53415", "publisher": "Zoom Video Communications, Inc.", "title": "Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote cod", "summary": "Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00494, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.833", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53415"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41539, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62772", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized ", "summary": "Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:29.930", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.2704"], "fixed": "10.0.28000.2704", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62772"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62772"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.25455, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 11 version 26H1 for x64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}, {"os": "Windows 11 Version 26H1 for ARM64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-62799", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.", "summary": "Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:34.180", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.2704"], "fixed": "10.0.28000.2704", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62799"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62799"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.25468, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 11 version 26H1 for x64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}, {"os": "Windows 11 Version 26H1 for ARM64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16904", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.633", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16904"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43658, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73329", "publisher": "VulnCheck", "title": "CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged user", "summary": "CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter during draft creation. Attackers can submit a malicious HTML payload as a draft title through the drafts creation endpoint, which is persisted to the database without escaping and later rendered as raw HTML ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:55.053", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73329"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34869, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title", "url": "https://enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73332", "publisher": "VulnCheck", "title": "CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows l", "summary": "CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through the contact form edit endpoint, which lacks proper authorization controls. Attackers can persist malicious script payloads into the database that execute in victims' browsers when the contact form loads, enabli", "cvss": 8.7, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:55.480", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73332"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34869, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#32-stored-xss-in-contact-form", "url": "https://enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#32-stored-xss-in-contact-form"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73411", "publisher": "GitHub, Inc.", "title": "Shescape is a simple shell escape library for JavaScript", "summary": "Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/unix/dash.js fails to escape ~ after : or = when applications use the escape or escapeAll APIs on Unix with shell set to dash, or with shell set to true when Dash is the default, and interpolate the result into an assignment prefixed to a command. An attacker who controls the input can supply a value such as :~ to disclose the ho", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0059, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:56.053", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73411"}], "cwe": ["CWE-116", "CWE-200"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47514, "vendors": [{"os": "npm", "pkg": "shescape", "status": "fixed", "fixed": "2.1.14", "cmd": "npm install shescape@\">=2.1.14\"\nnpm ls shescape", "url": "https://github.com/advisories/GHSA-q53c-4prm-w95q", "note": "vulnerable: < 2.1.14"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73412", "publisher": "GitHub, Inc.", "title": "Shescape is a simple shell escape library for JavaScript", "summary": "Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDED_GLOB and MAGIC_EQUAL_SUBST exacerbate the problem. In certain case, an attacker can leverage home directory expansion and extended glob syntax to obtain lists of files and directorie", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00612, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:56.203", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73412"}], "cwe": ["CWE-78", "CWE-155"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48663, "vendors": [{"os": "npm", "pkg": "shescape", "status": "fixed", "fixed": "2.1.14", "cmd": "npm install shescape@\">=2.1.14\"\nnpm ls shescape", "url": "https://github.com/advisories/GHSA-6v4m-fw66-8r4x", "note": "vulnerable: < 2.1.14"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-0297", "publisher": "Palo Alto Networks, Inc.", "title": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-", "summary": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).", "cvss": 8.1, "sev": "HIGH", "epss": 0.0031, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:45.077", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.3.0 and < 6.3.5"], "fixed": "6.0.15, 6.3.5", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.3.0 and < 6.3.5"], "fixed": "6.0.15, 6.3.5", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.3.0 and < 6.3.5"], "fixed": "6.0.15, 6.3.5", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and <= 6.2.9", "6.3.3", "6.3.3 h1", "6.3.3 h2", "6.3.3 h3"], "fixed": "6.0.15", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h1", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12", "6.2.8 h2"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0297"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0297"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22604, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)", "url": "https://security.paloaltonetworks.com/CVE-2026-0297", "date": "2026-09-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-45819", "publisher": "seal", "title": "baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting ", "summary": "baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:23.383", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-45819"}], "cwe": ["CWE-705", "CWE-755"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42376, "vendors": [{"os": "npm", "pkg": "baseline-browser-mapping", "status": "fixed", "fixed": "2.11.0", "cmd": "npm install baseline-browser-mapping@\">=2.11.0\"\nnpm ls baseline-browser-mapping", "url": "https://github.com/advisories/GHSA-w5vr-8v7q-w6rv", "note": "vulnerable: >= 2.0.0, < 2.11.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "RHEL 10", "pkg": "rust", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rust", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rust", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48767", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper `getAccessToken`. The vulnerable path checks only whether the caller has read access to the workspace, decrypts the stored Google OAuth credential, refreshes or retrieves the access token through the Google client, and returns the raw ", "cvss": 7.6, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:33.470", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48767"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.36184, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-qjpp-9cqc-jhh8", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-qjpp-9cqc-jhh8"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-44765", "publisher": "SAP SE", "title": "Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unaut", "summary": "Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00382, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.180", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44765"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30991, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73079", "publisher": "GitHub, Inc.", "title": "Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptio", "summary": "Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts (ChatGPT/Codex OAuth, OpenAI platform keys, or an operator-configured base URL) that belong to the operator, not to the caller. The `POST /responses/*subpath` wildcard routes spliced the client-supplied ", "cvss": 8.5, "sev": "HIGH", "epss": 0.00388, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:39.713", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73079"}], "cwe": ["CWE-22", "CWE-441"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31711, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58650", "publisher": "Microsoft Corporation", "title": "Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypa", "summary": "Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:05.417", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58650"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58650"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24276, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63522", "publisher": "Microsoft Corporation", "title": "Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to e", "summary": "Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00298, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:49.017", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "azure sql database", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy azure-sql-database || rpm -q azure-sql-database || azure-sql-database --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63522"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63522"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21346, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65673", "publisher": "Microsoft Corporation", "title": "Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges ov", "summary": "Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00322, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:55.303", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "entra connect", "vendor": "microsoft", "type": "app", "affected": ["< 2.6.84.0"], "fixed": "2.6.84.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy entra-connect || rpm -q entra-connect || entra-connect --version"}, {"label": "2. UPGRADE to 2.6.84.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade entra-connect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade entra-connect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65673"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65673"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24056, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69278", "publisher": "Microsoft Corporation", "title": "Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature loc", "summary": "Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:06.880", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "visual studio code", "vendor": "microsoft", "type": "app", "affected": ["< 1.132.1"], "fixed": "1.132.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-code || rpm -q visual-studio-code || visual-studio-code --version"}, {"label": "2. UPGRADE to 1.132.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-code"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-code"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69278"}, {"t": "Release Notes, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69278"}], "cwe": ["CWE-693", "CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24275, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16907", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to impr", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00575, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.890", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16907"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283276"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.46753, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65370", "publisher": "Apple Inc.", "title": "ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling a", "summary": "ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00344, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:39.587", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "servicetalk", "vendor": "apple", "type": "app", "affected": ["< 0.42.65"], "fixed": "0.42.65", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy servicetalk || rpm -q servicetalk || servicetalk --version"}, {"label": "2. UPGRADE to 0.42.65 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade servicetalk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade servicetalk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65370"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26728, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73499", "publisher": "GitHub, Inc.", "title": "etcd is a distributed key-value store for the data of a distributed system", "summary": "etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey() to receive watch events for every key lexicographically greater than or equal to the permitted key. In server/etcdserver/api/v3rpc/watch.go, the open-ended RangeEnd sentinel is rewritten before the RBAC permission check i", "cvss": 7.1, "sev": "HIGH", "epss": 0.00663, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:17.130", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73499"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51115, "vendors": [{"os": "Go", "pkg": "go.etcd.io/etcd/v3", "status": "fixed", "fixed": "3.7.1", "cmd": "go get go.etcd.io/etcd/v3@v3.7.1\ngo list -m go.etcd.io/etcd/v3", "url": "https://github.com/advisories/GHSA-xg4h-6gfc-h4m8", "note": "vulnerable: >= 3.7.0-alpha.0, < 3.7.1"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Debian 12", "pkg": "etcd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "etcd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48494", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign preview phone number tied to another preview session. The WhatsApp test-webhook handler authorizes the parent typebot first, but then resolves the preview chat session only by `wa-preview-{phon", "cvss": 7.1, "sev": "HIGH", "epss": 0.00465, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:33.310", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48494"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.39316, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-fqf7-mmp5-j3jq", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-fqf7-mmp5-j3jq"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-44764", "publisher": "SAP SE", "title": "Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unaut", "summary": "Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values. If processed by the application, these requests enable access to backend operations. Successful exploitation could allow the attacker to read, create, modify, or delete application-managed business data, resulting in a limited impact on th", "cvss": 7.3, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.053", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44764"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24105, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-4757", "publisher": "Axis Communications AB", "title": "A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a", "summary": "A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an\u00a0administrator-privileged service account.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00569, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:16.427", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4757"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.46415, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "RHEL 6", "pkg": "axis", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72768", "publisher": "VulnCheck", "title": "n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Cl", "summary": "n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection, exposing internal services and reading responses back through the workflow.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.077", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": [">= 2.31.0 and < 2.31.5", "2.32.0"], "fixed": "2.31.5", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.31.5", "cmd": "npm install n8n@\">=2.31.5\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72768"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-vhf8-cg2h-cg3p"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3264, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68821", "publisher": "Microsoft Corporation", "title": "Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges l", "summary": "Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:06.540", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "app installer", "vendor": "microsoft", "type": "app", "affected": ["< 1.29.280"], "fixed": "1.29.280", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy app-installer || rpm -q app-installer || app-installer --version"}, {"label": "2. UPGRADE to 1.29.280 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade app-installer"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade app-installer"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68821"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68821"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.23926, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16863", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.", "cvss": 7.7, "sev": "HIGH", "epss": 0.0047, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:24.517", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16863"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283280"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39718, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18099", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:40.827", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18099"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24446, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73330", "publisher": "VulnCheck", "title": "CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administra", "summary": "CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the test_email settings action, which are evaluated when an SMTP rejection reflects the recipient address back in the exception message rendered as an inline ERB template. Attackers can submit a crafted email parameter containing ERB expressions through the", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00789, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:55.197", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73330"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.55805, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title", "url": "https://enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-10534", "publisher": "IBM Corporation", "title": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT pa", "summary": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:14.203", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10534"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7279461"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30372, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17431", "publisher": "CPANSec", "title": "PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in ", "summary": "PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for.\n\nto_pdf reads the generated PDF back from its path argument, and _style_tag_for reads each entry of the stylesheets list, by assigning the path to a local @ARGV and reading it with the diamond operator, which opens each @ARGV element with Perl's 2-arg open(). A value that begins or ends wi", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00947, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:31.917", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17431"}], "cwe": ["CWE-73", "CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.60805, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72788", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fail", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00413, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.117", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72788"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34491, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260812083335-251596fc0de2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-hgfg-j9pg-43xw", "note": "vulnerable: < 0.0.0-20260812083335-251596fc0de2"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72806", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess ", "summary": "SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering attribute views and database rows. Unauthenticated readers can access password-protected document rows including titles, block IDs, and column values by calling renderAttributeView without supplying the required password.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00434, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.680", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72806"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36683, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260723040913-768427f20f13", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260723040913-768427f20f13\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-6mcf-g667-w3qv", "note": "vulnerable: < 0.0.0-20260723040913-768427f20f13"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-6mcf-g667-w3qv", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6mcf-g667-w3qv"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72808", "publisher": "VulnCheck", "title": "SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability i", "summary": "SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api/asset/getFileAnnotation endpoint, which returns .sya PDF-annotation file content without a publish-access check. Because the endpoint is gated only by CheckAuth (unlike the /assets/* route, which enforces publish access and password), an anonymous reader (when publish authentication is disabled) or any publish RoleReader who kn", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.004, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.967", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72808"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33091, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260723031702-509b35055940", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260723031702-509b35055940\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-v7ph-r5r6-4jcj", "note": "vulnerable: < 0.0.0-20260723031702-509b35055940"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-v7ph-r5r6-4jcj", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v7ph-r5r6-4jcj"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73326", "publisher": "VulnCheck", "title": "CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user t", "summary": "CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level authorization. Attackers can manipulate plugin configuration parameters at runtime across the attack, front_cache, cama_meta_tag, and cama_contact_form plugins to alter cached page behavior, modify public meta-tag o", "cvss": 7.6, "sev": "HIGH", "epss": 0.00384, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:54.887", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73326"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.3131, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#31-broken-access-control-on-admin-end", "url": "https://enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#31-broken-access-control-on-admin-endpoints"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73429", "publisher": "GitHub, Inc.", "title": "Russh is a Rust SSH client & server library", "summary": "Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX_ECDH_REPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::compute_shared_secret function in russh/src/kex/curve25519.rs passes the decoded exchange.server_ephemeral value to clone_from_slice without validating its length, causing a deterministic panic before the s", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.750", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73429"}], "cwe": ["CWE-704", "CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42372, "vendors": [{"os": "Rust (Cargo)", "pkg": "russh", "status": "fixed", "fixed": "0.62.4", "cmd": "Set russh >= 0.62.4 in Cargo.toml, then run: cargo update -p russh", "url": "https://github.com/advisories/GHSA-g9hv-x236-4qp3", "note": "vulnerable: <= 0.62.3"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47718", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:20.783", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47718"}], "cwe": ["CWE-287", "CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3879, "vendors": [{"os": "npm", "pkg": "fuxa-server", "status": "fixed", "fixed": "1.3.1", "cmd": "npm install fuxa-server@\">=1.3.1\"\nnpm ls fuxa-server", "url": "https://github.com/advisories/GHSA-r9g5-7q8j-958c", "note": "vulnerable: = 1.3.0-2773"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c", "url": "https://github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50236", "publisher": "Red Hat, Inc.", "title": "An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers", "summary": "An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.183", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50236"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39909, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50237", "publisher": "Red Hat, Inc.", "title": "A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy", "summary": "A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:38.347", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50237"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39989, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72555", "publisher": "TuranSec", "title": "A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the C", "summary": "A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass ownership and administrative access controls. An attacker with any user account can read, modify, or delete tickets, clients, and users belonging to any ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.240", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72555"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29877, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72596", "publisher": "TuranSec", "title": "A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to ", "summary": "A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible() cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to fall through and permit the deletion. An attacker with an Author account can delete any post on the platform.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00378, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.543", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72596"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30581, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72770", "publisher": "VulnCheck", "title": "n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-ta", "summary": "n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point allowlisted remote configurations at local paths outside the sandbox to pull arbitrary git repositories and read their files and history.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00704, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.353", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.31.0 and < 2.31.5", ">= 2.32.0 and < 2.32.1"], "fixed": "1.123.67, 2.31.5, 2.32.1", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72770"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-gf29-4f56-r2jf"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.52779, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48766", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled `baseUrl`. The vulnerable path decrypts the selected workspace credential, creates an OpenAI client with the secret in both `apiKey` and the explicit `api-key` header, and then sends the outbound request to the caller-su", "cvss": 7.6, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.320", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48766"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36185, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-gc3v-9whw-6wjh", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-gc3v-9whw-6wjh"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47704", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook", "cvss": 7.1, "sev": "HIGH", "epss": 0.00559, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:17:59.237", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47704"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.45826, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T19:56:48.491844+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73086", "publisher": "GitHub, Inc.", "title": "nanoid is a secure, URL-friendly, unique string ID generator for JavaScript", "summary": "nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corrupt the process-wide CSPRNG poolOffset in fillPool(), which causes subsequent session tokens, CSRF tokens, API keys, and unique identifiers to become th", "cvss": 7.4, "sev": "HIGH", "epss": 0.00296, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:16.690", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2118, "vendors": [{"os": "npm", "pkg": "nanoid", "status": "fixed", "fixed": "3.3.12", "cmd": "npm install nanoid@\">=3.3.12\"\nnpm ls nanoid", "url": "https://github.com/advisories/GHSA-xwg4-73v4-xw9w", "note": "vulnerable: < 3.3.12"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "node-mocha", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "node-mocha", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "node-mocha", "status": "fixed", "fixed": "9.1.4+ds1+~cs28.2.8-1", "cmd": "sudo apt update && sudo apt install --only-upgrade node-mocha\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' node-mocha)\" ge \"9.1.4+ds1+~cs28.2.8-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-mocha", "status": "fixed", "fixed": "9.1.4+ds1+~cs28.2.8-1", "cmd": "sudo apt update && sudo apt install --only-upgrade node-mocha\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' node-mocha)\" ge \"9.1.4+ds1+~cs28.2.8-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "node-postcss", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-postcss", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "goose", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48441", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Travers", "summary": "Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00306, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:32.457", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48441"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22238, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-12005", "publisher": "IBM Corporation", "title": "IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Ve", "summary": "IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input validation vulnerability in the management interface that allows already privileged attackers to execute additional operations by crafting a malicious HTTP request.", "cvss": 7.2, "sev": "HIGH", "epss": 0.0054, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:33.667", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "security verify access", "vendor": "ibm", "type": "app", "affected": [">= 10.0.0 and <= 10.0.9.2", "10.0.9.2 interim_fix1"], "fixed": "newer than 10.0.9.2", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy security-verify-access || rpm -q security-verify-access || security-verify-access --version"}, {"label": "2. UPGRADE to newer than 10.0.9.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade security-verify-access"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade security-verify-access"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison security-verify-access\nsudo apt install security-verify-access=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold security-verify-access"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list security-verify-access\nsudo dnf downgrade security-verify-access-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add security-verify-access"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "verify identity access", "vendor": "ibm", "type": "app", "affected": [">= 11.0 and <= 11.0.3"], "fixed": "newer than 11.0.3", "safe": "before 11.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy verify-identity-access || rpm -q verify-identity-access || verify-identity-access --version"}, {"label": "2. UPGRADE to newer than 11.0.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade verify-identity-access"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade verify-identity-access"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.0 (Debian / Ubuntu)", "cmd": "apt-cache madison verify-identity-access\nsudo apt install verify-identity-access=<VERSION_BEFORE_11.0>\nsudo apt-mark hold verify-identity-access"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list verify-identity-access\nsudo dnf downgrade verify-identity-access-<VERSION_BEFORE_11.0>\nsudo dnf versionlock add verify-identity-access"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "verify identity access container", "vendor": "ibm", "type": "app", "affected": [">= 11.0.0.0 and <= 11.0.3.0"], "fixed": "newer than 11.0.3.0", "safe": "before 11.0.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy verify-identity-access-container || rpm -q verify-identity-access-container || verify-identity-access-container --version"}, {"label": "2. UPGRADE to newer than 11.0.3.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade verify-identity-access-container"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade verify-identity-access-container"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison verify-identity-access-container\nsudo apt install verify-identity-access-container=<VERSION_BEFORE_11.0.0.0>\nsudo apt-mark hold verify-identity-access-container"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list verify-identity-access-container\nsudo dnf downgrade verify-identity-access-container-<VERSION_BEFORE_11.0.0.0>\nsudo dnf versionlock add verify-identity-access-container"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12005"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283079"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44653, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17111", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:39.497", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17111"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38206, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19642", "publisher": "AMZN", "title": "An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote ", "summary": "An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input.\n\n\n\nTo remediate this issue, users should upgrade to version 1.11.862.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00502, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:42.653", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "aws software development kit", "vendor": "amazon", "type": "app", "affected": ["< 1.11.862"], "fixed": "1.11.862", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aws-software-development-kit || rpm -q aws-software-development-kit || aws-software-development-kit --version"}, {"label": "2. UPGRADE to 1.11.862 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aws-software-development-kit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aws-software-development-kit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19642"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-080-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/aws/aws-sdk-cpp/security/advisories/GHSA-wxx3-prfc-69xx"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4211, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73430", "publisher": "GitHub, Inc.", "title": "Russh is a Rust SSH client & server library", "summary": "Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSH_MSG_KEX_ECDH_INIT with a 32-byte all-zero Q_C value. Curve25519Kex::server_dh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an all-zero shared secret, after which compute_exchange_hash calls encode_mpint in russh/src/kex/mod.rs and indexes beyond the end of the input while sk", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00597, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.883", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73430"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47904, "vendors": [{"os": "Rust (Cargo)", "pkg": "russh", "status": "fixed", "fixed": "0.62.4", "cmd": "Set russh >= 0.62.4 in Cargo.toml, then run: cargo update -p russh", "url": "https://github.com/advisories/GHSA-5xvq-cp9x-6p6r", "note": "vulnerable: <= 0.62.3"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Eugeny/russh/security/advisories/GHSA-5xvq-cp9x-6p6r", "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-5xvq-cp9x-6p6r"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71964", "publisher": "VulnCheck", "title": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager c", "summary": "CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symbolic links. Attackers can exploit the application's failure to validate symlinks before extraction, causing symbolic links targeting arbitrary filesystem paths outside the user's home directory to persist on disk a", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00465, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:31.613", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71964"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.39312, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/", "url": "https://themcsam.github.io/posts/cyberpanel-2.4.3-vulnerabilties/"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-14886", "publisher": "HashiCorp Inc.", "title": "Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypa", "summary": "Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability (CVE-2026-14886) is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:26.683", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14886"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24823, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72909", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayableReport prepare_conditions path in erpnext/accounts/report/accounts_receivable/accounts_receivable.py does not apply Customer and Supplier user permissions to the Payment Ledger Entry dynamic-link party field, allowing any authenticated user to read unauthorized cross-company financial data in Accounts Receivable and Accounts Pa", "cvss": 7.1, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.727", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72909"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39951, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72910", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.22.0, the merge_account, pause_job_for_doc, trigger_job_for_doc, change_release_date, and update_cost_center functions across erpnext/accounts/doctype/account/account.py, erpnext/accounts/doctype/process_payment_reconciliation/process_payment_reconciliation.py, erpnext/accounts/doctype/purchase_invoice/purchase_invoice.py, and erpnext/accounts/utils.py o", "cvss": 7.1, "sev": "HIGH", "epss": 0.00497, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.860", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72910"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41721, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-44763", "publisher": "SAP SE", "title": "SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path ", "summary": "SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attacker\ufffds control. Successful exploitation could allow files to be written outside the intended directory and affect other components, res", "cvss": 7.6, "sev": "HIGH", "epss": 0.00395, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:20.930", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44763"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32526, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-58230", "publisher": "SAP SE", "title": "SAP Approuter does not sufficiently validate certain token content under specific configurations", "summary": "SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality and a low impact on integrity and availability.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00314, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.307", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58230"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23094, "vendors": [{"os": "npm", "pkg": "@sap/approuter", "status": "fixed", "fixed": "23.0.0", "cmd": "npm install @sap/approuter@\">=23.0.0\"\nnpm ls @sap/approuter", "url": "https://github.com/advisories/GHSA-vhh6-v828-x62f", "note": "vulnerable: < 23.0.0"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:32:21.689618+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58238", "publisher": "SAP SE", "title": "SAP Approuter does not sufficiently handle certain requests under specific conditions", "summary": "SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00429, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.807", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58238"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36076, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72544", "publisher": "TuranSec", "title": "An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote ", "summary": "An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without authentication, allowing fabrication of arbitrary audit log entries. An attacker can tamper with the legal audit trail of any signed document, undermining non-", "cvss": 7.5, "sev": "HIGH", "epss": 0.00253, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.847", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72544"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15851, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72563", "publisher": "TuranSec", "title": "A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to ", "summary": "A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array making all columns mass-assignable. An attacker with any agent account can corrupt lead data across team boundaries.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.310", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72563"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27417, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72595", "publisher": "TuranSec", "title": "A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to ", "summary": "A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize() method and performs no team-scoped ownership check. An attacker with any agent account can modify, escalate, or corrupt tickets assigned to other teams.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.430", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72595"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27415, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18635", "publisher": "Rapid7, Inc.", "title": "Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context", "summary": "Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller's org instead of against the target org.\n\nThis allows an administrator in one org to impersonate another user in another o", "cvss": 7.2, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.627", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18635"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39094, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-17248", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to i", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00472, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.190", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17248"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283276"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39916, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17266", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00655, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.313", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17266"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.50766, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17418", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to im", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00297, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.807", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17418"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21198, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19643", "publisher": "AMZN", "title": "An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, mi", "summary": "An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input.\n\n\n\nTo remediate this issue, users should upgrade to version 1.11.862.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00565, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:42.800", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "aws software development kit", "vendor": "amazon", "type": "app", "affected": ["< 1.11.862"], "fixed": "1.11.862", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aws-software-development-kit || rpm -q aws-software-development-kit || aws-software-development-kit --version"}, {"label": "2. UPGRADE to 1.11.862 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aws-software-development-kit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aws-software-development-kit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19643"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-080-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/aws/aws-sdk-cpp/security/advisories/GHSA-mxm9-xpf9-x66x"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46229, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-42142", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handleGetSheets` API handler (`POST /api/sheets/getSheets`) does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data (sheet names, IDs, column headers). Version 3.17.0 fixes the issue.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00369, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:31.900", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42142"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.29577, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-7jr4-r73c-h4h9", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-7jr4-r73c-h4h9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48495", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON `state` parameter and trusts the embedded `workspaceId`, `typebotId`, `blockId`, and `redirectUrl` without cryptographic integrity protection or authorization checks. The callback route is authenticated, but it does not verify that the authenticated user has write access to the target workspace or Typebot before creating cred", "cvss": 7.1, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.170", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48495"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.2761, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/baptisteArno/typebot.io/security/advisories/GHSA-w789-9gxq-2xcj", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-w789-9gxq-2xcj"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-40130", "publisher": "SAP SE", "title": "SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands", "summary": "SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00472, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:20.540", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40130"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39915, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72549", "publisher": "TuranSec", "title": "An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote ", "summary": "An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authentication before resolving and returning the internal identifier. An attacker can use this to enumerate user accounts and target subsequent attacks.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00479, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.483", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72549"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40443, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72604", "publisher": "TuranSec", "title": "A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to", "summary": "A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink() without sanitization or path canonicalization. An authenticated administrator can delete sensitive system files outside the web root, potentially causing server instability or facilitating fu", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00517, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.507", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72604"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.43142, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72607", "publisher": "TuranSec", "title": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authent", "summary": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => items_batchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The agefield value is stored verbatim to the system preference and later interpolated without parameterization into a SQL query in C4::Items::ToggleNewStatus (l", "cvss": 7.1, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.867", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72607"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38189, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72749", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) ", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method path and corrupt a shared global in the main Node.js process. Because that global is used on the request-authentication path, the instance then fails ever", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00573, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:05.960", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.31.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72749"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-xwx6-jjhv-84p8"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.46638, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18640", "publisher": "Rapid7, Inc.", "title": "The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK", "summary": "The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of \".json.db\" but can otherwise overwrite other metadata files (such as ACL records, hunts etc). This can corrupt these files and cause data corruption.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00433, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:30.713", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18640"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36623, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-54123", "publisher": "Microsoft Corporation", "title": "Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an author", "summary": "Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00479, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:03.647", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "defender for endpoint", "vendor": "microsoft", "type": "app", "affected": [">= 101.0.0 and < 101.26042.0020"], "fixed": "101.26042.0020", "safe": "before 101.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy defender-for-endpoint || rpm -q defender-for-endpoint || defender-for-endpoint --version"}, {"label": "2. UPGRADE to 101.26042.0020 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade defender-for-endpoint"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade defender-for-endpoint"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 101.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison defender-for-endpoint\nsudo apt install defender-for-endpoint=<VERSION_BEFORE_101.0.0>\nsudo apt-mark hold defender-for-endpoint"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list defender-for-endpoint\nsudo dnf downgrade defender-for-endpoint-<VERSION_BEFORE_101.0.0>\nsudo dnf versionlock add defender-for-endpoint"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54123"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54123"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40376, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72807", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template co", "summary": "SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or packages with crafted template columns that execute arbitrary SQL on a victim's kernel when the package is imported and rendered, enabling read and write acce", "cvss": 8.0, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.837", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72807"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2531, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260723035036-0a176345e02a", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260723035036-0a176345e02a\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-x67c-8pwr-m8g3", "note": "vulnerable: < 0.0.0-20260723035036-0a176345e02a"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:37:12.802530+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-x67c-8pwr-m8g3", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-x67c-8pwr-m8g3"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-8718", "publisher": "Zephyr Project", "title": "tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(", "summary": "tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a de", "cvss": 8.4, "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T23:16:51.587", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8718"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.05282, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72908", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.109.0 and 16.20.0, the get_tax_template function in erpnext/accounts/doctype/tax_rule/tax_rule.py constructs an SQL WHERE clause from request-influenced posting_date and args values, allowing an authenticated low-privilege user to inject SQL and extract sensitive information. This issue is fixed in versions 15.109.0 and 16.20.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00506, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.593", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72908"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.42337, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18639", "publisher": "Rapid7, Inc.", "title": "When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username", "summary": "When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the \"email_verified\" claim and do not actually verify the email.\n\nThis allows a user to impersonate another user by setting their email address within the IdP, allowing account takeover.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:30.590", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18639"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31652, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-47940", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar", "summary": "Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00314, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:27.267", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47940"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23137, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-72786", "publisher": "VulnCheck", "title": "Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action th", "summary": "Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows authenticated users to change passwords without verification. Attackers with edit users permission can reset any user's password including administrators by exploiting the unprotected newPassword field in the User element save flow.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00462, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:49.837", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72786"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39127, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-13622", "publisher": "Red Hat, Inc.", "title": "A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy", "summary": "A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.630", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13622"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09551, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-46688", "publisher": "GitHub, Inc.", "title": "The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms", "summary": "The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version ", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00421, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.250", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46688"}], "cwe": ["CWE-601"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.35417, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72907", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the add_ac function in erpnext/accounts/utils.py accepts the ignore_permissions argument without enforcing Account create permission, allowing an authenticated limited user to create unauthorized accounting master records and affect financial data integrity and audit trails. This issue is fixed in versions 15.111.0 and 16.22.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0044, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.460", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72907"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37188, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72917", "publisher": "GitHub, Inc.", "title": "AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur", "summary": "AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.0.0 to 1.15.0, AnythingLLM's unauthenticated account-recovery flow in server/utils/PasswordRecovery/index.js uses recoverAccount() to deduplicate the raw recoveryCodes values before trimming them, so one valid code submitted twice with different surrounding whitespace can satisfy the two-code check. Each normalized va", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T22:17:10.660", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72917"}], "cwe": ["CWE-180", "CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2706, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-vv8w-wg6r-hq56", "url": "https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-vv8w-wg6r-hq56"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58236", "publisher": "SAP SE", "title": "SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missi", "summary": "SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to the operating system or stop the SAP system, resulting in no impact on confidentiality, low impact on integrity, and high impact on availability.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00695, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.553", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58236"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.5246, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58248", "publisher": "SAP SE", "title": "SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to uplo", "summary": "SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes the contents of sensitive server-side files within the resulting report. This results in a high impact on confidentiality, with no impact on integrity a", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00436, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.633", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58248"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.36872, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:43:25.556371+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-72609", "publisher": "TuranSec", "title": "An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated", "summary": "An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition => order_receive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to C4::Acquisition::GetInvoices, which allow-lists the column name but concatenates the direction token raw into the SQL ORDER BY clause without validation. Exploitation", "cvss": 7.1, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:44.120", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72609"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29907, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72774", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution permission check compares the unresolved expression instead of the resolved credential type, the ownership check is skipped and the credential is loaded at e", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00438, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.893", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.0.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72774"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-6qc9-mqvw-jg7x"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37019, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18636", "publisher": "Rapid7, Inc.", "title": "The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore", "summary": "The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.004, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:28.760", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18636"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33085, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72971", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver", "summary": "Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00364, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:15.220", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.2704"], "fixed": "10.0.28000.2704", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72971"}, {"t": "Vendor Advisory, Patch", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72971"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29039, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Windows 11 version 26H1 for x64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}, {"os": "Windows 11 Version 26H1 for ARM64-based Systems", "pkg": "KB5121000", "status": "fixed", "fixed": "10.0.28000.2704", "cmd": "Install KB5121000 via Windows Update, then verify:\nGet-HotFix -Id KB5121000", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000", "note": "KB5121000"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-17419", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.950", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17419"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.3506, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72796", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mu", "summary": "SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API. Attackers with publish reader tokens or anonymous access in disabled-auth mode can read templates, snippets, and export artifacts by directly accessing static routes that lack the same restrictions as their REST API counterparts.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.267", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72796"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27731, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260725122641-34be6c0bb073", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260725122641-34be6c0bb073\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-fgmr-7w36-9qfq", "note": "vulnerable: < 0.0.0-20260725122641-34be6c0bb073"}, {"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-fgmr-7w36-9qfq", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fgmr-7w36-9qfq"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73331", "publisher": "VulnCheck", "title": "CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers wi", "summary": "CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers can supply malicious slug payloads using boolean- or union-style blind SQL injection techniques to extract sensitive data from the underlying SQLite datab", "cvss": 7.1, "sev": "HIGH", "epss": 0.00355, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:55.340", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73331"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28018, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title", "url": "https://enrik-m.github.io/posts/Camaleon-CMS-Vulnerabilties/#44-stored-xss-via-draft-post-title"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-18744", "publisher": "CERT/CC", "title": "Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by su", "summary": "Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id \u2014 test_func only checks _is_my_case, not ownership of kwargs['member']. Bypasses share_status; leaks embargoed vendor affected/not-affected + statement text cross-tenant.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00426, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:14.823", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18744"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.35851, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-0296", "publisher": "Palo Alto Networks, Inc.", "title": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthentic", "summary": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00138, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:44.703", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and <= 6.2.9", "6.3.3", "6.3.3 h1", "6.3.3 h2", "6.3.3 h3"], "fixed": "6.0.15", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h1", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", "all versions", "6.3.3", "6.3.3 h1", "6.3.3 h11", "6.3.3 h12", "6.3.3 h2"], "fixed": "6.0.15, 6.2.8", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0296"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0296"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.02931, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)", "url": "https://security.paloaltonetworks.com/CVE-2026-0296", "date": "2026-09-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-6791", "publisher": "GNU C Library", "title": "When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function ext", "summary": "When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of char", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:30.877", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6791"}], "cwe": ["CWE-121"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1179, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}, {"os": "Ubuntu 22.04", "pkg": "glibc", "status": "fixed", "fixed": "2.35-0ubuntu3.15", "cmd": "sudo apt update && sudo apt install --only-upgrade glibc\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glibc)\" ge \"2.35-0ubuntu3.15\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "glibc", "status": "fixed", "fixed": "2.39-0ubuntu8.9", "cmd": "sudo apt update && sudo apt install --only-upgrade glibc\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glibc)\" ge \"2.39-0ubuntu8.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "glibc", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glibc", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "glibc", "status": "fixed", "fixed": "glibc-2.39-142.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:76781\nrpm -q glibc", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "glibc", "status": "fixed", "fixed": "glibc-2.28-251.el8_10.43", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:76777\nrpm -q glibc", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "glibc", "status": "fixed", "fixed": "glibc-2.34-283.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:79281\nrpm -q glibc", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "compat-glibc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "glibc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-58247", "publisher": "SAP SE", "title": "SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component", "summary": "SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.517", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58247"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28393, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-66778", "publisher": "SAP SE", "title": "SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal com", "summary": "SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:24.283", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66778"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-644"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28392, "vendors": [{"os": "Fedora 46", "pkg": "clementine", "status": "fixed", "fixed": "1.4.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-3e748ef4d3", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e748ef4d3", "note": "FEDORA-2026-3e748ef4d3"}], "vendors_checked": "2026-10-23T20:46:45.328720+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72539", "publisher": "TuranSec", "title": "An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated wor", "summary": "An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to read legacy ownerless draft scripts that contain plaintext resource credentials. Drafts with a null owner email bypass ACL enforcement and are returned to any workspace member who queries the drafts endpoint. Sensitive credentials stored in these drafts are exposed across ACL boundaries.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00401, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.220", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72539"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.33185, "pinned": false}, {"id": "CVE-2026-72780", "publisher": "VulnCheck", "title": "Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in th", "summary": "Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.510", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72780"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31355, "pinned": false}, {"id": "CVE-2026-72782", "publisher": "VulnCheck", "title": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 interpolate environment variables", "summary": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets (via ${ENV_VAR} strings in the elementId parameter) into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access can render a malicious sandboxed Twig template and, using a blind error-based technique across many requests, incrementally leak arbitrary environ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00386, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.797", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72782"}], "cwe": ["CWE-668"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31454, "pinned": false}, {"id": "CVE-2026-18638", "publisher": "Rapid7, Inc.", "title": "Any authenticated Velociraptor user \u2014 including one holding only the\u00a0readerrole \u2014 can terminate the entire ser", "summary": "Any authenticated Velociraptor user \u2014 including one holding only the\u00a0readerrole \u2014 can terminate the entire server process with a single request, by calling\u00a0SetPassword\u00a0with a\u00a0username\u00a0that does not exist.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00411, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:30.457", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18638"}], "cwe": ["CWE-476", "CWE-703"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34266, "pinned": false}, {"id": "CVE-2026-67180", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Google Turbinia allows arbitrary command execution via worker tasks", "summary": "Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing request or influence an evidence path/name obtains code execution on the worker fleet. Fixed on 2026-07-10.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:34.257", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67180"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0495, "pinned": false}, {"id": "CVE-2026-62775", "publisher": "Microsoft Corporation", "title": "Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att", "summary": "Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0035, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:30.460", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.2704"], "fixed": "10.0.28000.2704", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62775"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62775"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27391, "pinned": false}, {"id": "CVE-2026-48404", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:29.573", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48404"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16371, "pinned": false}, {"id": "CVE-2026-48405", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:29.723", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48405"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16361, "pinned": false}, {"id": "CVE-2026-48406", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:29.880", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48406"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16362, "pinned": false}, {"id": "CVE-2026-48407", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:30.107", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48407"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16367, "pinned": false}, {"id": "CVE-2026-48408", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:30.320", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48408"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16372, "pinned": false}, {"id": "CVE-2026-48409", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:30.470", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48409"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16369, "pinned": false}, {"id": "CVE-2026-48410", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:30.627", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48410"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1637, "pinned": false}, {"id": "CVE-2026-72790", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo end", "summary": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that returns notebook metadata without authorization checks. Attackers can read notebook names, document counts, sizes, and timestamps for closed or non-published notebooks that should be hidden from readers.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.407", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72790"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24337, "pinned": false}, {"id": "CVE-2026-72791", "publisher": "VulnCheck", "title": "SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an inf", "summary": "SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role callers can retrieve the complete database view structure \u2014 every view's name, icon, layout type, and per-field Hidden flag \u2014 for any database whose avID ", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.550", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72791"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24337, "pinned": false}, {"id": "CVE-2026-72792", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that ret", "summary": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag labels and occurrence counts from password-protected documents to unauthenticated readers. Attackers can enumerate tag vocabulary and internal terminology from password-protected documents by calling the tag endpoint without providing the document's publish password.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:50.690", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72792"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24336, "pinned": false}, {"id": "CVE-2026-72797", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatu", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering. Anonymous readers and publish-mode accounts can enumerate all encrypted notebooks and their current unlock status, revealing sensitive notebook names and decryption state in memory.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.407", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72797"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24334, "pinned": false}, {"id": "CVE-2026-72800", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint,", "summary": "SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing authenticated readers to retrieve complete database column schemas including descriptions, select vocabularies, and template expressions. Additionally, getBlockDefIDsByRefText and getBlockRelevantIDs endpoints enumerate workspace-wide block IDs without publish scoping, enabling attackers to discover valid block identifiers acros", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:51.830", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72800"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24332, "pinned": false}, {"id": "CVE-2026-72803", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttr", "summary": "SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoints. Attackers can retrieve block attributes including names, aliases, memos, and custom fields from protected documents by sending POST requests with block IDs.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.247", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72803"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24335, "pinned": false}, {"id": "CVE-2026-72805", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and get", "summary": "SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints, allowing disclosure of protected document content and metadata. Anonymous readers or publish RoleReader accounts can retrieve document titles, ancestor block content snippets, reference text, and path metadata for publish-forbidden or password-protected documents by supplying block IDs.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.527", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72805"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24334, "pinned": false}, {"id": "CVE-2026-13433", "publisher": "IBM Corporation", "title": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product c", "summary": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00171, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.380", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i access client solutions", "vendor": "ibm", "type": "app", "affected": [">= 1.1.2 and < 1.1.9.14"], "fixed": "1.1.9.14", "safe": "before 1.1.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i-access-client-solutions || rpm -q i-access-client-solutions || i-access-client-solutions --version"}, {"label": "2. UPGRADE to 1.1.9.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i-access-client-solutions"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i-access-client-solutions"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i-access-client-solutions\nsudo apt install i-access-client-solutions=<VERSION_BEFORE_1.1.2>\nsudo apt-mark hold i-access-client-solutions"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i-access-client-solutions\nsudo dnf downgrade i-access-client-solutions-<VERSION_BEFORE_1.1.2>\nsudo dnf versionlock add i-access-client-solutions"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13433"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282954"}], "cwe": ["CWE-494"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.06201, "pinned": false}, {"id": "CVE-2026-66763", "publisher": "SAP SE", "title": "SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user o", "summary": "SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful exploitation could allow the attacker to obtain sensitive authentication data and modify protected information, resulting in a high impact on confidentiali", "cvss": 7.9, "sev": "HIGH", "epss": 0.00196, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.000", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66763"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08788, "pinned": false}, {"id": "CVE-2026-66777", "publisher": "SAP SE", "title": "SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend desti", "summary": "SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resources beyond their assigned scope. Successful exploitation could allow the attacker to read sensitive data and perform limited modifications on protected re", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00439, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:24.160", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66777"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37169, "pinned": false}, {"id": "CVE-2026-19517", "publisher": "Samsung TV & Appliance", "title": "Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vu", "summary": "Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T07:17:29.750", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "rlottie", "vendor": "samsung", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rlottie || rpm -q rlottie || rlottie --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19517"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/Samsung/rlottie/pull/596"}], "cwe": ["CWE-770", "CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27987, "pinned": false}, {"id": "CVE-2026-19518", "publisher": "Samsung TV & Appliance", "title": "Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input D", "summary": "Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T07:17:29.883", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "rlottie", "vendor": "samsung", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rlottie || rpm -q rlottie || rlottie --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19518"}, {"t": "Patch, Vendor Advisory", "u": "https://github.com/Samsung/rlottie/pull/596"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27988, "pinned": false}, {"id": "CVE-2026-72546", "publisher": "TuranSec", "title": "An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated", "summary": "An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the query to the authenticated organiser account. An attacker can modify event data and financial records across account boundaries.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.110", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72546"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19167, "pinned": false}, {"id": "CVE-2026-72547", "publisher": "TuranSec", "title": "An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated", "summary": "An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to other accounts via the postImportAttendee endpoint. The endpoint loads the target event by ID without verifying ownership against the requesting organiser account. An attacker can inject bulk attendee data into any event in the system regardless of account boundaries.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.233", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72547"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19168, "pinned": false}, {"id": "CVE-2026-72554", "publisher": "TuranSec", "title": "A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered", "summary": "A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API. The API verifies the existence of the requested ticket but not ownership, enabling any authenticated user to access arbitrary ticket threads including internal agent notes containing sensitive information.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0037, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.103", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72554"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29777, "pinned": false}, {"id": "CVE-2026-72598", "publisher": "TuranSec", "title": "A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to m", "summary": "A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to make the server issue HTTP requests to internal network addresses by registering a webhook URL pointing to an internal host. The webhook registration endpoint validates URL syntax via FILTER_VALIDATE_URL but applies no IP or host denylist. When the registered event fires, the server issues an HTTP POST to the attacker-supplied internal URL", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0037, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.787", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72598"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29779, "pinned": false}, {"id": "CVE-2026-72608", "publisher": "TuranSec", "title": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authent", "summary": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => label_creator permission to execute arbitrary SQL via the image_name field of a patron card layout. The image_name value is stored verbatim in the layout XML and later concatenated raw into a SQL query in patroncards/create-pdf.pl when a patron card batch is printed. An attacker can read the entire Koha data", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00379, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:43.987", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72608"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30747, "pinned": false}, {"id": "CVE-2026-72763", "publisher": "VulnCheck", "title": "n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials an", "summary": "n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow (when workflow sharing is enabled) who knows a target credential's ID can reference that credential in the inline JSON; it passes save-time and runtime validation and resolves in the parent workflow", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:06.367", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 1.123.67", ">= 2.31.0 and < 2.31.5", "2.32.0"], "fixed": "1.123.67, 2.31.5", "safe": "before 2.31.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 1.123.67", "cmd": "npm install n8n@\">=1.123.67\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.31.0", "cmd": "npm view n8n versions\nnpm install n8n@\"<2.31.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72763"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-cj9h-qx8g-pq2g"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28349, "pinned": false}, {"id": "CVE-2026-72771", "publisher": "VulnCheck", "title": "n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM n", "summary": "n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:07.490", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "n8n", "vendor": "n8n", "type": "app", "affected": ["< 2.31.5", "2.32.0"], "fixed": "2.31.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls n8n"}, {"label": "2. UPGRADE to 2.31.5", "cmd": "npm install n8n@\">=2.31.5\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72771"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/n8n-io/n8n/security/advisories/GHSA-64xh-79j6-r5v8"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28349, "pinned": false}, {"id": "CVE-2026-53414", "publisher": "Zoom Video Communications, Inc.", "title": "Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meet", "summary": "Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.713", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53414"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27988, "pinned": false}, {"id": "CVE-2026-6726", "publisher": "CERT/CC", "title": "An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local a", "summary": "An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.", "cvss": 7.9, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:34.397", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6726"}], "cwe": ["CWE-704"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0838, "pinned": false}, {"id": "CVE-2026-48447", "publisher": "Adobe Systems Incorporated", "title": "Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code ", "summary": "Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00218, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T18:17:33.157", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lightroom", "vendor": "adobe", "type": "app", "affected": ["< 15.5"], "fixed": "15.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lightroom || rpm -q lightroom || lightroom --version"}, {"label": "2. UPGRADE to 15.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lightroom"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lightroom"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48447"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/lightroom/apsb26-94.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.11648, "pinned": false}, {"id": "CVE-2026-17268", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00343, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.437", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17268"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26646, "pinned": false}, {"id": "CVE-2026-18675", "publisher": "Kong", "title": "The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header", "summary": "The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header. A token whose kid is a JSON number decodes as a float64 and triggers a runtime panic before any signature, claims, or authorization check runs.\n\n\n\nThe panic terminates the entire kuma-cp process, HTTP API, the health and readiness endpoints, and xDS. Unauthenticated access to the dataplane gRPC server can trigger the crash with a malformed toke", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00561, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T19:17:30.650", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18675"}], "cwe": ["CWE-248", "CWE-704"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.45921, "pinned": false}, {"id": "CVE-2026-18677", "publisher": "Kong", "title": "In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the data", "summary": "In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's kuma.io/workload label, the XDS authenticator in kuma-cp validates that label only when the dataplane token is bound to a workload. Workload binding is optional, so a dataplane presenting a tags-bound token can register with kuma.io/workload set to any value and obtain another workload's SPIFFE identity.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00427, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T19:17:31.063", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18677"}], "cwe": ["CWE-290"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35967, "pinned": false}, {"id": "CVE-2026-72802", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-only requests. Attackers can harvest relative asset paths from published documents and submit them to resolveAssetPath to obtain the server's absolute workspace path, disclosing the operating-system username and installation layout.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:52.110", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72802"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24335, "pinned": false}, {"id": "CVE-2026-13094", "publisher": "IBM Corporation", "title": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows wh", "summary": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.002, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:34.900", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i access client solutions", "vendor": "ibm", "type": "app", "affected": [">= 1.1.2 and < 1.1.9.14"], "fixed": "1.1.9.14", "safe": "before 1.1.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i-access-client-solutions || rpm -q i-access-client-solutions || i-access-client-solutions --version"}, {"label": "2. UPGRADE to 1.1.9.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i-access-client-solutions"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i-access-client-solutions"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i-access-client-solutions\nsudo apt install i-access-client-solutions=<VERSION_BEFORE_1.1.2>\nsudo apt-mark hold i-access-client-solutions"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i-access-client-solutions\nsudo dnf downgrade i-access-client-solutions-<VERSION_BEFORE_1.1.2>\nsudo dnf versionlock add i-access-client-solutions"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13094"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282954"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09401, "pinned": false}, {"id": "CVE-2026-16695", "publisher": "IBM Corporation", "title": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code ", "summary": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00205, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:36.427", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i access client solutions", "vendor": "ibm", "type": "app", "affected": [">= 1.1.2 and < 1.1.9.14"], "fixed": "1.1.9.14", "safe": "before 1.1.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i-access-client-solutions || rpm -q i-access-client-solutions || i-access-client-solutions --version"}, {"label": "2. UPGRADE to 1.1.9.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i-access-client-solutions"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i-access-client-solutions"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i-access-client-solutions\nsudo apt install i-access-client-solutions=<VERSION_BEFORE_1.1.2>\nsudo apt-mark hold i-access-client-solutions"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i-access-client-solutions\nsudo dnf downgrade i-access-client-solutions-<VERSION_BEFORE_1.1.2>\nsudo dnf versionlock add i-access-client-solutions"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16695"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282954"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09924, "pinned": false}, {"id": "CVE-2026-73422", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro's server-side View Transition CSS generator interpolates animation properties into an inline style element without escaping them for CSS and HTML contexts. An attacker-controlled View Transition animation value such as duration can terminate the generated style element and inject arbitrary HTML or JavaScript. The affected code is packages/astro/src/runtime/server/", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00547, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.187", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73422"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.45106, "pinned": false}, {"id": "CVE-2026-18750", "publisher": "CERT/CC", "title": "vinny/views.py: (ModifyEmailNotifications)\tIDOR: view fetches VinceCommEmail by raw pk from URL and toggles em", "summary": "vinny/views.py: (ModifyEmailNotifications)\tIDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor's contact.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:15.043", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18750"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24335, "pinned": false}, {"id": "CVE-2026-19003", "publisher": "MongoDB, Inc.", "title": "A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC D", "summary": "A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, and is reached only when a user opens the setup dialog for such a data source and initiates a file or folder selection. Depending on build configuration, t", "cvss": 7.8, "sev": "HIGH", "epss": 0.00211, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:15.153", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "bi connector odbc driver", "vendor": "mongodb", "type": "app", "affected": [">= 1.0.0 and < 1.4.9"], "fixed": "1.4.9", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-connector-odbc-driver || rpm -q bi-connector-odbc-driver || bi-connector-odbc-driver --version"}, {"label": "2. UPGRADE to 1.4.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bi-connector-odbc-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bi-connector-odbc-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-connector-odbc-driver\nsudo apt install bi-connector-odbc-driver=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold bi-connector-odbc-driver"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-connector-odbc-driver\nsudo dnf downgrade bi-connector-odbc-driver-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add bi-connector-odbc-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19003"}, {"t": "Vendor Advisory, Release Notes", "u": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10871, "pinned": false}, {"id": "CVE-2026-0299", "publisher": "Palo Alto Networks, Inc.", "title": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to", "summary": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00203, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:45.793", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.3.0 and < 6.3.3", "6.3.3", "6.3.3 h1", "6.3.3 h2"], "fixed": "6.0.15, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12", "6.2.8 h2"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": [">= 6.0.0 and < 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12", "6.2.8 h2"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.0.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.0.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0299"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0299"}], "cwe": ["CWE-426"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09763, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)", "url": "https://security.paloaltonetworks.com/CVE-2026-0299", "date": "2026-09-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-59502", "publisher": "Israel National Cyber Directorate", "title": ": Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft S", "summary": ": Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:15.257", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59502"}], "cwe": ["CWE-203"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.24903, "pinned": false}, {"id": "CVE-2026-66771", "publisher": "SAP SE", "title": "SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted ", "summary": "SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes. When another user subsequently opens the adapted application, the injected script executes in the victim's browser session. Successful exploitation could allow the attacker to access sensitive session data and perform unauthorized actions on behalf of the victim, resulting in a high impact on confidentiality and integ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00382, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.407", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66771"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31015, "pinned": false}, {"id": "CVE-2026-66779", "publisher": "SAP SE", "title": "Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated a", "summary": "Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed and reflected within the DOM on the client side during page rendering, resulting in the execution of malicious content in the victim's browser context. Successful exploitation could result", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00347, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:24.403", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66779"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27035, "pinned": false}, {"id": "CVE-2026-6181", "publisher": "Axis Communications AB", "title": "The Device Configuration Framework is vulnerable to an authentication bypass flaw", "summary": "The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after\u00a0authenticating with a viewer-privileged service account.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00393, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:16.850", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6181"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32336, "pinned": false}, {"id": "CVE-2026-19418", "publisher": "TYPO3", "title": "The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v", "summary": "The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Install Tool applications from the site's main entry script instead of the dedicated typo3/ directory.\n\nWhether a request originated from the backend or Install Tool itself was determined by comparing the referrer against the directory of the entry script, which since then is the site ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00242, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T08:17:20.533", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19418"}], "cwe": ["CWE-346", "CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14506, "pinned": false}, {"id": "CVE-2026-72560", "publisher": "TuranSec", "title": "A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSR", "summary": "A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal loopback addresses on the default installation. An authenticated user can use this to reach internal services, cloud metadata endpoints, and other resources not intended for external access.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.953", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72560"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26309, "pinned": false}, {"id": "CVE-2026-72597", "publisher": "TuranSec", "title": "A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated u", "summary": "A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny list. An attacker can use this to scan the internal network or access cloud metadata services.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:42.663", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72597"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26297, "pinned": false}, {"id": "CVE-2026-67179", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Genkit does not properly validate host request headers", "summary": "Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction on the Dev UI server (default port 4000) and execute any registered Genkit action and read the result. Fixed on 2026-06-18.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00186, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:34.113", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67179"}], "cwe": ["CWE-644"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07827, "pinned": false}, {"id": "CVE-2026-17420", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00369, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:27.073", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17420"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29601, "pinned": false}, {"id": "CVE-2026-46731", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa", "summary": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:44.170", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.17"], "fixed": "2.3.0.17", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46731"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.075, "pinned": false}, {"id": "CVE-2026-59914", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa", "summary": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:46.407", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.17"], "fixed": "2.3.0.17", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59914"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities"}], "cwe": ["CWE-284", "CWE-290"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.075, "pinned": false}, {"id": "CVE-2026-18888", "publisher": "MongoDB, Inc.", "title": "The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the", "summary": "The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt adjacent memory. A user who can store data in a collection read through the BI Connector could use this to crash the application performing the read.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00316, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:37.170", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "bi connector odbc driver", "vendor": "mongodb", "type": "app", "affected": [">= 1.0.0 and < 1.4.9"], "fixed": "1.4.9", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-connector-odbc-driver || rpm -q bi-connector-odbc-driver || bi-connector-odbc-driver --version"}, {"label": "2. UPGRADE to 1.4.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bi-connector-odbc-driver"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bi-connector-odbc-driver"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-connector-odbc-driver\nsudo apt install bi-connector-odbc-driver=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold bi-connector-odbc-driver"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-connector-odbc-driver\nsudo dnf downgrade bi-connector-odbc-driver-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add bi-connector-odbc-driver"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18888"}, {"t": "Vendor Advisory, Release Notes", "u": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.23271, "pinned": false}, {"id": "CVE-2026-19130", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the provider-credential-controller component of multicluster-engine (MCE)", "summary": "A flaw was found in the provider-credential-controller component of multicluster-engine (MCE). An attacker with specific permissions on the hub cluster, and knowledge of a prior credential value, could exploit an authorization bypass vulnerability. By manipulating `copiedFrom` labels, the attacker could intercept newly rotated provider credentials, leading to unauthorized information disclosure. This allows access to sensitive credentials that sh", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00399, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:37.703", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19130"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.33046, "pinned": false}, {"id": "CVE-2026-71846", "publisher": "Red Hat, Inc.", "title": "A flaw was found in insights-client", "summary": "A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client pod or ServiceAccount token would grant an attacker read access to all Secrets across the hub cluster, including managed-cluster kubeconfigs and other sens", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.143", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "advanced cluster management for kubernetes", "vendor": "redhat", "type": "app", "affected": ["2.0"], "fixed": null, "safe": "before 2.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy advanced-cluster-management-for-kubernetes || rpm -q advanced-cluster-management-for-kubernetes || advanced-cluster-management-for-kubernetes --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison advanced-cluster-management-for-kubernetes\nsudo apt install advanced-cluster-management-for-kubernetes=<VERSION_BEFORE_2.0>\nsudo apt-mark hold advanced-cluster-management-for-kubernetes"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list advanced-cluster-management-for-kubernetes\nsudo dnf downgrade advanced-cluster-management-for-kubernetes-<VERSION_BEFORE_2.0>\nsudo dnf versionlock add advanced-cluster-management-for-kubernetes"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "insights-client", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy insights-client || rpm -q insights-client || insights-client --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71846"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71846"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2512569"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.04851, "pinned": false}, {"id": "CVE-2026-19696", "publisher": "GitLab Inc.", "title": "Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Wi", "summary": "Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00122, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T09:17:12.983", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "wireshark", "vendor": "wireshark", "type": "app", "affected": [">= 4.6.0 and < 4.6.8"], "fixed": "4.6.8", "safe": "before 4.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wireshark || rpm -q wireshark || wireshark --version"}, {"label": "2. UPGRADE to 4.6.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wireshark"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wireshark"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wireshark\nsudo apt install wireshark=<VERSION_BEFORE_4.6.0>\nsudo apt-mark hold wireshark"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wireshark\nsudo dnf downgrade wireshark-<VERSION_BEFORE_4.6.0>\nsudo dnf versionlock add wireshark"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19696"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21455"}, {"t": "Vendor Advisory", "u": "https://www.wireshark.org/security/wnpa-sec-2026-82.html"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21455"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.0185, "pinned": false}, {"id": "CVE-2026-69116", "publisher": "VulnCheck", "title": "FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html d", "summary": "FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:32.160", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69116"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26014, "pinned": false}, {"id": "CVE-2026-72913", "publisher": "GitHub, Inc.", "title": "Kitty is a cross-platform GPU based terminal", "summary": "Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handle_remote_echo accepts printable shell command characters and handle_remote_ssh calls get_ssh_data in kittens/ssh/utils.py, which emits a newline; chaining the handlers can execute attacker-controlled commands when a user displays untrusted terminal data. Thi", "cvss": 7.3, "sev": "HIGH", "epss": 0.00207, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:26.297", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72913"}], "cwe": ["CWE-77", "CWE-93", "CWE-150"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10309, "pinned": false}, {"id": "CVE-2026-73156", "publisher": "CIRCL", "title": "Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and", "summary": "Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from STIX or MISP data, including STIX types, relationship_type, pattern prefixes, and MISP category/type values. Since ECharts interprets the formatter return value as HTML, crafted values can inject markup or script-capable content into the tooltip.\n\n\nAn attacker who can ca", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00444, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T08:17:21.323", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73156"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37587, "pinned": false}, {"id": "CVE-2026-72541", "publisher": "TuranSec", "title": "A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated works", "summary": "A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to overwrite any resource type schema via the update_resource_type endpoint. The endpoint omits the administrator permission check that the corresponding delete_resource_type endpoint enforces. An attacker with workspace member privileges can corrupt resource type definitions, breaking workflows that depend on them.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.470", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72541"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21508, "pinned": false}, {"id": "CVE-2026-19434", "publisher": "Secur0", "title": "Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to ", "summary": "Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when rendering the report.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00467, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:13.433", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19434"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39535, "pinned": false}, {"id": "CVE-2026-73210", "publisher": "CIRCL", "title": "A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_globa", "summary": "A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_global_lookup option was enabled.\n\nPlaywrightCapture implements this option to prevent captures from accessing local, loopback, or otherwise non-public network resources. However, favicon retrieval was performed separately from the browser request-routing protections. Favicon URLs extracted from rendered HTML were resolved and subsequently fet", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00468, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T14:17:16.070", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73210"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39583, "pinned": false}, {"id": "CVE-2026-11733", "publisher": "Netgear, Inc.", "title": "A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily inte", "summary": "A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00514, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:26.917", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "rax41 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax42 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax42v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax43 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax43v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11733"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.42922, "pinned": false}, {"id": "CVE-2026-53416", "publisher": "Zoom Video Communications, Inc.", "title": "Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosur", "summary": "Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00214, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:32.960", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53416"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11127, "pinned": false}, {"id": "CVE-2026-73085", "publisher": "GitHub, Inc.", "title": "Audiobookshelf is a self-hosted audiobook and podcast server", "summary": "Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to /auth/refresh, allowing refresh tokens to authenticate as the associated users. This issue is fixed in version 2.36.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00465, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:16.557", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73085"}], "cwe": ["CWE-287"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39314, "pinned": false}, {"id": "CVE-2026-18673", "publisher": "Kong", "title": "When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readine", "summary": "When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.\n\n\n\nAn attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: c", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00456, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T19:17:30.480", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18673"}], "cwe": ["CWE-200", "CWE-306"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38656, "pinned": false}, {"id": "CVE-2026-59916", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro", "summary": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:46.547", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.17"], "fixed": "2.3.0.17", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59916"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03793, "pinned": false}, {"id": "CVE-2026-59917", "publisher": "Dell", "title": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro", "summary": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00149, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:46.663", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "display and peripheral manager", "vendor": "dell", "type": "app", "affected": ["< 2.3.0.17"], "fixed": "2.3.0.17", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy display-and-peripheral-manager || rpm -q display-and-peripheral-manager || display-and-peripheral-manager --version"}, {"label": "2. UPGRADE to 2.3.0.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade display-and-peripheral-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade display-and-peripheral-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59917"}, {"t": "Vendor Advisory", "u": "https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03793, "pinned": false}, {"id": "CVE-2026-13367", "publisher": "IBM Corporation", "title": "IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s", "summary": "IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00137, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.260", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "informix dynamic server", "vendor": "ibm", "type": "app", "affected": ["14.10", "15.0"], "fixed": null, "safe": "before 14.10", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy informix-dynamic-server || rpm -q informix-dynamic-server || informix-dynamic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.10 (Debian / Ubuntu)", "cmd": "apt-cache madison informix-dynamic-server\nsudo apt install informix-dynamic-server=<VERSION_BEFORE_14.10>\nsudo apt-mark hold informix-dynamic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list informix-dynamic-server\nsudo dnf downgrade informix-dynamic-server-<VERSION_BEFORE_14.10>\nsudo dnf versionlock add informix-dynamic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13367"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282829"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0285, "pinned": false}, {"id": "CVE-2026-0294", "publisher": "Palo Alto Networks, Inc.", "title": "A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma\u00ae Access Agent app on Windows and ma", "summary": "A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma\u00ae Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. \n\nThe Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00115, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:44.323", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma access agent", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 26.3"], "fixed": "26.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-access-agent || rpm -q prisma-access-agent || prisma-access-agent --version"}, {"label": "2. UPGRADE to 26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-access-agent"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-access-agent"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0294"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0294"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01444, "pinned": false}, {"id": "CVE-2026-69112", "publisher": "VulnCheck", "title": "Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and", "summary": "Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00187, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T20:17:31.853", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69112"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07902, "pinned": false}, {"id": "CVE-2026-58235", "publisher": "SAP SE", "title": "SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and dat", "summary": "SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availa", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.437", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58235"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2099, "pinned": false}, {"id": "CVE-2026-18247", "publisher": "BlackBerry", "title": "A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-73", "summary": "A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00418, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:17:48.220", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18247"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35038, "pinned": false}, {"id": "CVE-2026-63295", "publisher": "Canonical Ltd.", "title": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level containe", "summary": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges (such as enforcing restricted.containers.privilege=isolated), LXD fails to enforce the requirement if an instance configuration omits the security.idmap.isolated key. An attacker can exploit this flaw by creating or updating an instance withou", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00349, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:47.303", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "lxd", "vendor": "canonical", "type": "app", "affected": [">= 4.0.0 and < 4.0.12", ">= 5.0.0 and < 5.0.8", ">= 5.1 and < 5.21.6", ">= 6.0 and < 6.10"], "fixed": "4.0.12, 5.0.8, 5.21.6, 6.10", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy lxd || rpm -q lxd || lxd --version"}, {"label": "2. UPGRADE to 4.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade lxd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade lxd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison lxd\nsudo apt install lxd=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold lxd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list lxd\nsudo dnf downgrade lxd-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add lxd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63295"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-7vp9-3vmp-c5jm"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/canonical/lxd/security/advisories/GHSA-7vp9-3vmp-c5jm"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.2728, "pinned": false}, {"id": "CVE-2026-72787", "publisher": "VulnCheck", "title": "Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel wher", "summary": "Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and cards. A low-privilege user who can create element drafts can inject malicious JavaScript that executes in the browser of any higher-privileged user viewing the affected element, allowing account creation and other authenticated actions.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:49.977", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72787"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16885, "pinned": false}, {"id": "CVE-2026-14866", "publisher": "IBM Corporation", "title": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authori", "summary": "IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00107, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:35.757", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i access client solutions", "vendor": "ibm", "type": "app", "affected": [">= 1.1.2 and < 1.1.9.14"], "fixed": "1.1.9.14", "safe": "before 1.1.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i-access-client-solutions || rpm -q i-access-client-solutions || i-access-client-solutions --version"}, {"label": "2. UPGRADE to 1.1.9.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i-access-client-solutions"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i-access-client-solutions"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.2 (Debian / Ubuntu)", "cmd": "apt-cache madison i-access-client-solutions\nsudo apt install i-access-client-solutions=<VERSION_BEFORE_1.1.2>\nsudo apt-mark hold i-access-client-solutions"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i-access-client-solutions\nsudo dnf downgrade i-access-client-solutions-<VERSION_BEFORE_1.1.2>\nsudo dnf versionlock add i-access-client-solutions"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14866"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282954"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01086, "pinned": false}, {"id": "CVE-2026-11811", "publisher": "Zephyr Project", "title": "The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the ", "summary": "The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open", "cvss": 3.7, "sev": "LOW", "epss": 0.00405, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T23:16:50.893", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11811"}], "cwe": ["CWE-772"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33602, "pinned": false}, {"id": "CVE-2026-66770", "publisher": "SAP SE", "title": "Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inj", "summary": "Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL (Data Definition Language) string into the underlying database without further authorization. Successful exploitation could allow the attacker to make malicious changes to the database structure, resulting in a low impact to the confidentiality, integrity, and availability of the system.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.260", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66770"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17503, "pinned": false}, {"id": "CVE-2026-66773", "publisher": "SAP SE", "title": "A malicious or compromised OData service could disclose sensitive authentication information and inject untrus", "summary": "A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.660", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66773"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2219, "pinned": false}, {"id": "CVE-2026-5304", "publisher": "Axis Communications AB", "title": "An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation", "summary": "An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP\u00a0application.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:16.720", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5304"}], "cwe": ["CWE-1287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23074, "pinned": false}, {"id": "CVE-2026-73158", "publisher": "CIRCL", "title": "Affected versions of cti-transmute insufficiently validate saved graph configuration data", "summary": "Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick, and Pivotick interprets svgIcon as HTML. Because saved configurations may be created by one user and later displayed to other users\u2014including administrators\u2014a malicious user could store a crafted svgIcon value that executes script in another viewer\u2019s browser.\n\n\nThe fix in", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T09:17:14.763", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73158"}], "cwe": ["CWE-20", "CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32669, "pinned": false}, {"id": "CVE-2026-73159", "publisher": "CIRCL", "title": "Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML thro", "summary": "Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon() previously constructed an HTML string directly from the icon value:\n\n\n<i class=\"fas fa-${name}\"></i>\n\n\nBecause the icon is user-supplied, a crafted value could break out of the intended markup and inject attacker-controlled HTML. When the affected tag was later rendered, including on the administrati", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T09:17:14.897", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73159"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32666, "pinned": false}, {"id": "CVE-2026-73161", "publisher": "CIRCL", "title": "Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlig", "summary": "Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted <mark> tags without first escaping the original content. Because the resulting value is used by an HTML-rendering sink, malicious markup contained in conversion data cou", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T09:17:15.163", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73161"}], "cwe": ["CWE-79", "CWE-116"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32668, "pinned": false}, {"id": "CVE-2026-18250", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and b", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:28.253", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18250"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1755, "pinned": false}, {"id": "CVE-2026-19657", "publisher": "Tenable Network Security, Inc.", "title": "ScadaLTS 2.7.8.1\u00a0reflects user-supplied input into an HTML response without sanitization", "summary": "ScadaLTS 2.7.8.1\u00a0reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:43.060", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "scada-lts", "vendor": "scada-lts", "type": "app", "affected": ["2.7.8.1"], "fixed": null, "safe": "before 2.7.8.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scada-lts || rpm -q scada-lts || scada-lts --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.7.8.1 (Debian / Ubuntu)", "cmd": "apt-cache madison scada-lts\nsudo apt install scada-lts=<VERSION_BEFORE_2.7.8.1>\nsudo apt-mark hold scada-lts"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scada-lts\nsudo dnf downgrade scada-lts-<VERSION_BEFORE_2.7.8.1>\nsudo dnf versionlock add scada-lts"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19657"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1925, "pinned": false}, {"id": "CVE-2026-0289", "publisher": "Palo Alto Networks, Inc.", "title": "A  security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma\u00ae Browser enabl", "summary": "A  security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma\u00ae Browser enables\u00a0a user to bypass intended security controls.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:43.107", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma browser", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 150.49.4.125"], "fixed": "150.49.4.125", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-browser || rpm -q prisma-browser || prisma-browser --version"}, {"label": "2. UPGRADE to 150.49.4.125 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-browser"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-browser"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0289"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0289"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.12486, "pinned": false}, {"id": "CVE-2026-71969", "publisher": "VulnCheck", "title": "OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD", "summary": "OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying an input length exceeding the RSA modulus size. When src_len exceeds rsa_len, the subtraction expression wraps to a large unsigned value, causing a subse", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00182, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:32.400", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71969"}], "cwe": ["CWE-124", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07443, "pinned": false}, {"id": "CVE-2026-11809", "publisher": "Zephyr Project", "title": "The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory", "summary": "The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe(). The probe response from the UpdateHub server is copied into a heap buffer (metadata) that is correctly NUL-terminated, but a second buffer (metadata_copy) is allocated with k_malloc (unzeroed) and filled with memcpy(metadata_copy, metadata, strlen(metadata)), which omits the terminating NUL. Everything a", "cvss": 3.7, "sev": "LOW", "epss": 0.00353, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:18.190", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11809"}], "cwe": ["CWE-125", "CWE-908"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27822, "pinned": false}, {"id": "CVE-2026-58237", "publisher": "SAP SE", "title": "WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality", "summary": "WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited modifications, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.677", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58237"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19183, "pinned": false}, {"id": "CVE-2026-58239", "publisher": "SAP SE", "title": "SAP Approuter does not sufficiently validate tenant context in inbound requests", "summary": "SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful exploitation could allow limited access to another tenant's information, resulting in a low impact on confidentiality. There is no impact on integrity and availability.", "cvss": 3.7, "sev": "LOW", "epss": 0.00346, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:21.923", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58239"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-807"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26963, "pinned": false}, {"id": "CVE-2026-66774", "publisher": "SAP SE", "title": "SAP Approuter does not consistently handle certain error conditions", "summary": "SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.", "cvss": 3.7, "sev": "LOW", "epss": 0.00353, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.787", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66774"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27821, "pinned": false}, {"id": "CVE-2026-73140", "publisher": "CIRCL", "title": "Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation", "summary": "Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges, build_evaluation_report() previously included all evaluation comments without applying those rules.\n\n\nConsequently, a user who was authorized to view a conversion co", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T08:17:21.040", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73140"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27518, "pinned": false}, {"id": "CVE-2026-73155", "publisher": "CIRCL", "title": "Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments with", "summary": "Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment.\n\n\nThe vulnerable react() handler passed an attacker-controlled comment_id directly to comments_repo.toggle_reaction() after only validating that the ID existed syntactically and that the requested emoji was permitted. Because comment-level visibility was not", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T08:17:21.183", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73155"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27524, "pinned": false}, {"id": "CVE-2026-48483", "publisher": "GitHub, Inc.", "title": "TypeBot is a chatbot builder tool", "summary": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only validated as a generic URL in settings, but the forwarding code uses the raw `ky` instance instead of the repository's SSRF-protected `safeKy` client. A workspace user who can configure Whats", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:18:02.067", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48483"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25008, "pinned": false}, {"id": "CVE-2026-73295", "publisher": "GitHub, Inc.", "title": "Material for MkDocs is a powerful documentation framework built on top of MkDocs", "summary": "Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature that allows a crafted q URL parameter to execute JavaScript in a documentation site's origin after user interaction. This issue is fixed in versio", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00327, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T17:17:32.637", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73295"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24559, "pinned": false}, {"id": "CVE-2026-17109", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a com", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00447, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:25.503", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17109"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.37918, "pinned": false}, {"id": "CVE-2026-18097", "publisher": "IBM Corporation", "title": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Ser", "summary": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:36.930", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5.0 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5.0>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5.0>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5.0 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5.0>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5.0>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5.0 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5.0>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5.0>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18097"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282952"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.03502, "pinned": false}, {"id": "CVE-2026-0295", "publisher": "Palo Alto Networks, Inc.", "title": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-", "summary": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00075, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:44.493", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "globalprotect", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 6.0.15", ">= 6.2.0 and < 6.2.8", ">= 6.3.0 and < 6.3.3", "6.2.8", "6.2.8 h1", "6.2.8 h10", "6.2.8 h11", "6.2.8 h12"], "fixed": "6.0.15, 6.2.8, 6.3.3", "safe": "before 6.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy globalprotect || rpm -q globalprotect || globalprotect --version"}, {"label": "2. UPGRADE to 6.0.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade globalprotect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade globalprotect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison globalprotect\nsudo apt install globalprotect=<VERSION_BEFORE_6.2.0>\nsudo apt-mark hold globalprotect"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list globalprotect\nsudo dnf downgrade globalprotect-<VERSION_BEFORE_6.2.0>\nsudo dnf versionlock add globalprotect"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0295"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0295"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.00079, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)", "url": "https://security.paloaltonetworks.com/CVE-2026-0295", "date": "2026-09-12"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-18368", "publisher": "Teltonika Networks", "title": "In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd\n due to improper handling of Modbus T", "summary": "In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd\n due to improper handling of Modbus TCP request data. A remote, \nunauthenticated attacker with access to the affected service could \ntrigger a heap-based buffer overflow, resulting in a denial of service.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T11:17:38.497", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18368"}], "cwe": ["CWE-122"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1554, "pinned": false}, {"id": "CVE-2026-71968", "publisher": "VulnCheck", "title": "OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Appl", "summary": "OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TA_FLAG_CONCURRENT flag in a user TA signed header. Attackers can cause two concurrent sessions to operate on the same shared context without locking, corrupting the uctx->vm_info.regions list dur", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00136, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:32.263", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71968"}], "cwe": ["CWE-362", "CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02731, "pinned": false}, {"id": "CVE-2026-72743", "publisher": "VulnCheck", "title": "SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQ", "summary": "SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that executes for all users viewing the dashboard.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:24.370", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72743"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21385, "pinned": false}, {"id": "CVE-2026-66760", "publisher": "SAP SE", "title": "SAP Approuter does not correctly validate client certificates in certain callback flows", "summary": "SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. This complexity makes the attack difficult to execute. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiali", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00181, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.757", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66760"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07275, "pinned": false}, {"id": "CVE-2026-11893", "publisher": "Zephyr Project", "title": "The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drive", "summary": "The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetooth/hci/hci_bflb.c, violates the bt_hci_driver_api.send() buffer-ownership contract. That contract (documented at include/zephyr/drivers/bluetooth.h) requires the buffer reference to be consumed only on success; on error the caller still owns the reference and unrefs it. The driver instead routed all error paths through a shared ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00246, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T05:17:11.567", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11893"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15019, "pinned": false}, {"id": "CVE-2026-11894", "publisher": "Zephyr Project", "title": "The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, vi", "summary": "The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the bt_hci_driver_api buffer-ownership contract. That contract requires the driver to consume (unref) the transmit net_buf only on success; on an error return the host caller retains ownership and unrefs the buffer itself. The pre-fix code routed all error paths through a shared cleanup label that unconditionally called net_buf_unr", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00246, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:11.820", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11894"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15019, "pinned": false}, {"id": "CVE-2026-72542", "publisher": "TuranSec", "title": "A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators", "summary": "A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the workspace regardless of ownership. The job_metrics handlers accept no authorization extractor, bypassing workspace-level access controls. An operator can monitor sensitive job execution data and inject misleading progress for jobs they do not own.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:39.607", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72542"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21536, "pinned": false}, {"id": "CVE-2026-72783", "publisher": "VulnCheck", "title": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traver", "summary": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class. The order of operations validates the path before normalization, so normalization could invalidate prior validation assumptions (a desanitization-style issue) and potentially resolve to files outside the intended volume directory. The vendor notes the issue", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.940", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72783"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08959, "pinned": false}, {"id": "CVE-2026-73066", "publisher": "GitHub, Inc.", "title": "Tesseract is an open source OCR engine", "summary": "Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00126, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:38.777", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73066"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02123, "pinned": false}, {"id": "CVE-2026-73067", "publisher": "GitHub, Inc.", "title": "Tesseract is an open source OCR engine", "summary": "Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00126, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:38.927", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73067"}], "cwe": ["CWE-125"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02123, "pinned": false}, {"id": "CVE-2026-73035", "publisher": "VulnCheck", "title": "npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulne", "summary": "npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --format homepage or --format repo option, unfiltered escape sequences are written directly to the terminal, enabling malicious output manipulation or other te", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:26.760", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73035"}], "cwe": ["CWE-150"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30135, "pinned": false}, {"id": "CVE-2026-66761", "publisher": "SAP SE", "title": "SAP Approuter does not enforce sufficient flow control in certain functionality", "summary": "SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on availability. There is no impact on confidentiality and integrity.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00382, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.880", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66761"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30978, "pinned": false}, {"id": "CVE-2026-66776", "publisher": "SAP SE", "title": "SAP Approuter does not consistently enforce integrity verification on certain session-related request headers ", "summary": "SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could send a specially crafted request that bypasses the integrity check and loads another user's session context. Successful exploitation requires the attacker to have previously observed matching session values out-of-band, which makes the attack complex to execute. This could r", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.002, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:24.030", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66776"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09425, "pinned": false}, {"id": "CVE-2026-12052", "publisher": "Zephyr Project", "title": "The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usb", "summary": "The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c builds a fixed-size response for the GET_NTB_PARAMETERS (28-byte struct ntb_parameters) and GET_NTB_INPUT_SIZE (8-byte struct ntb_input_size) class requests and copies the whole structure into the control DATA IN buffer with net_buf_add_mem(buf, ..., sizeof(...)), ignoring the host-supplied wLength.\n\nThe control DATA IN buffer", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:12.747", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12052"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17553, "pinned": false}, {"id": "CVE-2026-5303", "publisher": "Axis Communications AB", "title": "The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially le", "summary": "The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the\u00a0victim to install a malicious ACAP application.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:16.590", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5303"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1271, "pinned": false}, {"id": "CVE-2026-72779", "publisher": "VulnCheck", "title": "Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability", "summary": "Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create() Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator (with allowAdminChanges=true) to configure a malicious entry type title or URI format that instantiates SplFileObject in a non-sandboxed template context. When a user subsequently cr", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00376, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:08.360", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72779"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30335, "pinned": false}, {"id": "CVE-2026-72784", "publisher": "VulnCheck", "title": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a server-side request for", "summary": "Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL save<Volume>Asset mutation, which fetches an attacker-supplied URL server-side. The anti-SSRF validation is incomplete: validateIp() does not cover CGNAT (100.64.0.0/10) or NAT64 (64:ff9b::/96) ranges, and the only IP check runs after the request has already been issued. An attacker holding a GraphQL toke", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:09.077", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72784"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14475, "pinned": false}, {"id": "CVE-2026-17535", "publisher": "Rapid7, Inc.", "title": "Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be tr", "summary": "Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images.\n\nTypically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However, in some applications (e.g.\u00a0 dead disk forensics https://docs.velociraptor.app/docs/forensic/deaddisk/ ) Velociraptor may be used on untrusted NTFS ima", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T15:17:27.927", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17535"}], "cwe": ["CWE-125", "CWE-369", "CWE-789"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04516, "pinned": false}, {"id": "CVE-2026-73087", "publisher": "GitHub, Inc.", "title": "Dozzle is a realtime log viewer for docker containers", "summary": "Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible IPv6 addresses, allowing an authenticated user to reach loopback or link-local targets that the guard intends to block. This issue is fixed in version 10.", "cvss": 2.3, "sev": "LOW", "epss": 0.00465, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T17:19:16.830", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73087"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.39315, "pinned": false}, {"id": "CVE-2026-18676", "publisher": "Kong", "title": "The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpa", "summary": "The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpage the operator visits while the control plane is reachable from their browser.\u00a0Due to a CORS misconfiguration a cross-origin fetch() from a malicious page returns the admin JWT and signing material.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T19:17:30.813", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18676"}], "cwe": ["CWE-346", "CWE-942"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21324, "pinned": false}, {"id": "CVE-2026-50544", "publisher": "GitHub, Inc.", "title": "NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight", "summary": "NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at `src/platform/windows/misc.cpp` lives at `C:\\ProgramData\\LuminalShine\\config\\apps.json` and is created by the `SYSTEM` service. Under Windows' default `C:\\ProgramData` inheritance, that gives `BUILTIN\\Users` only Read+Execute \u2014 not writable \u2014 so the canonical EoP doesn't actually tr", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.930", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50544"}], "cwe": ["CWE-379", "CWE-732"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02009, "pinned": false}, {"id": "CVE-2026-72906", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the send_auto_email function in erpnext/accounts/doctype/process_statement_of_accounts/process_statement_of_accounts.py lacks a Process Statement Of Accounts permission check, allowing an authenticated low-privilege user to trigger automated emails outside the permitted role. This issue is fixed in versions 15.111.0 and 16.22.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:25.320", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72906"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27905, "pinned": false}, {"id": "CVE-2026-72918", "publisher": "GitHub, Inc.", "title": "Rocket.Chat is an open-source, secure, fully customizable communications platform", "summary": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender is not checked, and the client-side UI can create an ephemeral fake message in another user's currently open chat. This issue is fixed in versions 7.10.1", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T22:17:10.807", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72918"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12519, "pinned": false}, {"id": "CVE-2026-33922", "publisher": "Nozomi Networks Inc.", "title": "A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface", "summary": "A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user with administrative credentials for the web interface could submit an archive name containing traversal sequences and delete arbitrary files reachable by the Arc process, which runs with administrative privileges on the host.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00166, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T10:17:12.257", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33922"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05586, "pinned": false}, {"id": "CVE-2026-73162", "publisher": "CIRCL", "title": "Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests:\n\n\n\n ", "summary": "Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests:\n\n\n\n  *  \n/account/follow\n\n\n  *  \n/account/delete_notification\n\n\n  *  \n/account/mark_notification_read\n\n\n  *  \n/account/mark_all_read\n\n\n\n\n\nThese endpoints require authentication, but before the fix they could be invoked with simple GET requests. That makes them susceptible to cross-site request forgery because a third-party site can induce the", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00248, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T10:17:13.180", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73162"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15191, "pinned": false}, {"id": "CVE-2026-72553", "publisher": "TuranSec", "title": "A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject", "summary": "A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields cust_blurb and cust_locate. The fields are saved without HTML encoding and rendered unescaped in profile views visible to administrators. An attacker can craft a payload that executes in an administrator session, enabling session hijacking or privilege escalation.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:40.980", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72553"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12577, "pinned": false}, {"id": "CVE-2026-72559", "publisher": "TuranSec", "title": "A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject ", "summary": "A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can use this to steal session cookies or perform actions in the context of other users including administrators.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:41.833", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72559"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12577, "pinned": false}, {"id": "CVE-2026-72610", "publisher": "TuranSec", "title": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authent", "summary": "A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers => edit_borrowers permission to cause a time-based denial of service by storing a SQL payload in a patron lang field. The value is concatenated raw into a subquery in Koha::AdditionalContents->search_for_display when an issue slip is printed for the affected patron. The 25-character column length limits exp", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00336, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T12:17:44.257", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72610"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25824, "pinned": false}, {"id": "CVE-2026-19078", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the oauth-server component", "summary": "A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an attacker-controlled website. This could enable phishing attacks, potentially tricking users into revealing sensitive information.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00357, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:31.620", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19078"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2821, "pinned": false}, {"id": "CVE-2026-56720", "publisher": "VulnCheck", "title": "CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users contro", "summary": "CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint with an enumerable sequential integer user ID to disclose profile information of any user, including administrators, due to the profile action being exc", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:33.403", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56720"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2653, "pinned": false}, {"id": "CVE-2026-6727", "publisher": "CERT/CC", "title": "A timing side-channel vulnerability exists in the RSA OAEP decryption implementation", "summary": "A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00152, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:34.503", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6727"}], "cwe": ["CWE-208"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04055, "pinned": false}, {"id": "CVE-2026-17222", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables ", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00345, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T18:17:26.027", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": [">= 7.3 and <= 7.6"], "fixed": "newer than 7.6", "safe": "before 7.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. UPGRADE to newer than 7.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade i"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade i"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17222"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283289"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26838, "pinned": false}, {"id": "CVE-2026-18148", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navi", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00345, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:41.063", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18148"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-117"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26838, "pinned": false}, {"id": "CVE-2026-73423", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware() primitive, while actions() and pages() can dispatch to user code independently. Mounting actions() before middleware(), as in the examples/advanced-routing example and Cloudflare Hono documentation, allows cross-origin form-encoded action requests to execute before the origin ", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.340", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73423"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17406, "pinned": false}, {"id": "CVE-2026-73425", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each image.remotePatterns entry into a regular expression written to .netlify/v1/config.json under images.remote_images for Netlify's Image CDN allowlist. In packages/integrations/netlify/src/index.ts, remotePatternToRegex() escapes dots in hostname values but interpolates literal pathname values without escaping regular expression metacharact", "cvss": 3.7, "sev": "LOW", "epss": 0.00269, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.473", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73425"}], "cwe": ["CWE-185"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18094, "pinned": false}, {"id": "CVE-2026-73490", "publisher": "GitHub, Inc.", "title": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o", "summary": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanitizer applies its local-reference restriction only to the xlink:href attribute on SVG use and feImage elements, while browsers also accept the plain href attribute. A crafted sanitized SVG can therefore reference an arbitrary same-origin external document; use may render external SVG content", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00296, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:42.127", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73490"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.211, "pinned": false}, {"id": "CVE-2026-0292", "publisher": "Palo Alto Networks, Inc.", "title": "An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma\u00ae Access Agent on Win", "summary": "An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to  inject and intercept arbitrary network traffic.\n\nThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.0013, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:43.983", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma access agent", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 26.3"], "fixed": "26.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-access-agent || rpm -q prisma-access-agent || prisma-access-agent --version"}, {"label": "2. UPGRADE to 26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-access-agent"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-access-agent"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0292"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0292"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02365, "pinned": false}, {"id": "CVE-2026-19694", "publisher": "GitLab Inc.", "title": "TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service", "summary": "TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00129, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T09:17:12.713", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "wireshark", "vendor": "wireshark", "type": "app", "affected": [">= 4.6.0 and < 4.6.8"], "fixed": "4.6.8", "safe": "before 4.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wireshark || rpm -q wireshark || wireshark --version"}, {"label": "2. UPGRADE to 4.6.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wireshark"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wireshark"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wireshark\nsudo apt install wireshark=<VERSION_BEFORE_4.6.0>\nsudo apt-mark hold wireshark"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wireshark\nsudo dnf downgrade wireshark-<VERSION_BEFORE_4.6.0>\nsudo dnf versionlock add wireshark"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19694"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21389"}, {"t": "Vendor Advisory", "u": "https://www.wireshark.org/security/wnpa-sec-2026-68.html"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21389"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.02289, "pinned": false}, {"id": "CVE-2026-19695", "publisher": "GitLab Inc.", "title": "Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service", "summary": "Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T09:17:12.857", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "wireshark", "vendor": "wireshark", "type": "app", "affected": [">= 4.6.0 and < 4.6.8"], "fixed": "4.6.8", "safe": "before 4.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wireshark || rpm -q wireshark || wireshark --version"}, {"label": "2. UPGRADE to 4.6.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wireshark"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wireshark"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wireshark\nsudo apt install wireshark=<VERSION_BEFORE_4.6.0>\nsudo apt-mark hold wireshark"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wireshark\nsudo dnf downgrade wireshark-<VERSION_BEFORE_4.6.0>\nsudo dnf versionlock add wireshark"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19695"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21475"}, {"t": "Vendor Advisory", "u": "https://www.wireshark.org/security/wnpa-sec-2026-90.html"}, {"t": "Exploit, Mitigation", "u": "https://gitlab.com/wireshark/wireshark/-/work_items/21475"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.01642, "pinned": false}, {"id": "CVE-2026-71967", "publisher": "VulnCheck", "title": "OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Wi", "summary": "OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients to cause a denial of service when CFG_WIDEVINE_PTA is enabled. Attackers can open a session directly on the Widevine PTA to trigger an unconditional dereference of a NULL calling session pointer via is_user_ta_ctx(), faulting the TEE at S-EL1 and crashing the trusted e", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T19:17:32.103", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71967"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06033, "pinned": false}, {"id": "CVE-2026-72912", "publisher": "GitHub, Inc.", "title": "CyberChef is a web app for encryption, encoding, compression, and data analysis", "summary": "CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can exhaust client-side CPU when a malformed #recipe= URL fragment containing a large number of unmatched quote characters reaches Utils.parseRecipeConfig(). The function synchronously applies a complex global regular expression that may perform heavy backtracking before rejecting the input, caus", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00315, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T21:17:26.130", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72912"}], "cwe": ["CWE-400", "CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23208, "pinned": false}, {"id": "CVE-2026-72919", "publisher": "GitHub, Inc.", "title": "Rocket.Chat is an open-source, secure, fully customizable communications platform", "summary": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the channels.convertToTeam REST endpoint allows an authenticated registered user with the create-team permission to convert an unrelated public channel by supplying channelName instead of channelId because the edit-room permission is checked only for channelId. This issue is fixed in versions 7.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T22:17:10.957", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72919"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24366, "pinned": false}, {"id": "CVE-2026-66772", "publisher": "SAP SE", "title": "SAP BusinessObjects Business Intelligence Platform (Admin Tools)  does not perform sufficient authorization ch", "summary": "SAP BusinessObjects Business Intelligence Platform (Admin Tools)  does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain limited information about affected functionality. This results in a low impact on confidentiality. There is no impact on integrity and availability.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00305, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.540", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66772"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22086, "pinned": false}, {"id": "CVE-2026-18348", "publisher": "Rapid7, Inc.", "title": "Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticat", "summary": "Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.", "cvss": 4.1, "sev": "MEDIUM", "epss": 0.00337, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:13.287", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18348"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25957, "pinned": false}, {"id": "CVE-2026-11734", "publisher": "Netgear, Inc.", "title": "A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the a", "summary": "A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.", "cvss": 2.7, "sev": "LOW", "epss": 0.00603, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:27.140", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "mr70 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.4.48"], "fixed": "1.0.4.48", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mr90 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.2.46"], "fixed": "1.0.2.46", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ms70 firmware", "vendor": "netgear", "type": "os", "affected": ["<= 1.0.4.48"], "fixed": "newer than 1.0.4.48", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ms90 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.2.46"], "fixed": "1.0.2.46", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11734"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.48196, "pinned": false}, {"id": "CVE-2026-18679", "publisher": "Kong", "title": "When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the dat", "summary": "When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connection.\n\n\n\nAn on-path actor can intercept the dataplane authentication token and impersonate the control plane to the data plane, injecting a forged bootstrap configuration and taking over the proxy.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:41.957", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18679"}], "cwe": ["CWE-295"], "vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0461, "pinned": false}, {"id": "CVE-2026-16480", "publisher": "IBM Corporation", "title": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerabilit", "summary": "IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00335, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:36.293", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": [">= 11.5 and <= 11.5.9", ">= 12.1.0 and <= 12.1.5"], "fixed": "newer than 12.1.5", "safe": "before 11.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. UPGRADE to newer than 12.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade db2"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade db2"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 11.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_11.5>\nsudo apt-mark hold db2"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_11.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16480"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282951"}], "cwe": ["CWE-602"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.25654, "pinned": false}, {"id": "CVE-2026-0293", "publisher": "Palo Alto Networks, Inc.", "title": "A vulnerability in Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local attacker with administra", "summary": "A vulnerability in Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.\n\nThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00108, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:44.160", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma access agent", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 26.3"], "fixed": "26.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-access-agent || rpm -q prisma-access-agent || prisma-access-agent --version"}, {"label": "2. UPGRADE to 26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-access-agent"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-access-agent"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0293"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0293"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01147, "pinned": false}, {"id": "CVE-2026-16458", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Padding oracle attack vulnerability in Oberon microsystem AG\u2019s ocrypto library in all versions since 3.0.0 and", "summary": "Padding oracle attack vulnerability in Oberon microsystem AG\u2019s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00091, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T09:17:12.283", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16458"}], "cwe": ["CWE-208", "CWE-327"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00466, "pinned": false}, {"id": "CVE-2026-16459", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Padding oracle attack vulnerability in Oberon microsystem AG\u2019s Oberon PSA Crypto library in all versions since", "summary": "Padding oracle attack vulnerability in Oberon microsystem AG\u2019s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00091, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T09:17:12.447", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16459"}], "cwe": ["CWE-208", "CWE-327"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00465, "pinned": false}, {"id": "CVE-2026-58244", "publisher": "SAP SE", "title": "SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain", "summary": "SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker to access the users account information in the application, which could be leveraged to facilitate further attacks against the identified user account", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.280", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58244"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19522, "pinned": false}, {"id": "CVE-2026-66764", "publisher": "SAP SE", "title": "Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenti", "summary": "Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.120", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66764"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19524, "pinned": false}, {"id": "CVE-2026-72785", "publisher": "VulnCheck", "title": "Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability", "summary": "Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission (without saveCategories) for a category group can permanently modify that group's category structure \u2014 reordering and re-parenting categories \u2014 via the structures/move-element action. The structureEditable flag is computed from the view permission rather than the save permission, and the StructuresC", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T13:19:09.220", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72785"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17824, "pinned": false}, {"id": "CVE-2026-11738", "publisher": "Netgear, Inc.", "title": "Insufficient input validation vulnerability in the\u00a0listed NETGEAR models allows\u00a0authenticated administrators c", "summary": "Insufficient input validation vulnerability in the\u00a0listed NETGEAR models allows\u00a0authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00269, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:28.120", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "be9300 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.1.84"], "fixed": "1.0.1.84", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "mr60 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.8.142"], "fixed": "1.1.8.142", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "ms60 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.8.142"], "fixed": "1.1.8.142", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "r6700ax firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.18.164"], "fixed": "1.0.18.164", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax10 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.5.50"], "fixed": "1.0.5.50", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax120 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.2.10.56"], "fixed": "1.2.10.56", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11738"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18023, "pinned": false}, {"id": "CVE-2026-18678", "publisher": "Kong", "title": "When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl di", "summary": "When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection.\n\n\n\nAn attacker on the network path between the operator and the control plane can intercept user or admin API tokens and then act against the control plane as that user.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00128, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T19:17:31.323", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18678"}], "cwe": ["CWE-295"], "vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02208, "pinned": false}, {"id": "CVE-2026-18150", "publisher": "IBM Corporation", "title": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due t", "summary": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00276, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T20:17:41.190", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "i", "vendor": "ibm", "type": "os", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18150"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7283292"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18984, "pinned": false}, {"id": "CVE-2026-19502", "publisher": "MongoDB, Inc.", "title": "MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is ", "summary": "MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequent", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00124, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:38.240", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "sql schema builder cli", "vendor": "mongodb", "type": "app", "affected": [">= 1.0.1 and < 1.2.1"], "fixed": "1.2.1", "safe": "before 1.0.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sql-schema-builder-cli || rpm -q sql-schema-builder-cli || sql-schema-builder-cli --version"}, {"label": "2. UPGRADE to 1.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sql-schema-builder-cli"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sql-schema-builder-cli"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison sql-schema-builder-cli\nsudo apt install sql-schema-builder-cli=<VERSION_BEFORE_1.0.1>\nsudo apt-mark hold sql-schema-builder-cli"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sql-schema-builder-cli\nsudo dnf downgrade sql-schema-builder-cli-<VERSION_BEFORE_1.0.1>\nsudo dnf versionlock add sql-schema-builder-cli"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19502"}, {"t": "Release Notes, Vendor Advisory", "u": "https://www.mongodb.com/docs/sql-interface/changelog"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01964, "pinned": false}, {"id": "CVE-2026-15141", "publisher": "TPLink", "title": "The web\ninterface of the affected\ndevice relies on the HTTP referrer header as part of\nrequest validation.\u00a0 Re", "summary": "The web\ninterface of the affected\ndevice relies on the HTTP referrer header as part of\nrequest validation.\u00a0 Requests\u00a0containing empty Referer value, or omitting\nthe Referer header entirely, may be accepted and processed due to insufficient\nvalidation logic.\n\n\n\n\n\nSuccessful exploitation may allow an adjacent attacker with access to the web management\ninterface to obtain device configuration details and other sensitive\ninformation.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00119, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T23:17:19.703", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "tl-wr820n firmware", "vendor": "tp-link", "type": "os", "affected": ["< 1.15.20"], "fixed": "1.15.20", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15141"}, {"t": "Vendor Advisory", "u": "https://www.tp-link.com/en/support/faq/5243/"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01664, "pinned": false}, {"id": "CVE-2026-0290", "publisher": "Palo Alto Networks, Inc.", "title": "An information disclosure vulnerability in the Account Protection feature of  Palo Alto Networks Prisma\u00ae Brows", "summary": "An information disclosure vulnerability in the Account Protection feature of  Palo Alto Networks Prisma\u00ae Browser enables a local attacker to view sensitive data.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00127, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:43.647", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma browser", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 148.18.4.217"], "fixed": "148.18.4.217", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-browser || rpm -q prisma-browser || prisma-browser --version"}, {"label": "2. UPGRADE to 148.18.4.217 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-browser"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-browser"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0290"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0290"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.02184, "pinned": false}, {"id": "CVE-2026-58241", "publisher": "SAP SE", "title": "SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a", "summary": "SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and operational disruption, leading to a low impact on the integrity and availability of the application with no impact on confidentiality.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.047", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58241"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15797, "pinned": false}, {"id": "CVE-2026-12051", "publisher": "Zephyr Project", "title": "The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL p", "summary": "The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer dereference in handle_download() (subsys/usb/device_next/class/usbd_dfu.c). The handler computes MIN(setup->wLength, buf->len) and passes buf->data to the image write callback without checking that the buf net_buf pointer is non-NULL.\n\nThe handler is reached over the USB control endpoint, driven by the USB host. For a DFU_DNLOAD (d", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:12.620", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12051"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13104, "pinned": false}, {"id": "CVE-2026-33921", "publisher": "Nozomi Networks Inc.", "title": "The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so t", "summary": "The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to capture the traffic reaching the host, which discloses information belonging both to the host and to other systems on the same network segment, and to sen", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T10:17:11.963", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33921"}], "cwe": ["CWE-1188"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0257, "pinned": false}, {"id": "CVE-2026-11737", "publisher": "Netgear, Inc.", "title": "Insufficient input validation vulnerability in the\u00a0listed \nNETGEAR models allows\u00a0authenticated administrators ", "summary": "Insufficient input validation vulnerability in the\u00a0listed \nNETGEAR models allows\u00a0authenticated administrators connected to the \nlocal network to make unauthorized modification to the device software and \nfunctionality.", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:27.917", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "rax20 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.0.18.144"], "fixed": "1.0.18.144", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax41v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax42 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax42v2 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "rax43 firmware", "vendor": "netgear", "type": "os", "affected": ["< 1.1.6.36"], "fixed": "1.1.6.36", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11737"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11984, "pinned": false}, {"id": "CVE-2026-9214", "publisher": "Netgear, Inc.", "title": "Insufficient input validation vulnerability in the NETGEAR R7000 models\n allows\u00a0authenticated administrators c", "summary": "Insufficient input validation vulnerability in the NETGEAR R7000 models\n allows\u00a0authenticated administrators connected to the local network to \nmake unauthorized modification to router software and functionality.", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T16:17:40.490", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "r7000 firmware", "vendor": "netgear", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9214"}, {"t": "Vendor Advisory", "u": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13118, "pinned": false}, {"id": "CVE-2026-73427", "publisher": "GitHub, Inc.", "title": "Trix is a what-you-see-is-what-you-get rich text editor for everyday writing", "summary": "Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to cross-site scripting when a crafted application/x-trix-document JSON payload is dropped into an editor using the fallback Level0InputController, such as an embedded WebView without Input Events Level 2 support. The StringPiece.fromJSON method trusts href attributes from the JSON payload without sanitization, allowing a draggable el", "cvss": 2.1, "sev": "LOW", "epss": 0.00575, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:41.613", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73427"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.46721, "pinned": false}, {"id": "CVE-2026-58245", "publisher": "SAP SE", "title": "SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source ", "summary": "SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confide", "cvss": 3.8, "sev": "LOW", "epss": 0.00287, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:22.397", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58245"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20195, "pinned": false}, {"id": "CVE-2026-6505", "publisher": "Axis Communications AB", "title": "The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially le", "summary": "The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the\u00a0victim to install a malicious ACAP application.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00094, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T06:17:16.970", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6505"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00552, "pinned": false}, {"id": "CVE-2026-11970", "publisher": "Forcepoint", "title": "This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and", "summary": "This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in\u00a0F1E Mac OS before v26.04.5758.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00158, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T10:17:10.060", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11970"}], "cwe": ["CWE-754"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04624, "pinned": false}, {"id": "CVE-2026-73157", "publisher": "CIRCL", "title": "Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser int", "summary": "Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface using HTML interpolation. Because fields such as event IDs, event information, organization names, tags, tag colors, TLP labels, distribution labels, and error/flash text may be controlled by the remote MISP server, a malicious or compromised remote instance could return crafted values that inject HTML or script-capable content int", "cvss": 2.3, "sev": "LOW", "epss": 0.00444, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T09:17:14.633", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73157"}], "cwe": ["CWE-79", "CWE-116"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.37588, "pinned": false}, {"id": "CVE-2026-18096", "publisher": "IBM Corporation", "title": "IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause", "summary": "IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.", "cvss": 3.3, "sev": "LOW", "epss": 0.00131, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:36.813", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "db2", "vendor": "ibm", "type": "app", "affected": ["12.1.5"], "fixed": null, "safe": "before 12.1.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.1.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_12.1.5>\nsudo apt-mark hold db2"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_12.1.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "db2", "vendor": "ibm", "type": "app", "affected": ["12.1.5"], "fixed": null, "safe": "before 12.1.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.1.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_12.1.5>\nsudo apt-mark hold db2"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_12.1.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "db2", "vendor": "ibm", "type": "app", "affected": ["12.1.5"], "fixed": null, "safe": "before 12.1.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy db2 || rpm -q db2 || db2 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.1.5 (Debian / Ubuntu)", "cmd": "apt-cache madison db2\nsudo apt install db2=<VERSION_BEFORE_12.1.5>\nsudo apt-mark hold db2"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list db2\nsudo dnf downgrade db2-<VERSION_BEFORE_12.1.5>\nsudo dnf versionlock add db2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18096"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282953"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.02451, "pinned": false}, {"id": "CVE-2026-66775", "publisher": "SAP SE", "title": "SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default", "summary": "SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a victim into following it. Successful exploitation could allow the attacker to bind the victim's session to an attacker-controlled identity, resulting in a low impact on integrity. There is no impact on confidentiality and availability.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:23.917", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "approuter", "vendor": "sap", "type": "app", "affected": ["< 23.0.0"], "fixed": "23.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls approuter"}, {"label": "2. UPGRADE to 23.0.0", "cmd": "npm install approuter@\">=23.0.0\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66775"}, {"t": "Vendor Advisory", "u": "https://url.sap/sapsecuritypatchday"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05396, "pinned": false}, {"id": "CVE-2026-73491", "publisher": "GitHub, Inc.", "title": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o", "summary": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.allowed_uri? does not reject javascript: URIs whose scheme is split or prefixed with the HTML5 named whitespace character references &Tab; or &NewLine;. CGI.unescapeHTML leaves those references intact, so allowed_uri? reports the URL safe even though a browser decodes and strips t", "cvss": 2.3, "sev": "LOW", "epss": 0.00394, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T21:17:42.273", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73491"}], "cwe": ["CWE-184"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32477, "pinned": false}, {"id": "CVE-2026-73492", "publisher": "GitHub, Inc.", "title": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o", "summary": "Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.allowed_uri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references such as &#58, &#9, &#10, or &#13. CGI.unescapeHTML leaves these references encoded, so allowed_uri? reports the URL safe even though a browser decodes an", "cvss": 2.3, "sev": "LOW", "epss": 0.00394, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:16.527", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73492"}], "cwe": ["CWE-79", "CWE-184"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32478, "pinned": false}, {"id": "CVE-2026-7366", "publisher": "IBM Corporation", "title": "IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM D", "summary": "IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built\u2011in X\u2011Client\u2011IP header. Under concurrent request processing, X\u2011Client\u2011IP values may be contaminated across requests, enabling IP spoofing and disclosure of other clients\u2019 IP addresses.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-08-12", "pub": "2026-08-12T22:17:17.780", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "datapower gateway", "vendor": "ibm", "type": "app", "affected": [">= 10.5.0.0 and < 10.5.0.22", ">= 10.6.0.0 and < 10.6.0.10", ">= 11.0.0.0 and < 11.0.0.2"], "fixed": "10.5.0.22, 10.6.0.10, 11.0.0.2", "safe": "before 10.5.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy datapower-gateway || rpm -q datapower-gateway || datapower-gateway --version"}, {"label": "2. UPGRADE to 10.5.0.22 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade datapower-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade datapower-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison datapower-gateway\nsudo apt install datapower-gateway=<VERSION_BEFORE_10.5.0.0>\nsudo apt-mark hold datapower-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list datapower-gateway\nsudo dnf downgrade datapower-gateway-<VERSION_BEFORE_10.5.0.0>\nsudo dnf versionlock add datapower-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7366"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7282770"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05294, "pinned": false}, {"id": "CVE-2026-0291", "publisher": "Palo Alto Networks, Inc.", "title": "An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma\u00ae Access A", "summary": "An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma\u00ae Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent.\n\nThe Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00111, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T03:16:43.800", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "prisma access agent", "vendor": "paloaltonetworks", "type": "app", "affected": ["< 26.2.2"], "fixed": "26.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy prisma-access-agent || rpm -q prisma-access-agent || prisma-access-agent --version"}, {"label": "2. UPGRADE to 26.2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade prisma-access-agent"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade prisma-access-agent"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0291"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0291"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01274, "pinned": false}, {"id": "CVE-2026-44762", "publisher": "SAP SE", "title": "SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration a", "summary": "SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the", "cvss": 3.7, "sev": "LOW", "epss": 0.00186, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T01:17:20.800", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-44762"}], "cwe": ["CWE-1021"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07822, "pinned": false}, {"id": "CVE-2026-11985", "publisher": "Zephyr Project", "title": "On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the \"Floating point ABI\" choice, which d", "summary": "On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the \"Floating point ABI\" choice, which defaults to CONFIG_FP_HARDABI. Both FP_HARDABI and FP_SOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the callee-saved FP registers (s16-s31 / d8-d15) are only saved and restored across a context switch when CONFIG_FPU_SHARING is enabled (arch/arm/core/c", "cvss": 3.6, "sev": "LOW", "epss": 0.00125, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T05:17:11.780", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11985"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02018, "pinned": false}, {"id": "CVE-2026-21062", "publisher": "Samsung Mobile", "title": "Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access c", "summary": "Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.", "cvss": 3.3, "sev": "LOW", "epss": 0.00094, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T08:16:48.397", "modified": "2026-10-23T19:10:00.167", "products": [{"name": "android", "vendor": "samsung", "type": "os", "affected": ["14.0", "14.0 smr-apr-2022-r1", "14.0 smr-apr-2023-r1", "14.0 smr-apr-2024-r1", "14.0 smr-apr-2025-r1", "14.0 smr-apr-2026-r1", "14.0 smr-aug-2022-r1", "14.0 smr-aug-2023-r1"], "fixed": null, "safe": "before 14.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21062"}, {"t": "Vendor Advisory", "u": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08"}], "cwe": ["CWE-939"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00578, "pinned": false}, {"id": "CVE-2026-11812", "publisher": "Zephyr Project", "title": "The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a", "summary": "The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check.\n\nTwo independent paths mutate ctx concurrently: the background autohandl", "cvss": 2.5, "sev": "LOW", "epss": 0.00104, "kev": false, "added": "2026-08-10", "pub": "2026-08-10T23:16:51.020", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11812"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00973, "pinned": false}, {"id": "CVE-2026-48791", "publisher": "GitHub, Inc.", "title": "sigstore-java is a sigstore java client for interacting with sigstore infrastructure", "summary": "sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated (Rekor entry) time) against the Fulcio certificate. Version 2.1.0 re-added this verification with enhancements that adhere to the Sigstore verification spec. The old sigstore-conformance test for this check was built incorrectly. This vulnerability impacts only users verifying bundles with `dev.sig", "cvss": 2.0, "sev": "LOW", "epss": 0.00071, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T00:17:32.407", "modified": "2026-10-23T19:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48791"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00043, "pinned": false}, {"id": "CVE-2026-98090", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: restore active device pointers aft", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: restore active device pointers after failed sprout\n\nbtrfs_init_new_device() switches latest_dev and possibly s_bdev from the\nseed device to the new sprout device before creating the first writable\nchunks.\n\nIf chunk creation or the subsequent sprout setup fails, the error path\nreleases the new device without switching those pointers back.\nbtrfs_show_devname() can then dere", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:38.697", "modified": "2026-10-23T19:00:22.020", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.13 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1"], "fixed": "5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98090"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0a0ee38ad6324ac1603079bb785f784191576bd5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2ee5c4bc11007c51f63f0c1be5d3f07f2b404ff7"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/46863a9f93186e620c70584f91c8d5d95da83eff"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/49179f13c04735c55fd0f43b03696c015b067137"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b79b4b29003690acfade8241998fc0104ef9c84c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/e0b54613aabeb8e9da597f23b90c6a03d0981986"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06318, "pinned": false}, {"id": "CVE-2026-98094", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: fbtft: make dirty_lock IRQ-safe\n", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: fbtft: make dirty_lock IRQ-safe\n\nfbtft_mkdirty() can be reached from the fbcon rendering path while\nprocessing printk() in hardirq context. Meanwhile, dirty_lock is also\ntaken by fbtft_deferred_io() in workqueue context with local interrupts\nenabled.\n\nLockdep reports a possible IRQ lock inversion involving dirty_lock and\nconsole_owner. A hardirq can interrupt a CPU hold", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:39.133", "modified": "2026-10-23T18:55:31.727", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 4.0 and < 5.10.271", ">= 5.11 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1"], "fixed": "5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98094"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0843298b159599ee7bc6d14800efdb4bc7349706"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/10cc145b873670438d3b105133dffdae70822db6"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2a609e29efbba79f9abd68c4ec8a2bd7ecf291e7"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/a323066337ed85c38decfc7f6bbf42f27605dff1"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/dcb48fde8003492256dee45815144aa5ed26ce7c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/f0c869df2c33793c8828acaab3e4a5e0176f9f00"}], "cwe": ["CWE-667"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06834, "pinned": false}, {"id": "CVE-2026-98091", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: detach failed sprout device from t", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: detach failed sprout device from transaction update list\n\nWhen creating the first metadata chunk for a sprout filesystem,\ncreate_chunk() adds the new device to the transaction dev_update_list\nthrough device->post_commit_list.\n\nIf the subsequent system chunk creation fails, btrfs_init_new_device()\naborts the transaction and releases the device while post_commit_list is\nsti", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:38.807", "modified": "2026-10-23T18:55:09.060", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.2 and < 5.10.271", ">= 5.11 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1"], "fixed": "5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98091"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0ea6814bc0ff7cff443241bd34db9f0f828f3190"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2a57fb1d5ce8f316b81bbb60e6df245ebc816ffc"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/63bfa52eb3289517aa82cb90e1189385873aae21"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7fe9dfbca43464baa8f050447a4837587b18adec"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/86eff3052054e8f3b059b2d5845b6dcca021f20c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8b001df2b37ca022f710f3254fbb0bcd6d9e1bed"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06833, "pinned": false}, {"id": "CVE-2026-98092", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: yc: fix memory leak in acp6x_p", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()\n\nacp6x_pdm_dma_close() does not free the runtime->private_data buffer\nallocated in acp6x_pdm_dma_open(). Add the missing kfree.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:38.913", "modified": "2026-10-23T18:51:32.263", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1", "7.3 rc2"], "fixed": "6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98092"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/1b67e0d3b9691d7b6b74e18960ddd2be24f9dc9d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/28869353ab83a7fa08fe5fe7b12c84b0257a63b1"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8069bc3798dd33e8e7e9ad21370ee32dcd69957c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/ac961c34cf39f66296caf8294fa5baaee4124266"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d356c188a653d31c20cd69a152b2e2ea9893180a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/ecd88ef5f1d208596592cfa6695ab9e240ac6a72"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06319, "pinned": false}, {"id": "CVE-2026-63860", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Prefer NLA_NUL_STRING\n\nThese a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Prefer NLA_NUL_STRING\n\nThese attributes are evaluated as c-string (passed to strcmp), but\nNLA_STRING doesn't check for the presence of a \\0 terminator.\n\nEither this needs to switch to nla_strcmp() and needs to adjust printf fmt\nspecifier to not use plain %s, or this needs to use NLA_NUL_STRING.\n\nAs the code has been this way for long time, it seems to me that userspac", "cvss": 8.4, "sev": "HIGH", "epss": 0.0014, "kev": false, "added": "2026-07-19", "pub": "2026-07-19T15:16:52.850", "modified": "2026-10-23T18:50:24.027", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 3.16 and < 5.10.258", ">= 5.11 and < 5.15.209", ">= 5.16 and < 6.1.175", ">= 6.2 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10"], "fixed": "5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63860"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8"}], "cwe": ["CWE-170"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.0304, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-186.196", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-186.196\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-186.196~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-186.196~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.176-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.176-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1894", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63860.html", "note": "ALAS2023-2026-1894"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-98093", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_micfil: balance mclk enable/dis", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_micfil: balance mclk enable/disable\n\nhw_params() enables mclk unconditionally and hw_free() disables it\nunconditionally, but the PCM core does not guarantee 1:1 pairing:\nhw_free() can run without hw_params(), and hw_params() can be called\nmultiple times from the SETUP state. This triggers an \"already\ndisabled\" WARN() in the first case and leaks an enable reference in\nt", "cvss": 7.8, "sev": "HIGH", "epss": 0.00166, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:39.023", "modified": "2026-10-23T18:48:31.317", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1", "7.3 rc2"], "fixed": "6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98093"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/470db2026a435b79f7ecb4d65523ea16a99d55d8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d3dbccfe6afa7b9a6a7ed65cfaa76a47fa050a56"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/fa1bbe3534499dd89d3b0b941d6dd4ddb70c31b5"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.05527, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-110804", "publisher": "Devolutions Inc.", "title": "Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 ", "summary": "Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T14:17:22.247", "modified": "2026-10-23T18:36:58.140", "products": [{"name": "devolutions server", "vendor": "devolutions", "type": "app", "affected": ["< 2026.2.20.0", ">= 2026.3.5.0 and < 2026.3.10.0"], "fixed": "2026.2.20.0, 2026.3.10.0", "safe": "before 2026.3.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy devolutions-server || rpm -q devolutions-server || devolutions-server --version"}, {"label": "2. UPGRADE to 2026.2.20.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade devolutions-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade devolutions-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.3.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison devolutions-server\nsudo apt install devolutions-server=<VERSION_BEFORE_2026.3.5.0>\nsudo apt-mark hold devolutions-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list devolutions-server\nsudo dnf downgrade devolutions-server-<VERSION_BEFORE_2026.3.5.0>\nsudo dnf versionlock add devolutions-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110804"}, {"t": "Vendor Advisory", "u": "https://devolutions.net/security/advisories/DEVO-2026-0036/"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07096, "pinned": false}, {"id": "CVE-2026-110805", "publisher": "Devolutions Inc.", "title": "Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an ", "summary": "Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.", "cvss": 2.6, "sev": "LOW", "epss": 0.00124, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T14:17:22.343", "modified": "2026-10-23T18:36:29.130", "products": [{"name": "devolutions server", "vendor": "devolutions", "type": "app", "affected": ["< 2026.2.20.0", ">= 2026.3.5.0 and < 2026.3.10.0"], "fixed": "2026.2.20.0, 2026.3.10.0", "safe": "before 2026.3.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy devolutions-server || rpm -q devolutions-server || devolutions-server --version"}, {"label": "2. UPGRADE to 2026.2.20.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade devolutions-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade devolutions-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.3.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison devolutions-server\nsudo apt install devolutions-server=<VERSION_BEFORE_2026.3.5.0>\nsudo apt-mark hold devolutions-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list devolutions-server\nsudo dnf downgrade devolutions-server-<VERSION_BEFORE_2026.3.5.0>\nsudo dnf versionlock add devolutions-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110805"}, {"t": "Vendor Advisory", "u": "https://devolutions.net/security/advisories/DEVO-2026-0036/"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01954, "pinned": false}, {"id": "CVE-2026-110806", "publisher": "Devolutions Inc.", "title": "Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authentica", "summary": "Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00201, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T14:17:22.443", "modified": "2026-10-23T18:36:00.007", "products": [{"name": "devolutions server", "vendor": "devolutions", "type": "app", "affected": ["< 2026.2.20.0", ">= 2026.3.5.0 and < 2026.3.10.0"], "fixed": "2026.2.20.0, 2026.3.10.0", "safe": "before 2026.3.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy devolutions-server || rpm -q devolutions-server || devolutions-server --version"}, {"label": "2. UPGRADE to 2026.2.20.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade devolutions-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade devolutions-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.3.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison devolutions-server\nsudo apt install devolutions-server=<VERSION_BEFORE_2026.3.5.0>\nsudo apt-mark hold devolutions-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list devolutions-server\nsudo dnf downgrade devolutions-server-<VERSION_BEFORE_2026.3.5.0>\nsudo dnf versionlock add devolutions-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110806"}, {"t": "Vendor Advisory", "u": "https://devolutions.net/security/advisories/DEVO-2026-0036/"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09444, "pinned": false}, {"id": "CVE-2026-113145", "publisher": "Chrome", "title": "Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker ", "summary": "Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:06.880", "modified": "2026-10-23T18:34:04.773", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113145"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32107, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113156", "publisher": "Chrome", "title": "Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to ", "summary": "Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:08.120", "modified": "2026-10-23T18:33:52.467", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113156"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32106, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113157", "publisher": "Chrome", "title": "Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to l", "summary": "Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:08.230", "modified": "2026-10-23T18:33:38.280", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113157"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.21689, "pinned": false}, {"id": "CVE-2026-113163", "publisher": "Chrome", "title": "Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to exe", "summary": "Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00454, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:08.903", "modified": "2026-10-23T18:33:26.253", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113163"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38443, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113164", "publisher": "Chrome", "title": "Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to ", "summary": "Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:09.020", "modified": "2026-10-23T18:33:13.810", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113164"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28462, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-110287", "publisher": "Devolutions Inc.", "title": "Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authe", "summary": "Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00185, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T14:17:22.020", "modified": "2026-10-23T18:32:44.550", "products": [{"name": "devolutions server", "vendor": "devolutions", "type": "app", "affected": ["< 2026.2.20.0", ">= 2026.3.5.0 and < 2026.3.10.0"], "fixed": "2026.2.20.0, 2026.3.10.0", "safe": "before 2026.3.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy devolutions-server || rpm -q devolutions-server || devolutions-server --version"}, {"label": "2. UPGRADE to 2026.2.20.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade devolutions-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade devolutions-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.3.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison devolutions-server\nsudo apt install devolutions-server=<VERSION_BEFORE_2026.3.5.0>\nsudo apt-mark hold devolutions-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list devolutions-server\nsudo dnf downgrade devolutions-server-<VERSION_BEFORE_2026.3.5.0>\nsudo dnf versionlock add devolutions-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110287"}, {"t": "Vendor Advisory", "u": "https://devolutions.net/security/advisories/DEVO-2026-0036/"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07699, "pinned": false}, {"id": "CVE-2026-113088", "publisher": "Chrome", "title": "Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to", "summary": "Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:00.490", "modified": "2026-10-23T18:18:38.917", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113088"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32106, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-83862", "publisher": "Microsoft Corporation", "title": "Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac", "summary": "Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00634, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:20:35.520", "modified": "2026-10-23T18:18:27.063", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2012", "vendor": "microsoft", "type": "os", "affected": ["all versions", "r2"], "fixed": null, "safe": "before r2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2016", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2019", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2022", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.20348.5761"], "fixed": "10.0.20348.5761", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83862"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "CISA SSVC: automatable with total technical impact", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49747, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-113091", "publisher": "Chrome", "title": "Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attac", "summary": "Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:00.827", "modified": "2026-10-23T18:18:25.553", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113091"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32107, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113092", "publisher": "Chrome", "title": "Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to", "summary": "Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:00.933", "modified": "2026-10-23T18:18:11.770", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113092"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Issue Tracking, Exploit", "u": "https://issues.chromium.org/issues/558377544"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.32107, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113096", "publisher": "Chrome", "title": "Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to e", "summary": "Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:01.367", "modified": "2026-10-23T18:17:27.417", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113096"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32108, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113099", "publisher": "Chrome", "title": "Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote at", "summary": "Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:01.717", "modified": "2026-10-23T18:17:14.700", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113099"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Issue Tracking, Exploit", "u": "https://issues.chromium.org/issues/556227230"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.32108, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-98095", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: Don't cast tpacket_hdr.tp_len ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().\n\nsyzbot reported BUG() in sock_sendmsg_nosec(). [0]\n\nThe problem is that tpacket_parse_header() casts user-provided\ntpacket_hdr.tp_len, which is u32, to int.\n\nIf the length is larger than INT_MAX, the following condition\nin tpacket_parse_header() passes,\n\n  if (unlikely(tp_len > size_max))\n\nand any negati", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T11:17:39.243", "modified": "2026-10-23T18:15:25.107", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 2.6.31 and < 5.10.271", ">= 5.11 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1"], "fixed": "5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98095"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/09e3c9b32434600a6992e762bf0d6837f5902134"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2b9fa12fbdbfc0f671ff23b0ea06c177a6b8a6b8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3e0cad1432a0c0564f5076bab16f1aa4c0474be4"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/6d4d55f75fa0ea32d874eb33e356e9361f3e4591"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/72abe77e88c3f1f71c5348124e9b28e285f26950"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/73e594c19b4f815d8343461cec7074c4713bbde7"}], "cwe": ["CWE-681"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06839, "pinned": false}, {"id": "CVE-2026-113107", "publisher": "Chrome", "title": "Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to exe", "summary": "Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:02.620", "modified": "2026-10-23T18:14:02.767", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113107"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.32106, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113117", "publisher": "Chrome", "title": "Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker", "summary": "Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:03.773", "modified": "2026-10-23T18:13:49.110", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113117"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28461, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "webkitgtk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "webkitgtk3", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113119", "publisher": "Chrome", "title": "Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to e", "summary": "Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:04.010", "modified": "2026-10-23T18:13:32.463", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113119"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28463, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113121", "publisher": "Chrome", "title": "Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attack", "summary": "Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:04.227", "modified": "2026-10-23T18:13:16.553", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113121"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28222, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-113134", "publisher": "Chrome", "title": "Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to ", "summary": "Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00359, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:05.643", "modified": "2026-10-23T18:13:01.660", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113134"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28461, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "webkitgtk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "webkitgtk3", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73487", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that ", "summary": "Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00961, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.083", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["<= 3.1.4"], "fixed": "newer than 3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to newer than 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73487"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-w7x8-q2gp-5cgg"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-w7x8-q2gp-5cgg"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 63, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61218, "vendors": [{"os": "npm", "pkg": "flowise", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise@\">=3.1.3\"\nnpm ls flowise", "url": "https://github.com/advisories/GHSA-w7x8-q2gp-5cgg", "note": "vulnerable: <= 3.1.2"}, {"os": "npm", "pkg": "flowise-components", "status": "fixed", "fixed": "3.1.3", "cmd": "npm install flowise-components@\">=3.1.3\"\nnpm ls flowise-components", "url": "https://github.com/advisories/GHSA-w7x8-q2gp-5cgg", "note": "vulnerable: <= 3.1.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-w7x8-q2gp-5cgg", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-w7x8-q2gp-5cgg"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73649", "publisher": "GitHub, Inc.", "title": "Velocity.js is a JavaScript implementation of the Apache Velocity template engine", "summary": "Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, __proto__, and prototype only in the #set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts remained unfiltered. The getReferences() flow called getAttributes(), whose property access allowed an attacker-controlled template to traverse const", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:20.793", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73649"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53603, "vendors": [{"os": "npm", "pkg": "velocityjs", "status": "fixed", "fixed": "2.1.7", "cmd": "npm install velocityjs@\">=2.1.7\"\nnpm ls velocityjs", "url": "https://github.com/advisories/GHSA-7gfh-x38p-prh3", "note": "vulnerable: <= 2.1.6"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-27544", "publisher": "Patchstack", "title": "Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.", "summary": "Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.0086, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.890", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27544"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58109, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67614", "publisher": "VulnCheck", "title": "CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service ", "summary": "CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed with the hardcoded secret value, specifying ssh_user=root, to authenticate to the terminal service without any valid credentials and receive a root shell", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00964, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:08.370", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67614"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61335, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49827", "publisher": "GitHub, Inc.", "title": "WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry", "summary": "WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scan_file parameter, leading to Remote Code Execution. Combined with open registration (no invite required) and broken role middleware (CheckUserRole silently swallows RouteNotFoundException), this chain is effectively unauthenticated RCE against any d", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00862, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T13:19:10.050", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49827"}], "cwe": ["CWE-20", "CWE-306", "CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58165, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61962", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.", "summary": "Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00695, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:02.550", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61962"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52462, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73602", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authent", "summary": "Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to load and execute malicious JavaScript files stored in the document store outside the sandbox.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00826, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.480", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73602"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rqh4-rxw3-93rp"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.57025, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28008", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in OAuth Single Sign On \u2013 SSO (OAuth Client) <= 7.0.0 versions.", "summary": "Unauthenticated Broken Authentication in OAuth Single Sign On \u2013 SSO (OAuth Client) <= 7.0.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00606, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.687", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28008"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48345, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28149", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.", "summary": "Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.070", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28149"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46133, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66465", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.", "summary": "Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00606, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:07.833", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66465"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48344, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61967", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.", "summary": "Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:02.957", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61967"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40684, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66424", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.", "summary": "Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.600", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66424"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40671, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66691", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.", "summary": "Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.240", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66691"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40671, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73625", "publisher": "VulnCheck", "title": "GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options gua", "summary": "GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clone_from, fetch, pull, push, ls_remote, iter_commits, blame, or archive methods to execute arbitrary OS commands via the --upload-pack parameter.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00923, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.753", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.54"], "fixed": "3.1.54", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.54", "cmd": "pip install --upgrade \"gitpython>=3.1.54\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73625"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.60011, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:13:15.746637+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73486", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter t", "summary": "Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to execute code in the unsandboxed pyodide environment with full system access.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00662, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:23.947", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73486"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4878-cqgq-j53v"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4878-cqgq-j53v"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.51073, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28148", "publisher": "Patchstack", "title": "Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.", "summary": "Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00345, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.943", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28148"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26765, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73567", "publisher": "GitHub, Inc.", "title": "sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4", "summary": "sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by jsbn@1.1.0, which seeds an ARC4 stream from Math.random() and new Date().getTime() because window.crypto.getRandomValues is unavailable even though globalThis.crypto exists. An attacker wh", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00444, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.387", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73567"}], "cwe": ["CWE-338"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37571, "vendors": [{"os": "npm", "pkg": "sm-crypto", "status": "fixed", "fixed": "0.5.0", "cmd": "npm install sm-crypto@\">=0.5.0\"\nnpm ls sm-crypto", "url": "https://github.com/advisories/GHSA-vh45-f885-3848", "note": "vulnerable: < 0.5.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848", "url": "https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73485", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenti", "summary": "Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00597, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:23.807", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73485"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-c5hr-rc98-xp3g"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.47933, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73601", "publisher": "VulnCheck", "title": "Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM", "summary": "Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and BROWSER environment variables with python3, or leverage the root working directory with node to bypass validation and execute system commands.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01099, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.353", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73601"}, {"t": "Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g98q-rm45-q9h8"}], "cwe": ["CWE-95"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.65398, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-g98q-rm45-q9h8", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g98q-rm45-q9h8"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73622", "publisher": "VulnCheck", "title": "GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add()", "summary": "GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references. Attackers can craft URLs with environment variable tokens that are expanded into .git/config and .gitmodules, then transmitted to attacker-controlled hosts during fetch or pull operations.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00514, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.337", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.55"], "fixed": "3.1.55", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.55", "cmd": "pip install --upgrade \"gitpython>=3.1.55\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73622"}, {"t": "Patch", "u": "https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42934, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53791", "publisher": "VulnCheck", "title": "rsync daemon before 3.5.0\u00a0contains an IP address spoofing vulnerability that allows unauthenticated remote att", "summary": "rsync daemon before 3.5.0\u00a0contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a spoofed source IP in the PROXY protocol header to circumvent hosts allow/deny rules, gaining unauthorized access that would otherwise be blocked based on the", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00501, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.363", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53791"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-h2q9-5fr8-w635"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42026, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53791.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73608", "publisher": "VulnCheck", "title": "SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched", "summary": "SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization checks (no CheckReadonly, no publish-access or encrypted-notebook gating). Given a database identifier taken from a published page and a keyword, an anon", "cvss": 8.6, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:25.323", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73608"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34082, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73614", "publisher": "VulnCheck", "title": "Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating deny", "summary": "Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list and execute arbitrary commands.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00679, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:26.197", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73614"}], "cwe": ["CWE-436"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.51801, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Jovancoding/Network-AI/security/advisories/GHSA-743h-jr5x-mpcr", "url": "https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-743h-jr5x-mpcr"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28185", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.", "summary": "Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00274, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:00.303", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28185"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1879, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73623", "publisher": "VulnCheck", "title": "GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, all", "summary": "GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00835, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.477", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.54"], "fixed": "3.1.54", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.54", "cmd": "pip install --upgrade \"gitpython>=3.1.54\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73623"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.57296, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28001", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.", "summary": "Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.177", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28001"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33126, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "gduma-phData/patch-CVE-2026-28001 (0 stars)", "url": "https://github.com/gduma-phData/patch-CVE-2026-28001", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28142", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.", "summary": "Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.813", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28142"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33144, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61966", "publisher": "Patchstack", "title": "Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.", "summary": "Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:02.810", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61966"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33125, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61969", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.", "summary": "Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.080", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61969"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33118, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66436", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.", "summary": "Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:05.380", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66436"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33132, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66472", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.", "summary": "Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.637", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66472"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33123, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66478", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.", "summary": "Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.763", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66478"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33144, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53790", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains multiple command and argument injection vulnerabilities that allow attackers to ex", "summary": "rsync before 3.5.0\u00a0contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shell command newline injection. Attackers can inject shell metacharacters or newline characters into unsanitized user-supplied values such as hostnames an", "cvss": 8.1, "sev": "HIGH", "epss": 0.00629, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.200", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53790"}], "cwe": ["CWE-78", "CWE-88"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49499, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53790.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73564", "publisher": "GitHub, Inc.", "title": "frp is a fast reverse proxy", "summary": "frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bounds check, and causes payload[4:3] to panic in TunnelServer.handleNewChannel. When no authorized-keys file is configured, sshConfig.NoClientAuth permits an", "cvss": 8.7, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:18.950", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73564"}], "cwe": ["CWE-129", "CWE-190"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43617, "vendors": [{"os": "Go", "pkg": "github.com/fatedier/frp", "status": "fixed", "fixed": "0.70.1", "cmd": "go get github.com/fatedier/frp@v0.70.1\ngo list -m github.com/fatedier/frp", "url": "https://github.com/advisories/GHSA-26gq-p25f-99cp", "note": "vulnerable: >= 0.53.0, <= 0.70.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73569", "publisher": "GitHub, Inc.", "title": "fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks", "summary": "fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through addInputEntities(). addInputEntities() resets maxTotalExpansions and maxExpandedLength every time it is called, allowing additional DOCTYPE declarations to repeatedly reset", "cvss": 8.7, "sev": "HIGH", "epss": 0.00507, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.803", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73569"}], "cwe": ["CWE-776"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42374, "vendors": [{"os": "npm", "pkg": "fast-xml-parser", "status": "fixed", "fixed": "5.10.1", "cmd": "npm install fast-xml-parser@\">=5.10.1\"\nnpm ls fast-xml-parser", "url": "https://github.com/advisories/GHSA-8r6m-32jq-jx6q", "note": "vulnerable: >= 5.9.3, < 5.10.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "node-webfont", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-webfont", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73615", "publisher": "VulnCheck", "title": "Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluate", "summary": "Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and approval gates while the executor runs the identical unquoted dangerous argv.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00654, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:26.337", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73615"}], "cwe": ["CWE-436"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50731, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Jovancoding/Network-AI/security/advisories/GHSA-9v4f-j8cv-fhxw", "url": "https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-9v4f-j8cv-fhxw"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73561", "publisher": "GitHub, Inc.", "title": "Hub is a Node.js WebSocket server and client with added features", "summary": "Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. The RPC.waitForReply function starts a setInterval polling loop every 10 milliseconds that is cleared only after a matching reply; if the client remains si", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:18.490", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73561"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48537, "vendors": [{"os": "npm", "pkg": "@anephenix/hub", "status": "fixed", "fixed": "0.2.16", "cmd": "npm install @anephenix/hub@\">=0.2.16\"\nnpm ls @anephenix/hub", "url": "https://github.com/advisories/GHSA-g5vv-q72c-7j78", "note": "vulnerable: < 0.2.16"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/anephenix/hub/security/advisories/GHSA-g5vv-q72c-7j78", "url": "https://github.com/anephenix/hub/security/advisories/GHSA-g5vv-q72c-7j78"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73620", "publisher": "VulnCheck", "title": "GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create()", "summary": "GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00574, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.057", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.57"], "fixed": "3.1.57", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.57", "cmd": "pip install --upgrade \"gitpython>=3.1.57\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73620"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.4671, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73624", "publisher": "VulnCheck", "title": "GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method", "summary": "GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00553, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.617", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.54"], "fixed": "3.1.54", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.54", "cmd": "pip install --upgrade \"gitpython>=3.1.54\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73624"}, {"t": "Exploit, Mitigation", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"}, {"t": "Exploit, Mitigation", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.45422, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70461", "publisher": "VulnCheck", "title": "rsync 3.2.5 before 3.5.0\u00a0contains a heap out-of-bounds write vulnerability that allows remote unauthenticated ", "summary": "rsync 3.2.5 before 3.5.0\u00a0contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry. Attackers can trigger the vulnerability against a read-only rsync daemon module by providing a files-from entry containing both an interior and trailing backslash, causing the add_implied_include() function to under-c", "cvss": 8.2, "sev": "HIGH", "epss": 0.0057, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:00.117", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": [">= 3.2.5 and < 3.5.0"], "fixed": "3.5.0", "safe": "before 3.2.5", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.2.5 (Debian / Ubuntu)", "cmd": "apt-cache madison rsync\nsudo apt install rsync=<VERSION_BEFORE_3.2.5>\nsudo apt-mark hold rsync"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rsync\nsudo dnf downgrade rsync-<VERSION_BEFORE_3.2.5>\nsudo dnf versionlock add rsync"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70461"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-jhxm-j4mq-3fj4"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46453, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70461.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59765", "publisher": "Gitea Limited", "title": "SSRF via Migration Asset Downloads Bypasses hostmatcher \u2014 Reads Internal Files and Cloud Metadata", "summary": "SSRF via Migration Asset Downloads Bypasses hostmatcher \u2014 Reads Internal Files and Cloud Metadata", "cvss": 7.5, "sev": "HIGH", "epss": 0.00495, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T17:17:30.493", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59765"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41577, "vendors": [{"os": "Go", "pkg": "code.gitea.io/gitea", "status": "fixed", "fixed": "1.27.0", "cmd": "go get code.gitea.io/gitea@v1.27.0\ngo list -m code.gitea.io/gitea", "url": "https://github.com/advisories/GHSA-2wm4-vwp6-v7xc", "note": "vulnerable: < 1.27.0"}, {"os": "Go", "pkg": "gitea.dev", "status": "fixed", "fixed": "1.27.0", "cmd": "go get gitea.dev@v1.27.0\ngo list -m gitea.dev", "url": "https://github.com/advisories/GHSA-2wm4-vwp6-v7xc", "note": "vulnerable: < 1.27.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc", "url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73566", "publisher": "GitHub, Inc.", "title": "node-tar is a tar archive manipulation library for Node.js", "summary": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) or tar.x(...) receives a non-empty member-selection list. A crafted GNU L or PAX x long-path header with thousands of slash-separated segments reaches this.filter(entry.path, entry) in Parser[CONSUMEHEADER] in ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00531, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.250", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73566"}], "cwe": ["CWE-400", "CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44076, "vendors": [{"os": "npm", "pkg": "tar", "status": "fixed", "fixed": "7.5.21", "cmd": "npm install tar@\">=7.5.21\"\nnpm ls tar", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "note": "vulnerable: <= 7.5.20"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "node-tar", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-tar", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "linux-sgx", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "nodejs22", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "nodejs24", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "tar", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "tar", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73568", "publisher": "GitHub, Inc.", "title": "py-libp2p is the Python implementation of the libp2p networking stack", "summary": "py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read_exactly() before validating it against MAX_WINDOW_SIZE or checking whether stream_id exists. A peer that completes the standard Noise handshake can send a 12-byte frame declaring a 0xFFFFFFFF body and then withhold the b", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.547", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73568"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41095, "vendors": [{"os": "Python (pip)", "pkg": "libp2p", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-hmj8-5xmh-5573", "note": "vulnerable: <= 0.7.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/libp2p/py-libp2p/commit/146ea87d1a20cc7dacf684ecf7c204543be04b37", "url": "https://github.com/libp2p/py-libp2p/commit/146ea87d1a20cc7dacf684ecf7c204543be04b37"}, {"kind": "writeup", "name": "github.com/libp2p/py-libp2p/security/advisories/GHSA-hmj8-5xmh-5573", "url": "https://github.com/libp2p/py-libp2p/security/advisories/GHSA-hmj8-5xmh-5573"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66653", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.", "summary": "Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.917", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66653"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39488, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66656", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.", "summary": "Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.350", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66656"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39488, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66657", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.", "summary": "Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.477", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66657"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39488, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70455", "publisher": "VulnCheck", "title": "rsync 3.4.2 before 3.5.0\u00a0contains a denial of service vulnerability that allows a remote sender to exhaust sys", "summary": "rsync 3.4.2 before 3.5.0\u00a0contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string matching on long option names. Attackers can specify --zt=N with a large value to spawn an unbounded number of Zstandard worker threads on the receiver, exhausting available thread and memory resources.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00566, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.197", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": [">= 3.4.2 and < 3.5.0"], "fixed": "3.5.0", "safe": "before 3.4.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.4.2 (Debian / Ubuntu)", "cmd": "apt-cache madison rsync\nsudo apt install rsync=<VERSION_BEFORE_3.4.2>\nsudo apt-mark hold rsync"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rsync\nsudo dnf downgrade rsync-<VERSION_BEFORE_3.4.2>\nsudo dnf versionlock add rsync"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70455"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-rjvj-qgqg-cvx9"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46252, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70460", "publisher": "VulnCheck", "title": "rsync 2.3.3 before 3.5.0\u00a0contains a path traversal vulnerability that allows a malicious sender to escape the ", "summary": "rsync 2.3.3 before 3.5.0\u00a0contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relat", "cvss": 8.1, "sev": "HIGH", "epss": 0.00448, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.957", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70460"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37953, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70460.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70464", "publisher": "VulnCheck", "title": "rsync daemon 2.0.0 before 3.5.0\u00a0contains a denial of service vulnerability that allows unauthenticated remote ", "summary": "rsync daemon 2.0.0 before 3.5.0\u00a0contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all availa", "cvss": 7.5, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:01.667", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70464"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46628, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70464.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-59109", "publisher": "ENISA", "title": "SQL injection in the Zalktis accounting application via\ntrading-partner-controlled text fields in received ele", "summary": "SQL injection in the Zalktis accounting application via\ntrading-partner-controlled text fields in received electronic invoices. When\nimporting a received e-invoice (UBL/PEPPOL) or an e-commerce export, Zalktis\nconcatenates partner-controlled values directly into SQL statement text using\nstring concatenation, with neither parameterised queries nor escaping. The\napplication's own escaping helper,\u00a0Dazadi.sql_txt(),\nis not invoked on these code paths", "cvss": 8.8, "sev": "HIGH", "epss": 0.00453, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T17:17:29.207", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59109"}], "cwe": ["CWE-20", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38402, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "offseq.com/en/research/zalktis-cve-2026-59109", "url": "https://offseq.com/en/research/zalktis-cve-2026-59109"}, {"kind": "writeup", "name": "offseq.com/en/research/zalktis-cve-2026-59109/", "url": "https://offseq.com/en/research/zalktis-cve-2026-59109/"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61979", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.", "summary": "Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00424, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.463", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61979"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35633, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "BIBILZERODAY/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit (0 stars)", "url": "https://github.com/BIBILZERODAY/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61980", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.", "summary": "Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.590", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61980"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42131, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19734", "publisher": "Secur0", "title": "Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component", "summary": "Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus Prospero Flow CRM before 5.4.7 allows authenticated users of any company to read the full sensitive data (price, cost, stock, SKU, and barcode) of another company's product and to hijack that product by reassigning its company_id, via the product's numeric identifier, because `ProductUpdateController` did not extend `MainContro", "cvss": 8.6, "sev": "HIGH", "epss": 0.00588, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:38.940", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19734"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.47419, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70453", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains an algorithmic complexity vulnerability in the hash_search() function that allows ", "summary": "rsync before 3.5.0\u00a0contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to exhaust receiver CPU resources with a modest number of crafted entries, causing a sustained denial of service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00525, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:58.893", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70453"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43709, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70453.html", "note": "ALAS2023-2026-3131"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3945", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70453.html", "note": "ALAS2-2026-3945"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3945 (important): rsync", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3945.html", "date": "2026-09-28"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-70456", "publisher": "VulnCheck", "title": "rsync 3.0.1 before 3.5.0\u00a0contains an out-of-bounds write vulnerability in the read_args() function that allows", "summary": "rsync 3.0.1 before 3.5.0\u00a0contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.343", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70456"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32606, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70456.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70458", "publisher": "VulnCheck", "title": "rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory", "summary": "rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.663", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70458"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32607, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70458.html", "note": "ALAS2023-2026-3131"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3945", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70458.html", "note": "ALAS2-2026-3945"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3945 (important): rsync", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3945.html", "date": "2026-09-28"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-73643", "publisher": "GitHub, Inc.", "title": "js-yaml is a JavaScript YAML parser and dumper", "summary": "js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load() or loadAll() on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a flow-sequence entry is recognized as a key: value pair. If the key is a nested flow sequence of the same shape, every level is parsed twice, causing O(2^", "cvss": 7.5, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.947", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41084, "vendors": [{"os": "npm", "pkg": "js-yaml", "status": "fixed", "fixed": "5.2.2", "cmd": "npm install js-yaml@\">=5.2.2\"\nnpm ls js-yaml", "url": "https://github.com/advisories/GHSA-pm4m-ph32-ghv5", "note": "vulnerable: >= 5.0.0, <= 5.2.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "node-js-yaml", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-js-yaml", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rust", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "subscription-manager", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "389-ds:1.4/389-ds-base", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5", "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73644", "publisher": "GitHub, Inc.", "title": "OpenDJ is an LDAPv3 compliant directory service", "summary": "OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/PlainSASLMechanismHandler.java checked the PROXIED_AUTH privilege but did not evaluate the mayProxy proxy ACI scope when an authzid resolved to a different user. Both dn: and u: or bare authzid forms could therefore let an authenticated account holding PROXIED_AUTH assume an", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00413, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:20.093", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73644"}], "cwe": ["CWE-285", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.34442, "vendors": [{"os": "Maven", "pkg": "org.openidentityplatform.opendj:opendj-server-legacy", "status": "fixed", "fixed": "5.1.2", "cmd": "Set org.openidentityplatform.opendj:opendj-server-legacy to 5.1.2 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-p279-2cqp-84jg", "note": "vulnerable: <= 5.1.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-27543", "publisher": "Patchstack", "title": "Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.", "summary": "Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00373, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.763", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27543"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30101, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28176", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.", "summary": "Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00461, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.663", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28176"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39046, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-48702", "publisher": "GitHub, Inc.", "title": "Rekor is a software supply chain transparency log", "summary": "Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompresses the signature and control gzip members of an APK file into in-memory buffers without bounding the total decompressed size. The existing `max_apk_metadata_size` check (default 1MB) is only applied to individual tar entry header sizes after decompression completes, so i", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:01.427", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48702"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38935, "vendors": [{"os": "Go", "pkg": "github.com/sigstore/rekor", "status": "fixed", "fixed": "1.5.2", "cmd": "go get github.com/sigstore/rekor@v1.5.2\ngo list -m github.com/sigstore/rekor", "url": "https://github.com/advisories/GHSA-47q9-m4ww-924m", "note": "vulnerable: >= 0.3.0, < 1.5.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 13", "pkg": "rekor", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "buildah", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "podman", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10-eus/rhel-10.0-bootc", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "skopeo", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rhel9-eus/rhel-9.6-bootc", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2023", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-48702.html", "note": "ALAS2023-2026-2023"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70452", "publisher": "VulnCheck", "title": "rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circu", "summary": "rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the rule rather than defaulting to a deny decision, enabling attackers who can trigger DNS failures to bypass module-level IP access controls and gain unauthor", "cvss": 7.4, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:58.740", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70452"}], "cwe": ["CWE-636", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39112, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70452.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-49478", "publisher": "GitHub, Inc.", "title": "Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity", "summary": "Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind SSRF, substitute and cache malicious JWKS keys, or disclose ServiceAccount tokens to external hosts. Version 1.8.6 blocks cross-host redirects, restri", "cvss": 8.7, "sev": "HIGH", "epss": 0.00282, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T13:19:09.790", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49478"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19619, "vendors": [{"os": "Go", "pkg": "github.com/sigstore/fulcio", "status": "fixed", "fixed": "1.8.6", "cmd": "go get github.com/sigstore/fulcio@v1.8.6\ngo list -m github.com/sigstore/fulcio", "url": "https://github.com/advisories/GHSA-f5mr-q85p-6hh6", "note": "vulnerable: <= 1.8.5"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 13", "pkg": "golang-github-sigstore-fulcio", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "buildah", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "podman", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10/bootc-image-builder", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10-eus/rhel-10.0-bootc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10-eus/rhel-10.0-bootc-image-builder", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2023", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-49478.html", "note": "ALAS2023-2026-2023"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28161", "publisher": "Patchstack", "title": "Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.", "summary": "Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.887", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28161"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3497, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-66432", "publisher": "Patchstack", "title": "Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.", "summary": "Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:05.253", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66432"}], "cwe": ["CWE-1258"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34811, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66462", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.", "summary": "Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:07.417", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66462"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34812, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66463", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.", "summary": "Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:07.580", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66463"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34805, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53795", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains an arbitrary file write vulnerability that allows attackers to write files outside", "summary": "rsync before 3.5.0\u00a0contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside the destination tree, enabling attacker-controlled values to write files to arbitrary locations accessible to the rsync process.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:44.117", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53795"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-m9vj-637x-v6pq"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "CISA SSVC: automatable with total technical impact"], "fix": true, "watched": false, "epss_pct": 0.32691, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53795.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/RsyncProject/rsync/security/advisories/GHSA-m9vj-637x-v6pq", "url": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-m9vj-637x-v6pq"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-61984", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.", "summary": "Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.720", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61984"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32414, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66441", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.", "summary": "Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:05.503", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66441"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32406, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53793", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a path confinement bypass vulnerability that allows remote clients to escape the i", "summary": "rsync before 3.5.0\u00a0contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper handling of the /./ notation or forge delta-basis transfers referencing xname paths that cross the /./ boundary to gain unauthorized read or write access t", "cvss": 7.4, "sev": "HIGH", "epss": 0.00393, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.690", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53793"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32326, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53793.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73645", "publisher": "GitHub, Inc.", "title": "OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM", "summary": "OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total supply with an euint64 value, and an overflowing internal _mint operation could fail silently. The wrap and onTransferReceived functions in contracts/token/ERC7984/extensions/ERC7984ERC20Wrapper.sol did not handle that failure, so a user could transfer the underlying token wi", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:20.277", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73645"}], "cwe": ["CWE-190"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43611, "vendors": [{"os": "npm", "pkg": "@openzeppelin/confidential-contracts", "status": "fixed", "fixed": "0.3.1", "cmd": "npm install @openzeppelin/confidential-contracts@\">=0.3.1\"\nnpm ls @openzeppelin/confidential-contracts", "url": "https://github.com/advisories/GHSA-hqf9-8xv5-x8xw", "note": "vulnerable: <= 0.3.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73618", "publisher": "VulnCheck", "title": "Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint", "summary": "Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON structural characters to alter MongoDB queries, bypassing filters to read, modify, or delete arbitrary documents.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:26.770", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73618"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.28793, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Budibase/budibase/security/advisories/GHSA-qw6m-8fw2-2v64", "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-qw6m-8fw2-2v64"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-27345", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions.", "summary": "Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:55.847", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27345"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27009, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66431", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.", "summary": "Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:05.120", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66431"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27012, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-66466", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Dir", "summary": "Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:07.960", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66466"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27014, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66469", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.", "summary": "Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.380", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66469"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27014, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66661", "publisher": "Patchstack", "title": "Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.", "summary": "Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.857", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66661"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25616, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-16101", "publisher": "Silicon Labs", "title": "Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device", "summary": "Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below", "cvss": 8.8, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:33.347", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16101"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27544, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/", "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19291", "publisher": "Silicon Labs", "title": "Bluetooth re-pairing with an existing device can use a lower security level", "summary": "Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:37.603", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19291"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27544, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/", "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-19292", "publisher": "Silicon Labs", "title": "Re-pairing with a legitimate device can use a lower security level than\nprevious making brute-forcing the LTK ", "summary": "Re-pairing with a legitimate device can use a lower security level than\nprevious making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:37.737", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19292"}], "cwe": ["CWE-305"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27544, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/", "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73562", "publisher": "GitHub, Inc.", "title": "Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment", "summary": "Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update such as MyModel.updateOne(filter, req.body) can exploit Mongoose update casting with a __proto__.x dotted path under $set. Schema.prototype.path and Schema.prototype._getPathType can treat inherited properties of schema.paths and schema.nested as schema types, allowing the castin", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00503, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:18.643", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73562"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42124, "vendors": [{"os": "npm", "pkg": "mongoose", "status": "fixed", "fixed": "6.13.10", "cmd": "npm install mongoose@\">=6.13.10\"\nnpm ls mongoose", "url": "https://github.com/advisories/GHSA-664h-wqgq-64gw", "note": "vulnerable: < 6.13.10"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-27538", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.", "summary": "Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0032, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.510", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27538"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23768, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28002", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytic", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.\n\nThis issue affects Booktics: from n/a through 1.0.22.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.307", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28002"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28302, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28156", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Do Lasso <= 358 versions.", "summary": "Subscriber SQL Injection in Do Lasso <= 358 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.323", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28156"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28295, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28168", "publisher": "Patchstack", "title": "Subscriber SQL Injection in CubeWP <= 1.1.30 versions.", "summary": "Subscriber SQL Injection in CubeWP <= 1.1.30 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.017", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28168"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2829, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66430", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.", "summary": "Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.987", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66430"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28304, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66658", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Reviewer <= 3.14.2 versions.", "summary": "Subscriber SQL Injection in Reviewer <= 3.14.2 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.603", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66658"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28298, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70459", "publisher": "VulnCheck", "title": "rsync 3.0.0 before 3.5.0\u00a0contains a null pointer dereference vulnerability in the daemon child process that al", "summary": "rsync 3.0.0 before 3.5.0\u00a0contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a directory structure pointer without verifying the entry type, resulting in an invalid or uninitialized pointer dereference that terminates the client connection.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00721, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.813", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": [">= 3.0.0 and < 3.5.0"], "fixed": "3.5.0", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison rsync\nsudo apt install rsync=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold rsync"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rsync\nsudo dnf downgrade rsync-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add rsync"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70459"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-p4v4-qxw9-q72m"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53442, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70459.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73604", "publisher": "VulnCheck", "title": "Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/", "summary": "Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.750", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73604"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rwrp-9823-p2xq"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rwrp-9823-p2xq"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.34367, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/FlowiseAI/Flowise/security/advisories/GHSA-rwrp-9823-p2xq", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rwrp-9823-p2xq"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73619", "publisher": "VulnCheck", "title": "GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --a", "summary": "GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00412, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:26.913", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.57"], "fixed": "3.1.57", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.57", "cmd": "pip install --upgrade \"gitpython>=3.1.57\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73619"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.34367, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73629", "publisher": "VulnCheck", "title": "Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed()", "summary": "Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address formats to request internal services and retrieve response bodies through the public uploads directory.", "cvss": 8.5, "sev": "HIGH", "epss": 0.0032, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:28.330", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73629"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23757, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-27380", "publisher": "Patchstack", "title": "Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.", "summary": "Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00539, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:55.987", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27380"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.4462, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28186", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.", "summary": "Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00378, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:00.560", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28186"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30582, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28188", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.", "summary": "Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:00.870", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28188"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21665, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65582", "publisher": "Patchstack", "title": "Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.", "summary": "Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.320", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65582"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37497, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-49857", "publisher": "GitHub, Inc.", "title": "auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages", "summary": "auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts`) to block requests to private and loopback addresses. However, the `isPrivateV6()` function fails to detect IPv4-mapped IPv6 loopback addresses in their hex-normalized form. When an attacker supplies a URL such as `http://[::ffff:127.0.0.1]:PORT/`, the Node.js WHATWG U", "cvss": 7.4, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:41.743", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49857"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41139, "vendors": [{"os": "npm", "pkg": "auth-fetch-mcp", "status": "fixed", "fixed": "3.0.2", "cmd": "npm install auth-fetch-mcp@\">=3.0.2\"\nnpm ls auth-fetch-mcp", "url": "https://github.com/advisories/GHSA-pvrj-8cg3-j5f8", "note": "vulnerable: <= 3.0.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8", "url": "https://github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-53783", "publisher": "VulnCheck", "title": "rsync before\u00a03.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync", "summary": "rsync before\u00a03.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions by substituting a symlink for a path component after validation but before transfer processing. Attackers can additionally leverage unrestricted flags such as --copy-unsafe-links, -D, and --log-file through rrsync to read or write files o", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:41.913", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53783"}], "cwe": ["CWE-59", "CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30182, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53783.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53786", "publisher": "VulnCheck", "title": "rsync\u00a0before 3.5.0\u00a0contains a filter rule bypass vulnerability that allows authenticated clients to override m", "summary": "rsync\u00a0before 3.5.0\u00a0contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules that supersede daemon module-level restrictions, gaining access to files the module filter was intended to exclude.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00398, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:42.700", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53786"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-mrc3-6cwx-hch6"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32889, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53786.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70463", "publisher": "VulnCheck", "title": "rsync 3.1.0 before 3.5.0\u00a0contains an authorization bypass in auth users directive parsing", "summary": "rsync 3.1.0 before 3.5.0\u00a0contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose use", "cvss": 8.1, "sev": "HIGH", "epss": 0.00364, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:01.513", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": [">= 3.1.0 and < 3.5.0"], "fixed": "3.5.0", "safe": "before 3.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison rsync\nsudo apt install rsync=<VERSION_BEFORE_3.1.0>\nsudo apt-mark hold rsync"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rsync\nsudo dnf downgrade rsync-<VERSION_BEFORE_3.1.0>\nsudo dnf versionlock add rsync"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70463"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-pfj8-79vq-xgvr"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29071, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70463.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "Fyyre/CVE-2026-70463 (0 stars)", "url": "https://github.com/Fyyre/CVE-2026-70463", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73647", "publisher": "GitHub, Inc.", "title": "Quasar Framework is a framework for building high-performance Vue.js user interfaces", "summary": "Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend() utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extend(true, target, source) deep merges without rejecting an own __proto__ property. The merge could descend into the prototype object and write attacker-controlled properties to Object.prototype in the same JavaScript process.", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00387, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:20.450", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73647"}], "cwe": ["CWE-1321"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31625, "vendors": [{"os": "npm", "pkg": "quasar", "status": "fixed", "fixed": "2.22.0", "cmd": "npm install quasar@\">=2.22.0\"\nnpm ls quasar", "url": "https://github.com/advisories/GHSA-3r53-75j5-3g7j", "note": "vulnerable: <= 2.21.4"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/quasarframework/quasar/security/advisories/GHSA-3r53-75j5-3g7j", "url": "https://github.com/quasarframework/quasar/security/advisories/GHSA-3r53-75j5-3g7j"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73488", "publisher": "VulnCheck", "title": "Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/org", "summary": "Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can enumerate predictable customer IDs to retrieve sensitive information including email addresses, account balances, currency types, and billing configurati", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0037, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.220", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.3"], "fixed": "3.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73488"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-2364-jh4q-m9vm"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-2364-jh4q-m9vm"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.2969, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73603", "publisher": "VulnCheck", "title": "Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, all", "summary": "Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthenticated attackers can generate unlimited text-to-speech audio using stored OpenAI or ElevenLabs API keys by providing a valid chatflow UUID, incurring costs on the chatflow owner's account.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00329, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.617", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "flowise", "vendor": "flowiseai", "type": "app", "affected": ["< 3.1.4"], "fixed": "3.1.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flowise || rpm -q flowise || flowise --version"}, {"label": "2. UPGRADE to 3.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flowise"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flowise"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73603"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8gj2-2cvc-6xx7"}, {"t": "Exploit, Mitigation", "u": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8gj2-2cvc-6xx7"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24853, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28157", "publisher": "Patchstack", "title": "Subscriber Path Traversal in Do Lasso <= 358 versions.", "summary": "Subscriber Path Traversal in Do Lasso <= 358 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.450", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28157"}], "cwe": ["CWE-35"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34048, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28189", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions.", "summary": "Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00426, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:01.020", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28189"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35821, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66704", "publisher": "Patchstack", "title": "Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.", "summary": "Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:11.043", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66704"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17574, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70454", "publisher": "VulnCheck", "title": "rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate ", "summary": "rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detec", "cvss": 8.0, "sev": "HIGH", "epss": 0.0019, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.047", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70454"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.08161, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70454.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-70457", "publisher": "VulnCheck", "title": "rsync 3.2.3\u00a0before 3.5.0\u00a0contains an out-of-bounds write in parse_size_arg() where the return value of snprint", "summary": "rsync 3.2.3\u00a0before 3.5.0\u00a0contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without bounds checking. When snprintf truncates the formatted size string, the return value equals the number of characters that would have been written including the truncated portion, and this value may exceed the array length. The subsequent indexed write targets memory outsid", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00377, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:59.490", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": [">= 3.2.3 and < 3.5.0"], "fixed": "3.5.0", "safe": "before 3.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison rsync\nsudo apt install rsync=<VERSION_BEFORE_3.2.3>\nsudo apt-mark hold rsync"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list rsync\nsudo dnf downgrade rsync-<VERSION_BEFORE_3.2.3>\nsudo dnf versionlock add rsync"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70457"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-pg7g-xqmr-xpfh"}], "cwe": ["CWE-131", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30507, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70457.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73565", "publisher": "GitHub, Inc.", "title": "@hono/node-server allows running the Hono application on Node.js", "summary": "@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave waitForWebSocket pending because ws.handleUpgrade emits no connection event. The aborted handshake therefore has no cleanup path, allowing an unauthenticated atta", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00529, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:19.103", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73565"}], "cwe": ["CWE-401", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43951, "vendors": [{"os": "npm", "pkg": "@hono/node-server", "status": "fixed", "fixed": "2.0.10", "cmd": "npm install @hono/node-server@\">=2.0.10\"\nnpm ls @hono/node-server", "url": "https://github.com/advisories/GHSA-9mqv-5hh9-4cgg", "note": "vulnerable: >= 2.0.0, <= 2.0.9"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73610", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns", "summary": "SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document identifiers, and expanded folder paths by calling the getLocalStorage endpoint.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00335, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:25.607", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73610"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25729, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-xp3q-r38w-vgqm", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xp3q-r38w-vgqm"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-72741", "publisher": "VulnCheck", "title": "Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows a", "summary": "Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise's services, plugins, environment variables, and certificates.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:16.670", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72741"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.16347, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/goodrain/rainbond/issues/2665", "url": "https://github.com/goodrain/rainbond/issues/2665"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28155", "publisher": "Patchstack", "title": "Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.", "summary": "Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.197", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28155"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25212, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61978", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versi", "summary": "Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.337", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61978"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25223, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66660", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Contact Form 7 \u2013 PayPal & Stripe Add-on <= 2.5.1 versions.", "summary": "Unauthenticated Broken Access Control in Contact Form 7 \u2013 PayPal & Stripe Add-on <= 2.5.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.730", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66660"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25219, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53794", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a logic error in --max-alloc handling that allows a sender or configuration settin", "summary": "rsync before 3.5.0\u00a0contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather than enforcing a zero-byte cap. Attackers can exploit this flaw to cause the receiver to attempt unbounded memory allocations for file list and data structures, potentially exhausting available memory and causing a denial of service.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.853", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53794"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42372, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53794.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73606", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endp", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenticated readers can discover that password-protected documents reference specific blocks and obtain block identifiers without entering the document password.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:25.043", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73606"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24331, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260812083335-251596fc0de2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-vg99-7gj7-2fr5", "note": "vulnerable: < 0.0.0-20260812083335-251596fc0de2"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73607", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineSt", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks. Attackers can retrieve outline state including heading identifiers for any document by supplying its identifier, even for documents forbidden to the requester.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:25.183", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73607"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24335, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260812083335-251596fc0de2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-53fp-9jmv-227g", "note": "vulnerable: < 0.0.0-20260812083335-251596fc0de2"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-19293", "publisher": "Silicon Labs", "title": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported", "summary": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below.", "cvss": 8.8, "sev": "HIGH", "epss": 0.002, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:37.873", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19293"}], "cwe": ["CWE-521"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0936, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/", "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-53798", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mappi", "summary": "rsync before 3.5.0\u00a0contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an empty response for a uid or gid lookup, rsync incorrectly interprets it as a successful resolution to uid/gid 0 (root) rather than a lookup failure, and", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00428, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:51.947", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53798"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-hx7p-3gvv-pqgv"}], "cwe": ["CWE-704"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36049, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53798.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73505", "publisher": "GitHub, Inc.", "title": "Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer", "summary": "Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that direc", "cvss": 7.8, "sev": "HIGH", "epss": 0.00212, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:16.943", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73505"}], "cwe": ["CWE-94", "CWE-1336"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.1097, "vendors": [{"os": "Go", "pkg": "github.com/jandedobbeleer/oh-my-posh", "status": "fixed", "fixed": "29.35.1", "cmd": "go get github.com/jandedobbeleer/oh-my-posh@v29.35.1\ngo list -m github.com/jandedobbeleer/oh-my-posh", "url": "https://github.com/advisories/GHSA-6xj8-qv9j-xcjq", "note": "vulnerable: <= 29.35.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/JanDeDobbeleer/oh-my-posh/security/advisories/GHSA-6xj8-qv9j-xcjq", "url": "https://github.com/JanDeDobbeleer/oh-my-posh/security/advisories/GHSA-6xj8-qv9j-xcjq"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73617", "publisher": "VulnCheck", "title": "Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where us", "summary": "Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied parameters are enriched with handlebars using noEscaping: true and parsed without operator filtering. Attackers can inject MongoDB operators through query parameters to bypass per-user access controls, read arbitrary documents, execute JavaScript via $where operators, or modify collections through update and delete operations.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:26.627", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73617"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26625, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Budibase/budibase/security/advisories/GHSA-pmpg-2mxq-6xwr", "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-pmpg-2mxq-6xwr"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-66464", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.", "summary": "Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:07.707", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66464"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17577, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53788", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a newline injection vulnerability in the name-converter uid/gid mapping interface ", "summary": "rsync before 3.5.0\u00a0contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names communicated over the pipe-based line-oriented protocol to cause the rsync daemon to process attacker-influenced data as legitimate protocol input, corrupting ui", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:42.870", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53788"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18546, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53788.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-70462", "publisher": "VulnCheck", "title": "rsync 3.1.0 before 3.5.0\u00a0contains a signed integer overflow vulnerability in the I/O timeout implementation th", "summary": "rsync 3.1.0 before 3.5.0\u00a0contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSG_IO_TIMEOUT messages carrying non-positive (zero or negative) values. Attackers can craft malicious MSG_IO_TIMEOUT messages that cause the timeout variable to wrap to a non-positive value, preventing the timeout check from firing and enabling idle or stalled co", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00452, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:00.267", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70462"}], "cwe": ["CWE-190", "CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.38305, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70462.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73605", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that al", "summary": "SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validation or confinement. Attackers can supply arbitrary absolute paths to determine whether files and directories exist on the host, enabling reconnaissance of the filesystem layout and installed software.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:24.897", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73605"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24334, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260812083335-251596fc0de2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-hf8h-97gm-4x2p", "note": "vulnerable: < 0.0.0-20260812083335-251596fc0de2"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73609", "publisher": "VulnCheck", "title": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoin", "summary": "SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across the workspace, disclosing subject matter and organizational information from inaccessible documents.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:25.463", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73609"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24331, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260812083335-251596fc0de2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-j4ph-9xwf-wcj4", "note": "vulnerable: < 0.0.0-20260812083335-251596fc0de2"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73621", "publisher": "VulnCheck", "title": "GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwa", "summary": "GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without the check_unsafe_options guard present in the sibling iter_items method. An attacker who can control options passed to Commit.count (e.g., via an application that forwards a user-supplied options dict) can supply output=<path>, causing 'git rev-list --output=<path>' to open and truncate the ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0036, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:27.200", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "gitpython", "vendor": "gitpython project", "type": "app", "affected": ["< 3.1.56"], "fixed": "3.1.56", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show gitpython"}, {"label": "2. UPGRADE to 3.1.56", "cmd": "pip install --upgrade \"gitpython>=3.1.56\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73621"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.28639, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-27535", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.", "summary": "Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.120", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27535"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23876, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28173", "publisher": "Patchstack", "title": "Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.", "summary": "Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.277", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28173"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23876, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53801", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the sender's directory scanning logic th", "summary": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of the scanned tree can replace a symlink with a directory entry pointing outside the module root between the lstat() call and the subsequent opendir() call", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:52.623", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53801"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-mch3-qr4p-chgm"}], "cwe": ["CWE-59", "CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20047, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53801.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53803", "publisher": "VulnCheck", "title": "rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitra", "summary": "rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync", "cvss": 7.8, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:53.020", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53803"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-g9f4-7q66-9582"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12996, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53803.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65935", "publisher": "Silicon Labs", "title": "Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the tempo", "summary": "Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.\u00a0\nSee vulnerability B-E3 in the related paper below.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:56.290", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65935"}], "cwe": ["CWE-305"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15786, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "arxiv.org/pdf/2409.02905", "url": "https://arxiv.org/pdf/2409.02905"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-28159", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.", "summary": "Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.737", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28159"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29477, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-28174", "publisher": "Patchstack", "title": "Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.", "summary": "Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00371, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.403", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28174"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.29866, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-53789", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains an improper path handling vulnerability that allows a malicious sender to expand t", "summary": "rsync before 3.5.0\u00a0contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to reclassify implied parent directory entries or treat synthetic paths as the transfer root. Attackers can exploit multiple variants including implied parent reclassification, synthetic root path construction, legacy p", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00357, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.030", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53789"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-fxwg-7hmf-xh5q"}], "cwe": ["CWE-807"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28279, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsync", "status": "fixed", "fixed": "3.5.0+ds1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' rsync)\" ge \"3.5.0+ds1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-3.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67463\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.1.3-28.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74095\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.2.7-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67462\nrpm -q rsync", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsync", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "rsync", "status": "fixed", "fixed": "rsync-3.5.0-r0", "cmd": "apk add --upgrade rsync\napk info -v rsync", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3131", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53789.html", "note": "ALAS2023-2026-3131"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-27536", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms  <= 4.3.3 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms  <= 4.3.3 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.250", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27536"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15662, "pinned": false}, {"id": "CVE-2026-27539", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.640", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27539"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15662, "pinned": false}, {"id": "CVE-2026-27999", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.", "summary": "Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.013", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27999"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26301, "pinned": false}, {"id": "CVE-2026-28003", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Maspik \u2013 Spam blacklist <= 2.9.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Maspik \u2013 Spam blacklist <= 2.9.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.433", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28003"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15629, "pinned": false}, {"id": "CVE-2026-28004", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:57.560", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28004"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15664, "pinned": false}, {"id": "CVE-2026-28158", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:58.583", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28158"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15654, "pinned": false}, {"id": "CVE-2026-28170", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.143", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28170"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15665, "pinned": false}, {"id": "CVE-2026-28175", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.533", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28175"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15604, "pinned": false}, {"id": "CVE-2026-28181", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.", "summary": "Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.800", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28181"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26291, "pinned": false}, {"id": "CVE-2026-28187", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:00.717", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28187"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15654, "pinned": false}, {"id": "CVE-2026-61960", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:02.420", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61960"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15669, "pinned": false}, {"id": "CVE-2026-61965", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:02.680", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61965"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15668, "pinned": false}, {"id": "CVE-2026-61974", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:03.210", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61974"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15632, "pinned": false}, {"id": "CVE-2026-65580", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.190", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65580"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15684, "pinned": false}, {"id": "CVE-2026-66426", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.730", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66426"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15637, "pinned": false}, {"id": "CVE-2026-66429", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:04.860", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66429"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15636, "pinned": false}, {"id": "CVE-2026-66468", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.237", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66468"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15602, "pinned": false}, {"id": "CVE-2026-66655", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.207", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66655"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15605, "pinned": false}, {"id": "CVE-2026-66697", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : M\u00e9thodes de livraison pour WooCommerce <= 2", "summary": "Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : M\u00e9thodes de livraison pour WooCommerce <= 2.10.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.647", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66697"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15663, "pinned": false}, {"id": "CVE-2026-66698", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.787", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66698"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15659, "pinned": false}, {"id": "CVE-2026-66700", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.913", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66700"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15656, "pinned": false}, {"id": "CVE-2026-73353", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions.", "summary": "Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:13.140", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73353"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22963, "pinned": false}, {"id": "CVE-2026-73401", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.", "summary": "Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:13.407", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73401"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20888, "pinned": false}, {"id": "CVE-2026-73403", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.", "summary": "Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:13.533", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73403"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20887, "pinned": false}, {"id": "CVE-2026-73648", "publisher": "GitHub, Inc.", "title": "rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications", "summary": "rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVG_ALLOW_LOCAL_HREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applications with non-default allowed tags that included SVG use or feImage elements could therefore permit external references; a same-origin external SVG refe", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00547, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:20.620", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73648"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.45105, "pinned": false}, {"id": "CVE-2026-19716", "publisher": "Secur0", "title": "Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allow", "summary": "Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML() before interpolating it into the onclick attribute of the account deletion button, but the browser HTML-decodes attribute values before the JavaScript ", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00467, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:55.583", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19716"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39534, "pinned": false}, {"id": "CVE-2026-66693", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Motors <= 1.4.113 versions.", "summary": "Subscriber Broken Access Control in Motors <= 1.4.113 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.377", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66693"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21498, "pinned": false}, {"id": "CVE-2026-53784", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a path traversal vulnerability that allows remote clients to access files outside ", "summary": "rsync before 3.5.0\u00a0contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir() to the module root at session initialization without resolving symlinks via realpath() or equivalent, causing subsequent relative-path operations to reference files relative to the symlink target rather", "cvss": 7.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:42.190", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53784"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-ffg2-fr5g-3rxw"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14019, "pinned": false}, {"id": "CVE-2026-53792", "publisher": "VulnCheck", "title": "rsync\u00a0before 3.5.0\u00a0contains an out-of-bounds read vulnerability in the sender-side block matching logic that a", "summary": "rsync\u00a0before 3.5.0\u00a0contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially crafted checksum set containing a zero-length block to cause a negative offset calculation during delta computation, resulting in an out-of-bounds read of fil", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:43.527", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53792"}], "cwe": ["CWE-129", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22709, "pinned": false}, {"id": "CVE-2026-53802", "publisher": "VulnCheck", "title": "rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessibl", "summary": "rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:52.850", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53802"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49x4"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49x4"}], "cwe": ["CWE-61"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14019, "pinned": false}, {"id": "CVE-2026-63423", "publisher": "Lenovo Group Ltd.", "title": "During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Dis", "summary": "During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0015, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:55.080", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63423"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03835, "pinned": false}, {"id": "CVE-2026-63425", "publisher": "Lenovo Group Ltd.", "title": "During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenov", "summary": "During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0015, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:55.377", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "dock manager", "vendor": "lenovo", "type": "app", "affected": ["< 1.6.5.3"], "fixed": "1.6.5.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dock-manager || rpm -q dock-manager || dock-manager --version"}, {"label": "2. UPGRADE to 1.6.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dock-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dock-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63425"}, {"t": "Vendor Advisory", "u": "https://support.lenovo.com/us/en/product_security/LEN-223470"}], "cwe": ["CWE-276"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03836, "pinned": false}, {"id": "CVE-2026-67613", "publisher": "VulnCheck", "title": "CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to re", "summary": "CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint. Attackers can manipulate the reportFile parameter in the JSON request body, which is passed directly to open() in cloudManager.py without validation or allowlisting, enabling traversal to any file readable by the root-pri", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00498, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:18:08.197", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67613"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.41808, "pinned": false}, {"id": "CVE-2026-53785", "publisher": "VulnCheck", "title": "rsync\u00a0before 3.5.0\u00a0contains a path traversal vulnerability that allows a malicious sender to write files outsi", "summary": "rsync\u00a0before 3.5.0\u00a0contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The make_path() function follows symlinks pointing outside the destination tree while creating intermediate directories without verifying that created paths remain within the destination boundary, enabling arbitrary file write", "cvss": 7.1, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:42.403", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53785"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08425, "pinned": false}, {"id": "CVE-2026-73628", "publisher": "VulnCheck", "title": "Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the searc", "summary": "Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>). In include/functions_routing.inc.php serveSearch(), the sanitisation pipeline runs urldecode() after HTML-encoding, so a single URL-encoded HTML payload survives strip_tags() and htmlspecialchars() and is then decoded back into live HTML in the page. A crafted search link can execute arbitrary JavaScrip", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00263, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T12:17:28.183", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73628"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17151, "pinned": false}, {"id": "CVE-2026-27537", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:56.380", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-27537"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12396, "pinned": false}, {"id": "CVE-2026-28182", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:59.957", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28182"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12382, "pinned": false}, {"id": "CVE-2026-66467", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.097", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66467"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12398, "pinned": false}, {"id": "CVE-2026-66471", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:08.510", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66471"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12398, "pinned": false}, {"id": "CVE-2026-66687", "publisher": "Patchstack", "title": "Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.", "summary": "Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.983", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66687"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12401, "pinned": false}, {"id": "CVE-2026-66689", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.", "summary": "Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:10.113", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66689"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16795, "pinned": false}, {"id": "CVE-2026-73340", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:12.613", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73340"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12395, "pinned": false}, {"id": "CVE-2026-12036", "publisher": "Lenovo Group Ltd.", "title": "An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Co", "summary": "An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.", "cvss": 7.1, "sev": "HIGH", "epss": 0.0016, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:28.293", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12036"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0477, "pinned": false}, {"id": "CVE-2026-63424", "publisher": "Lenovo Group Ltd.", "title": "During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that", "summary": "During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00133, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:55.223", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "dock manager", "vendor": "lenovo", "type": "app", "affected": ["< 1.6.5.3"], "fixed": "1.6.5.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dock-manager || rpm -q dock-manager || dock-manager --version"}, {"label": "2. UPGRADE to 1.6.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dock-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dock-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63424"}, {"t": "Vendor Advisory", "u": "https://support.lenovo.com/us/en/product_security/LEN-223470"}], "cwe": ["CWE-261"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02548, "pinned": false}, {"id": "CVE-2026-63426", "publisher": "Lenovo Group Ltd.", "title": "During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that c", "summary": "During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:55.517", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "dock manager", "vendor": "lenovo", "type": "app", "affected": ["< 1.6.5.3"], "fixed": "1.6.5.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy dock-manager || rpm -q dock-manager || dock-manager --version"}, {"label": "2. UPGRADE to 1.6.5.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade dock-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade dock-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63426"}, {"t": "Vendor Advisory", "u": "https://support.lenovo.com/us/en/product_security/LEN-223470"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.05166, "pinned": false}, {"id": "CVE-2026-65934", "publisher": "Silicon Labs", "title": "An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.\u00a0\nSee vulnera", "summary": "An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.\u00a0\nSee vulnerability B-E10 in the related paper below.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00141, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:56.147", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65934"}], "cwe": ["CWE-440"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03109, "pinned": false}, {"id": "CVE-2026-6387", "publisher": "Lenovo Group Ltd.", "title": "A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local ", "summary": "A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.", "cvss": 7.0, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:58.590", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6387"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06588, "pinned": false}, {"id": "CVE-2026-49820", "publisher": "GitHub, Inc.", "title": "Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te", "summary": "Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session transfer, OAuth connectors, and trust-center magic links). Prior to version 0.19.3.1, the validator only inspected the second character of relative paths, so a URL like `/../\\evil.com` passed validation because the second char", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00417, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:41.410", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49820"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3496, "pinned": false}, {"id": "CVE-2026-66654", "publisher": "Patchstack", "title": "Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.", "summary": "Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:09.063", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66654"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10011, "pinned": false}, {"id": "CVE-2026-73344", "publisher": "Patchstack", "title": "Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.", "summary": "Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:17:12.750", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73344"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14331, "pinned": false}, {"id": "CVE-2026-59763", "publisher": "Gitea Limited", "title": "Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads", "summary": "Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00414, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T17:17:30.360", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59763"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34581, "pinned": false}, {"id": "CVE-2026-12236", "publisher": "Zephyr Project", "title": "The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an A", "summary": "The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BT_GATT_DISCOVER_STD_CHAR_DESC discovery. The per-entry stride rsp->len is taken directly from the peer's PDU, and the parse loop both tests its exit condition (length >= rsp->len) and advances (length -= rsp->len, pdu += rsp->len) using that value. The minimum value of rs", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T18:17:17.017", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12236"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04792, "pinned": false}, {"id": "CVE-2026-53796", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-da", "summary": "rsync before 3.5.0\u00a0contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can substitute a symlink for a component of the destination path between the path resolution and chdir() call, causing the receiver's working directory to b", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:51.553", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53796"}], "cwe": ["CWE-59", "CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02554, "pinned": false}, {"id": "CVE-2026-53799", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability that allows local attackers to cause rsync ", "summary": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent acl_set_file() or lsetxattr() call. Attackers can exploit this timing window to redirect ACL and xattr application through a crafted symlink to files outside the intended ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00122, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:52.130", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53799"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-phxh-hjqv-39c9"}], "cwe": ["CWE-59", "CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.01868, "pinned": false}, {"id": "CVE-2026-73506", "publisher": "GitHub, Inc.", "title": "Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer", "summary": "Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, write(s rune) in src/terminal/writer.go emitted attacker-controlled current directory names and Git metadata, including Commit.Subject, Commit.Author.Name, Commit.Author.Email, and RawUpstreamURL, without removing C0/C1 terminal control characters such as ESC, BEL, CSI, and OSC, allowing terminal escape sequence injection during prompt rend", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:20:17.133", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73506"}], "cwe": ["CWE-150"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07081, "pinned": false}, {"id": "CVE-2026-65932", "publisher": "Silicon Labs", "title": "The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting ", "summary": "The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:55.867", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65932"}], "cwe": ["CWE-440"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1554, "pinned": false}, {"id": "CVE-2026-65933", "publisher": "Silicon Labs", "title": "A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information", "summary": "A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:56.003", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65933"}], "cwe": ["CWE-126"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15538, "pinned": false}, {"id": "CVE-2026-65936", "publisher": "Silicon Labs", "title": "A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive i", "summary": "A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.\u00a0\nSee vulnerability B-E4 in the related paper below.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:56.423", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65936"}], "cwe": ["CWE-126"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15539, "pinned": false}, {"id": "CVE-2026-21832", "publisher": "HCL Software", "title": "HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered", "summary": "HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially resulting in unintended behavior or security impact under certain conditions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T14:16:55.723", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21832"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20978, "pinned": false}, {"id": "CVE-2026-49856", "publisher": "GitHub, Inc.", "title": "@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research", "summary": "@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reserved targets unless an explicit authorization object allows private network access. The policy is enforced by raw HTTP/TCP/TLS RTT tools, but the ICMP probe and traceroute tools resolve the target and invoke the na", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:41.563", "modified": "2026-10-23T18:10:00.167", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49856"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19524, "pinned": false}, {"id": "CVE-2026-53797", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the sender's source tree traversal that ", "summary": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with a symlink pointing outside the source root between path resolution and file open operations to disclose file contents outside the intended transfer root.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00143, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:51.750", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53797"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-3jj3-qvc7-jp6x"}], "cwe": ["CWE-59", "CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.03263, "pinned": false}, {"id": "CVE-2026-53800", "publisher": "VulnCheck", "title": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the --remove-source-files feature that a", "summary": "rsync before 3.5.0\u00a0contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink() call, causing rsync to delete the symlink target rather than the intended source file.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00142, "kev": false, "added": "2026-08-13", "pub": "2026-08-13T15:19:52.300", "modified": "2026-10-23T18:10:00.167", "products": [{"name": "rsync", "vendor": "samba", "type": "app", "affected": ["< 3.5.0"], "fixed": "3.5.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy rsync || rpm -q rsync || rsync --version"}, {"label": "2. UPGRADE to 3.5.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade rsync"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade rsync"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53800"}, {"t": "Vendor Advisory", "u": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-v3vw-pvpg-chwh"}], "cwe": ["CWE-59", "CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.03168, "pinned": false}, {"id": "CVE-2026-68836", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally", "summary": "Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:53.820", "modified": "2026-10-23T17:54:17.510", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68836"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68836"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26416, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69326", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.", "summary": "Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00639, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:54.000", "modified": "2026-10-23T17:53:53.260", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69326"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69326"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.4999, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69354", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca", "summary": "Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:54.177", "modified": "2026-10-23T17:52:35.100", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69354"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69354"}], "cwe": ["CWE-122", "CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26414, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2022", "pkg": "KB5122882", "status": "fixed", "fixed": "10.0.20348.5622", "cmd": "Install KB5122882 via Windows Update, then verify:\nGet-HotFix -Id KB5122882", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882", "note": "KB5122882"}], "vendors_checked": "2026-10-23T18:13:22.011771+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69363", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over", "summary": "Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.", "cvss": 8.0, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:54.357", "modified": "2026-10-23T17:52:10.030", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69363"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69363"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48511, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2022", "pkg": "KB5122882", "status": "fixed", "fixed": "10.0.20348.5622", "cmd": "Install KB5122882 via Windows Update, then verify:\nGet-HotFix -Id KB5122882", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882", "note": "KB5122882"}], "vendors_checked": "2026-10-23T18:12:00.013625+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69387", "publisher": "Microsoft Corporation", "title": "Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", "summary": "Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", "cvss": 7.0, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:54.710", "modified": "2026-10-23T17:48:36.103", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69387"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69387"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.18209, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69452", "publisher": "Microsoft Corporation", "title": "Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a", "summary": "Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00583, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:55.033", "modified": "2026-10-23T17:47:52.823", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69452"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69452"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47156, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69471", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", "summary": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:55.337", "modified": "2026-10-23T17:47:24.263", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69471"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69471"}], "cwe": ["CWE-122", "CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26413, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-69506", "publisher": "Microsoft Corporation", "title": "Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information local", "summary": "Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:55.520", "modified": "2026-10-23T17:45:19.753", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69506"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69506"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.23601, "pinned": false}, {"id": "CVE-2026-69521", "publisher": "Microsoft Corporation", "title": "Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network", "summary": "Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00664, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T19:18:55.697", "modified": "2026-10-23T17:38:41.470", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69521"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51173, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2022", "pkg": "KB5122882", "status": "fixed", "fixed": "10.0.20348.5622", "cmd": "Install KB5122882 via Windows Update, then verify:\nGet-HotFix -Id KB5122882", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882", "note": "KB5122882"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-13769", "publisher": "AMZN", "title": "Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where ", "summary": "Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the default on most systems) may allow other local users on the same host to read credentials written by certain CLI subcommands (aws codeartifact login, aws iam create-virtual-mfa-device, aws deploy register).\n\nTo remediate this issue, users should upgrade to AWS CLI 1.44.78", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-07-01", "pub": "2026-07-01T19:16:36.300", "modified": "2026-10-23T17:36:58.483", "products": [{"name": "aws command line interface", "vendor": "amazon", "type": "app", "affected": ["< 1.44.78", ">= 2.0.0 and < 2.34.29"], "fixed": "1.44.78, 2.34.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy aws-command-line-interface || rpm -q aws-command-line-interface || aws-command-line-interface --version"}, {"label": "2. UPGRADE to 1.44.78 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade aws-command-line-interface"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade aws-command-line-interface"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison aws-command-line-interface\nsudo apt install aws-command-line-interface=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold aws-command-line-interface"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list aws-command-line-interface\nsudo dnf downgrade aws-command-line-interface-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add aws-command-line-interface"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13769"}, {"t": "Vendor Advisory", "u": "https://aws.amazon.com/security/security-bulletins/2026-049-aws/"}, {"t": "Vendor Advisory", "u": "https://github.com/aws/aws-cli/security/advisories/GHSA-wfp6-f47h-hxc3"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.05365, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3966 (medium): awscli", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3966.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2AWSCLI1-2026-001 (medium): awscli", "url": "https://alas.aws.amazon.com/AL2/ALAS2AWSCLI1-2026-001.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3133 (medium): awscli-2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3133.html", "date": "2026-09-29"}], "buzz": 2, "pinned": false}, {"id": "CVE-2022-24513", "publisher": "Microsoft Corporation", "title": "Visual Studio Elevation of Privilege Vulnerability", "summary": "Visual Studio Elevation of Privilege Vulnerability", "cvss": 7.8, "sev": "HIGH", "epss": 0.00779, "kev": false, "added": "2022-04-15", "pub": "2022-04-15T19:15:11.057", "modified": "2026-10-23T17:33:25.670", "products": [{"name": "visual studio 2017", "vendor": "microsoft", "type": "app", "affected": [">= 15.9 and < 15.9.49"], "fixed": "15.9.49", "safe": "before 15.9", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2017 || rpm -q visual-studio-2017 || visual-studio-2017 --version"}, {"label": "2. UPGRADE to 15.9.49 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2017"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2017"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 15.9 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2017\nsudo apt install visual-studio-2017=<VERSION_BEFORE_15.9>\nsudo apt-mark hold visual-studio-2017"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2017\nsudo dnf downgrade visual-studio-2017-<VERSION_BEFORE_15.9>\nsudo dnf versionlock add visual-studio-2017"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2019", "vendor": "microsoft", "type": "app", "affected": [">= 8.10 and < 8.10.24"], "fixed": "8.10.24", "safe": "before 8.10", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2019 || rpm -q visual-studio-2019 || visual-studio-2019 --version"}, {"label": "2. UPGRADE to 8.10.24 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2019"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2019"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.10 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2019\nsudo apt install visual-studio-2019=<VERSION_BEFORE_8.10>\nsudo apt-mark hold visual-studio-2019"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2019\nsudo dnf downgrade visual-studio-2019-<VERSION_BEFORE_8.10>\nsudo dnf versionlock add visual-studio-2019"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2019", "vendor": "microsoft", "type": "app", "affected": [">= 16.7 and < 16.7.27", ">= 16.9 and < 16.9.23", ">= 16.11 and < 16.11.16"], "fixed": "16.7.27, 16.9.23, 16.11.16", "safe": "before 16.7", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2019 || rpm -q visual-studio-2019 || visual-studio-2019 --version"}, {"label": "2. UPGRADE to 16.7.27 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2019"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2019"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 16.7 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2019\nsudo apt install visual-studio-2019=<VERSION_BEFORE_16.7>\nsudo apt-mark hold visual-studio-2019"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2019\nsudo dnf downgrade visual-studio-2019-<VERSION_BEFORE_16.7>\nsudo dnf versionlock add visual-studio-2019"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2022", "vendor": "microsoft", "type": "app", "affected": [">= 17.0 and < 17.0.3"], "fixed": "17.0.3", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2022 || rpm -q visual-studio-2022 || visual-studio-2022 --version"}, {"label": "2. UPGRADE to 17.0.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2022"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2022"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2022\nsudo apt install visual-studio-2022=<VERSION_BEFORE_17.0>\nsudo apt-mark hold visual-studio-2022"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2022\nsudo dnf downgrade visual-studio-2022-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add visual-studio-2022"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2022", "vendor": "microsoft", "type": "app", "affected": [">= 17.0 and < 17.0.12", ">= 17.1 and < 17.1.7"], "fixed": "17.0.12, 17.1.7", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2022 || rpm -q visual-studio-2022 || visual-studio-2022 --version"}, {"label": "2. UPGRADE to 17.0.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2022"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2022"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2022\nsudo apt install visual-studio-2022=<VERSION_BEFORE_17.0>\nsudo apt-mark hold visual-studio-2022"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2022\nsudo dnf downgrade visual-studio-2022-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add visual-studio-2022"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-24513"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24513"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24513"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55447, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-12343", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:17.773", "modified": "2026-10-23T17:27:38.860", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12343"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1358, "pinned": false}, {"id": "CVE-2026-12350", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:18.107", "modified": "2026-10-23T17:24:36.413", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12350"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1595, "pinned": false}, {"id": "CVE-2026-12660", "publisher": "IBM Corporation", "title": "IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory du", "summary": "IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.", "cvss": 2.7, "sev": "LOW", "epss": 0.0024, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:18.440", "modified": "2026-10-23T17:23:33.817", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12660"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14258, "pinned": false}, {"id": "CVE-2026-12665", "publisher": "IBM Corporation", "title": "IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing ", "summary": "IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00249, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:18.773", "modified": "2026-10-23T17:21:42.577", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12665"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15275, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-12669", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed comp", "summary": "IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.", "cvss": 3.1, "sev": "LOW", "epss": 0.00153, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:19.110", "modified": "2026-10-23T17:21:01.757", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12669"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04075, "pinned": false}, {"id": "CVE-2026-91630", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or co", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:02.897", "modified": "2026-10-23T17:19:47.177", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91630"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21818, "pinned": false}, {"id": "CVE-2026-91631", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Ora", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.003", "modified": "2026-10-23T17:19:41.827", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91631"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20977, "pinned": false}, {"id": "CVE-2026-91633", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthor", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00127, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.230", "modified": "2026-10-23T17:19:37.843", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91633"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02142, "pinned": false}, {"id": "CVE-2026-91634", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.347", "modified": "2026-10-23T17:19:33.787", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91634"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15552, "pinned": false}, {"id": "CVE-2026-91635", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:", "cvss": 8.1, "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.460", "modified": "2026-10-23T17:19:29.340", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91635"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16224, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91636", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 7.7, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.580", "modified": "2026-10-23T17:19:24.173", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91636"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29863, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91638", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Sc", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.817", "modified": "2026-10-23T17:19:18.217", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91638"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.31786, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91647", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H", "cvss": 8.1, "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.900", "modified": "2026-10-23T17:19:13.367", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91647"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16225, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91657", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.037", "modified": "2026-10-23T17:19:08.077", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91657"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07594, "pinned": false}, {"id": "CVE-2026-91658", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Sc", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00286, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.150", "modified": "2026-10-23T17:19:01.540", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91658"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.20024, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91659", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Build)", "summary": "Vulnerability in Oracle Essbase (component: Build).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or comple", "cvss": 7.7, "sev": "HIGH", "epss": 0.00228, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.263", "modified": "2026-10-23T17:18:53.277", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91659"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12908, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91660", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 4.3 (Availability impacts).  CVSS Vector: (CVSS:3", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00291, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.383", "modified": "2026-10-23T17:18:48.927", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91660"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20591, "pinned": false}, {"id": "CVE-2026-91661", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 7.7, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.493", "modified": "2026-10-23T17:18:44.280", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91661"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21616, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91662", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Java Based Agent)", "summary": "Vulnerability in Oracle Essbase (component: Java Based Agent).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in ", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00091, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.610", "modified": "2026-10-23T17:18:38.083", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91662"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00464, "pinned": false}, {"id": "CVE-2026-91663", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Bas", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00286, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.723", "modified": "2026-10-23T17:18:32.390", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91663"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.20023, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-12670", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message ", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00198, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:19.440", "modified": "2026-10-23T17:18:28.087", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12670"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-681"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.09136, "pinned": false}, {"id": "CVE-2026-87901", "publisher": "HackerOne", "title": "Improper sanitization in the registration module allows reflected Cross-Site Scripting.", "summary": "Improper sanitization in the registration module allows reflected Cross-Site Scripting.", "cvss": 8.3, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T17:17:22.137", "modified": "2026-10-23T17:17:22.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87901"}], "cwe": ["CWE-79"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-84682", "publisher": "TPLink", "title": "A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1", "summary": "A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.\u00a0\n\nSuccessful exploitation may result in complete device compromise through arbitrary command execution with root privileges.", "cvss": 7.7, "sev": "HIGH", "epss": 0.01042, "kev": false, "added": "2026-10-01", "pub": "2026-10-01T19:17:24.960", "modified": "2026-10-23T17:17:22.003", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84682"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.63786, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-18963", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine fo", "summary": "A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.06407, "kev": false, "added": "2026-08-18", "pub": "2026-08-18T17:16:57.083", "modified": "2026-10-23T17:17:21.527", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18963"}], "cwe": ["CWE-640"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 68, "tier": "P1", "why": ["Critical severity", "EPSS top 6%: very likely to be exploited", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.93666, "vendors": [{"os": "Maven", "pkg": "org.keycloak:keycloak-services", "status": "fixed", "fixed": "26.4.15", "cmd": "Set org.keycloak:keycloak-services to 26.4.15 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-4gv3-mc9p-5wqc", "note": "vulnerable: >= 26.0.0, < 26.4.15"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "ynsmroztas/KeySniper (120 stars)", "url": "https://github.com/ynsmroztas/KeySniper", "stars": 120}, {"kind": "poc", "name": "Snizi/CVE-2026-18963-Exploit (45 stars)", "url": "https://github.com/Snizi/CVE-2026-18963-Exploit", "stars": 45}, {"kind": "poc", "name": "Red-Darkin/CVE-2026-18963-keycloak (20 stars)", "url": "https://github.com/Red-Darkin/CVE-2026-18963-keycloak", "stars": 20}, {"kind": "edb", "name": "Keycloak  26.7.2 - Unauthenticated Account Takeover", "url": "https://www.exploit-db.com/exploits/52699"}, {"kind": "nuclei", "name": "Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-111653", "publisher": "VulnCheck", "title": "53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to", "summary": "53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when IS_SAAS is true, attackers can enumerate sequential enterprise IDs and overwrite logos, display names and branding for defacement and phishing.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:46.513", "modified": "2026-10-23T17:17:21.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111653"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27837, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111648", "publisher": "VulnCheck", "title": "BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated ", "summary": "BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile and motto fields, including a super administrator's email and mobile.", "cvss": 2.7, "sev": "LOW", "epss": 0.00273, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:45.753", "modified": "2026-10-23T17:17:21.087", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111648"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18636, "pinned": false}, {"id": "CVE-2026-111643", "publisher": "VulnCheck", "title": "Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated ", "summary": "Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter trustedProxies and webhookApiKey, to access every protected endpoint as the administrator.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00445, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:45.013", "modified": "2026-10-23T17:17:20.947", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111643"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3772, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-111638", "publisher": "VulnCheck", "title": "sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' com", "summary": "sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys and connect directly to backend hosts, bypassing ACLs and session recording.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00312, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:44.297", "modified": "2026-10-23T17:17:20.800", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111638"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.22926, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-109433", "publisher": "VulnCheck", "title": "Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the ", "summary": "Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled(). Attackers with minimal Cockpit access can exploit a non-empty disabledPermissions configuration to read all process instances, process definitions, and incidents engine", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T16:17:02.623", "modified": "2026-10-23T17:17:20.627", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109433"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24888, "pinned": false}, {"id": "CVE-2026-115414", "publisher": "AMZN", "title": "OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influenc", "summary": "OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address.\n\n\n\nTo remediate this issue, users should upgrade to version 1.166.2 or later.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00876, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:47.843", "modified": "2026-10-23T17:17:17.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115414"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58603, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-145-aws/", "date": "2026-10-22"}], "buzz": 1, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-115417", "publisher": "AMZN", "title": "Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0", "summary": "Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application.\n\n\n\nTo remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T21:17:17.633", "modified": "2026-10-23T17:17:17.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115417"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27469, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-147-aws/", "date": "2026-10-22"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-115419", "publisher": "AMZN", "title": "The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK f", "summary": "The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.\n\n\n\nTo mitigate this issue,", "cvss": 8.1, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T21:17:17.790", "modified": "2026-10-23T17:17:17.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115419"}], "cwe": ["CWE-488"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26203, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/", "date": "2026-10-22"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-97635", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file upl", "summary": "The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim\u2019s authenticated Agent Zero Web UI session.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0026, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T18:17:32.337", "modified": "2026-10-23T17:17:17.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97635"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16834, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91664", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Essbase. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vect", "cvss": 7.5, "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:06.847", "modified": "2026-10-23T17:15:47.933", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91664"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18826, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-12727", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffe", "summary": "IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00215, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:19.770", "modified": "2026-10-23T17:08:10.487", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12727"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-193"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.1136, "pinned": false}, {"id": "CVE-2026-14511", "publisher": "IBM Corporation", "title": "IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a spe", "summary": "IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00411, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:20.110", "modified": "2026-10-23T17:07:14.287", "products": [{"name": "mq", "vendor": "ibm", "type": "app", "affected": ["9.4.5.0", "9.4.5.1"], "fixed": null, "safe": "before 9.4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq || rpm -q mq || mq --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq\nsudo apt install mq=<VERSION_BEFORE_9.4.5.0>\nsudo apt-mark hold mq"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq\nsudo dnf downgrade mq-<VERSION_BEFORE_9.4.5.0>\nsudo dnf versionlock add mq"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14511"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7290859"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.34266, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-112331", "publisher": "VulnCheck", "title": "Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produ", "summary": "Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting required CloudEvent attributes (id, source, type), the attacker triggers an ArgumentException in KafkaMessageConsumer.SingleMessageHandlingAsync that is treated", "cvss": 7.5, "sev": "HIGH", "epss": 0.00679, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:05.750", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112331"}], "cwe": ["CWE-755"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51803, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115377", "publisher": "VulnCheck", "title": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability ", "summary": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs pointing to the host root, writing files as root for full host compromise.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00405, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:44.460", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115377"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.33657, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 13", "pkg": "incus", "status": "fixed", "fixed": "6.0.4-2+deb13u11", "cmd": "sudo apt update && sudo apt install --only-upgrade incus\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' incus)\" ge \"6.0.4-2+deb13u11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115375", "publisher": "VulnCheck", "title": "Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients ab", "summary": "Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from unvalidated dependent custom volume names in instance backup index.yaml files. Attackers can import a crafted instance backup with ../ sequences in dependent volume names to create root-owned directories with controlled content, leading to full host compromise.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00405, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:44.133", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115375"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.33657, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 13", "pkg": "incus", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-112332", "publisher": "VulnCheck", "title": "Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that a", "summary": "Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type. Attackers can exploit the fact that JsonSerializationException is not caught alongside JsonReaderException and InvalidCastException, causing TypedConsumer", "cvss": 7.5, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:05.890", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112332"}], "cwe": ["CWE-755"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36333, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115372", "publisher": "VulnCheck", "title": "Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to se", "summary": "Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operations. Attackers can set the option on a custom volume and trigger a copy or move onto a formatting pool to inject arguments into mkfs executed as root.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.670", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115372"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28816, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 13", "pkg": "incus", "status": "fixed", "fixed": "6.0.4-2+deb13u11", "cmd": "sudo apt update && sudo apt install --only-upgrade incus\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' incus)\" ge \"6.0.4-2+deb13u11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115376", "publisher": "VulnCheck", "title": "Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows pro", "summary": "Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. Attackers can send crafted POST requests to the custom volumes endpoint with a chosen source.project to copy and read other projects' volumes, snapshots, and configuration.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00273, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:44.320", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115376"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1871, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 13", "pkg": "incus", "status": "fixed", "fixed": "6.0.4-2+deb13u11", "cmd": "sudo apt update && sudo apt install --only-upgrade incus\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' incus)\" ge \"6.0.4-2+deb13u11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115371", "publisher": "VulnCheck", "title": "Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulner", "summary": "Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys in the default project. Attackers can query the bucket keys endpoints to obtain S3 access and secret keys, then read, modify or delete objects in those buckets.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00219, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.530", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115371"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11777, "pinned": false}, {"id": "CVE-2026-115374", "publisher": "VulnCheck", "title": "Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 serv", "summary": "Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz-* headers. Attackers can add an unsigned X-Amz-Copy-Source header to a presigned upload URL to copy other bucket objects onto the granted key, disclosing their contents and ETags.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00153, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.953", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115374"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04086, "vendors": [{"os": "Debian 13", "pkg": "incus", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115373", "publisher": "VulnCheck", "title": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability ", "summary": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets project-restricted clients read operations in other projects. Attackers holding a restricted certificate and a known operation UUID can retrieve command lines, environment secrets, websocket secrets, and trust enrolment tokens.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.813", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115373"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10214, "pinned": false}, {"id": "CVE-2026-115378", "publisher": "VulnCheck", "title": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability ", "summary": "Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entries reported first as symlinks then as files or directories, writing attacker-controlled files such as /etc/shadow on the operator's host.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00241, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:44.600", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115378"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14432, "pinned": false}, {"id": "CVE-2026-115370", "publisher": "VulnCheck", "title": "Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerabil", "summary": "Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.387", "modified": "2026-10-23T17:06:36.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115370"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21452, "pinned": false}, {"id": "CVE-2026-115398", "publisher": "VulnCheck", "title": "Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used b", "summary": "Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.033", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115398"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01798, "pinned": false}, {"id": "CVE-2026-115394", "publisher": "VulnCheck", "title": "Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows", "summary": "Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database file, triggering an OutOfMemoryError in PackedDatabase.open() that aborts the import and denies service.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:47.190", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115394"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01799, "pinned": false}, {"id": "CVE-2026-115503", "publisher": "VulnCheck", "title": "Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unz", "summary": "Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.173", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115503"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01798, "pinned": false}, {"id": "CVE-2026-115397", "publisher": "VulnCheck", "title": "Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstal", "summary": "Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:47.700", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115397"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01798, "pinned": false}, {"id": "CVE-2026-115396", "publisher": "VulnCheck", "title": "Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.p", "summary": "Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesystem, causing later writes to fail.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:47.547", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115396"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01798, "pinned": false}, {"id": "CVE-2026-115395", "publisher": "VulnCheck", "title": "Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipThem", "summary": "Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:47.340", "modified": "2026-10-23T17:05:04.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115395"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01799, "pinned": false}, {"id": "CVE-2026-112778", "publisher": "VulnCheck", "title": "Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotat", "summary": "Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service resources in one namespace can set router.middlewares or service.serverstransport annotations to obtain another tenant's injected credentials or reuse its", "cvss": 8.8, "sev": "HIGH", "epss": 0.00188, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T20:17:55.187", "modified": "2026-10-23T17:04:01.690", "products": [{"name": "traefik", "vendor": "traefik", "type": "app", "affected": ["< 2.11.46", ">= 3.0.0 and < 3.6.16", "3.7.0"], "fixed": "2.11.46, 3.6.16", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traefik || rpm -q traefik || traefik --version"}, {"label": "2. UPGRADE to 2.11.46 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traefik"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traefik"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traefik\nsudo apt install traefik=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold traefik"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traefik\nsudo dnf downgrade traefik-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add traefik"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112778"}, {"t": "Vendor Advisory, Patch", "u": "https://github.com/traefik/traefik/security/advisories/GHSA-rh7m-2m44-x32f"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07978, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-112390", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF with at least three IFDs never advances. When an application with olefile installed reads n_frames or saves all frames from a crafted MIC file, the no", "cvss": 7.5, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T21:17:07.340", "modified": "2026-10-23T17:01:18.697", "products": [{"name": "pillow", "vendor": "python", "type": "app", "affected": [">= 7.2.0 and < 13.0.0"], "fixed": "13.0.0", "safe": "before 7.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pillow || rpm -q pillow || pillow --version"}, {"label": "2. UPGRADE to 13.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pillow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pillow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pillow\nsudo apt install pillow=<VERSION_BEFORE_7.2.0>\nsudo apt-mark hold pillow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pillow\nsudo dnf downgrade pillow-<VERSION_BEFORE_7.2.0>\nsudo dnf versionlock add pillow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112390"}, {"t": "Patch", "u": "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218"}, {"t": "Exploit, Patch", "u": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9"}, {"t": "Exploit, Patch", "u": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20603, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-22hg-r758-rrw9", "note": "vulnerable: >= 7.2.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-112391", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested PDF to an application that saves an image with PDF append enabled. This can raise an uncaught RecursionError or terminate the worker, causing denial o", "cvss": 7.5, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T21:17:07.477", "modified": "2026-10-23T17:00:31.740", "products": [{"name": "pillow", "vendor": "python", "type": "app", "affected": [">= 5.1.0 and < 13.0.0"], "fixed": "13.0.0", "safe": "before 5.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pillow || rpm -q pillow || pillow --version"}, {"label": "2. UPGRADE to 13.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pillow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pillow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison pillow\nsudo apt install pillow=<VERSION_BEFORE_5.1.0>\nsudo apt-mark hold pillow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list pillow\nsudo dnf downgrade pillow-<VERSION_BEFORE_5.1.0>\nsudo dnf versionlock add pillow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112391"}, {"t": "Patch", "u": "https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20607, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-254f-3936-288h", "note": "vulnerable: >= 5.1.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-115546", "publisher": "Okta", "title": "Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on", "summary": "Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.", "cvss": 8.1, "sev": "HIGH", "epss": 0.0042, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:15.047", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115546"}], "cwe": ["CWE-287", "CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35282, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115547", "publisher": "Okta", "title": "An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially fo", "summary": "An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00444, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T04:18:16.030", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115547"}], "cwe": ["CWE-20", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.37653, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-93639", "publisher": "Rapid7, Inc.", "title": "A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator wit", "summary": "A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configuration through ConfigureZimletRequest. The uploaded configuration can also add an attacker-controlled domain to the proxy allowlist of the default class of service. If a signed-in user in that class opens a crafted /service/proxy URL, Zimbra serves attacker-controlled H", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.640", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93639"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-50053", "publisher": "Rapid7, Inc.", "title": "A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests", "summary": "A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* to populate servlet attributes intended for trusted internal dispatch. RestFilter copies URL parameters specifying an authentication token, target account, target item and dispatch state into the request attributes consumed by the Classic Web Client. Combined with CVE-2026-10632 on ZCS 10.1.16, this allows an attacker to supply t", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:53.060", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50053"}], "cwe": ["CWE-642"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-10632", "publisher": "Rapid7, Inc.", "title": "A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) a", "summary": "A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages parameter of the /h/rest document editor. The editor inserts package names into script attributes without HTML encoding. When combined with CVE-2026-50053, an attacker with an ordinary Zimbra account can supply their own authentication token and document identifiers in a URL and ", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:31.107", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10632"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115484", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the iscsiuio component of open-iscsi", "summary": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T01:16:53.670", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115484"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12019, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "open-iscsi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "open-iscsi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "iscsi-initiator-utils", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "iscsi-initiator-utils", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "iscsi-initiator-utils", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "iscsi-initiator-utils", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "iscsi-initiator-utils", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-115486", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the iscsiuio component of open-iscsi", "summary": "A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00206, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T01:16:53.943", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115486"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10202, "pinned": false}, {"id": "CVE-2026-114583", "publisher": "Python Software Foundation", "title": "tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-li", "summary": "tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, wh", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T21:17:16.543", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114583"}], "cwe": [], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10254, "pinned": false}, {"id": "CVE-2026-93631", "publisher": "Rapid7, Inc.", "title": "A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network ", "summary": "A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to link an attacker-controlled external account to a victim's mailbox. The OAuth callback does not bind its state value or authorization code to the initiating Zimbra session and instead selects the destination mailbox from the browser's current authentication cookie. On a deployment with the provider configured", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.023", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93631"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-93629", "publisher": "Rapid7, Inc.", "title": "An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email ", "summary": "An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to insert calendar invitations attributed to another user. The email delivery path permits external invitations but does not verify that the message sender is authorized to use the iCalendar ORGANIZER identity. When automatic invitation insertion is enabled, a crafted REQUEST component creates an event containing attacker-selected ", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.787", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93629"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93628", "publisher": "Rapid7, Inc.", "title": "An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) ", "summary": "An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to forge another attendee's response to an existing meeting. Zimbra passes a null sender identity when processing iCalendar REPLY components, causing the attendee authorization filter to be skipped. An attacker who knows the meeting UID, organizer address and attendee address can send a non-outdated reply ", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.667", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93628"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93627", "publisher": "Rapid7, Inc.", "title": "An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS)", "summary": "An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email sender is authorized to act as the supplied organizer. An attacker who knows the meeting UID and organizer address can supply a non-outdated sequence n", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.547", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93627"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115485", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the iscsiuio component of open-iscsi", "summary": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the iSCSI initiator name. An attacker on the same network segment can trigger this by sending a crafted DHCPv6 Advertise message.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.002, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T01:16:53.817", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115485"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09405, "pinned": false}, {"id": "CVE-2026-115786", "publisher": "Rapid7, Inc.", "title": "A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to c", "summary": "A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another user\u2019s mailbox quota by repeatedly sharing and revoking a document. Creation of the recipient\u2019s shared-file record charges the document size to mailbox-wide usage. Revocation deletes the record and reverses its folder counters without reversing the mailbox-wide charge. Repeated normal share notifications therefore accumulat", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.867", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115786"}], "cwe": ["CWE-682"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93638", "publisher": "Rapid7, Inc.", "title": "A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an", "summary": "A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input attribute without HTML encoding. A victim who opens the URL receives attacker-controlled script and page content under the legitimate Zimbra origin, allo", "cvss": 6.1, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.517", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93638"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115424", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the OpenShift client oc", "summary": "A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a malicious container image can exploit this vulnerability by embedding links, and a chained file entry, that reference locations outside the intended extractio", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:06.483", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115424"}], "cwe": ["CWE-61"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05298, "pinned": false}, {"id": "CVE-2026-115221", "publisher": "Red Hat, Inc.", "title": "A flaw was found in FreeIPA", "summary": "A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belongi", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00145, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:06.327", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115221"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03446, "pinned": false}, {"id": "CVE-2026-93633", "publisher": "Rapid7, Inc.", "title": "A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefca", "summary": "A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a document that displays attacker-controlled content under the Zimbra origin. When processing a stylesheet containing non-ASCII characters, DefangFilter appends the final ASCII segment without sanitizing it. HTML stored as application/x-zimbra-doc can therefore retain CSS URL references that the normal sanitizer remov", "cvss": 5.4, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.143", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93633"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115449", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libslirp", "summary": "A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest in the echo reply, breaking the NAT isolation that user-mode networking is expected to provide.", "cvss": 3.5, "sev": "LOW", "epss": 0.00226, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T22:18:06.647", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115449"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12615, "pinned": false}, {"id": "CVE-2026-93636", "publisher": "Rapid7, Inc.", "title": "An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to que", "summary": "An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise unreturned attributes of calendar resources through SearchCalendarResourcesRequest. Zimbra escapes search values but inserts the supplied attribute names directly into LDAP filter expressions without validation. An attacker can inject additional conditions and use repeated matching queries to recover readable resource attribu", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.397", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93636"}], "cwe": ["CWE-90"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93634", "publisher": "Rapid7, Inc.", "title": "A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user t", "summary": "A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file metadata, owner identifiers and declared sizes without validating a corresponding document share. An attacker can plant entries attributed to another real ", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:57.263", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93634"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-93630", "publisher": "Rapid7, Inc.", "title": "A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) all", "summary": "A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to bypass the restriction on forms that target the Zimbra host. DefangFilter and the OWASP ActionAttributePolicy compare the form-action hostname with the request hostname before browser URL canonicalization. A percent-encoded hostname can therefore survive sanitization while the browser submits the form to t", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:56.903", "modified": "2026-10-23T16:44:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93630"}], "cwe": ["CWE-180"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2025-30052", "publisher": "CERT.PL", "title": "The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing", "summary": "The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system.\u00a0\n\n\nThe vulnerability was confirmed to affect versions up to\u00a02026.MS3 but later versions may also be vulnerable.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.040", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30052"}], "cwe": ["CWE-290"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26559, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-30047", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data", "summary": "CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this API and transmit a crafted serialized object. When it is deserialized, it allows arbitrary code execution with root privileges on the server.\u00a0\n\n\nThis is", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00379, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.573", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30047"}], "cwe": ["CWE-502"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.30649, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in CGM CLININET software", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-46652", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename() extracts the destination filename from a server-supplied Content-Disposition response header and passes it directly to Path.resolve() without stripping directory components. This allows for a malicious HTTP server that the viewer fetches from to supply an absolute ", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:31.593", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46652"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-46651", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, the DownloadTaskEndpoint WebSocket endpoint (/tasks/download/monitor.socket) in goobi-viewer-core accepts download requests from unauthenticated users. This issue has been patched in version 26.05.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:31.453", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46651"}], "cwe": ["CWE-306", "CWE-552", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114357", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS6", "summary": "Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell (uid 2000), a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 (no host key authorization) and USB ADB enabled by default; ADB over TCP is not enabled by default but, once enabled (e.g. via the shipped /system/bin/a", "cvss": 9.3, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:49.820", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114357"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-30050", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module ", "summary": "CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges.\n\n\nThis issue was fixed in version 2026.MS3", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00217, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.810", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30050"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.11512, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-30046", "publisher": "CERT.PL", "title": "In the CGM CLININET application server, multiple processes responsible for HL7 communication with external sys", "summary": "In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker\u00a0in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges.\u00a0\n\n\nThe vulnerability was confirmed to affect versions up to\u00a02026.MS3 but later versions may also ", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00263, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.450", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30046"}], "cwe": ["CWE-250"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.17238, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-30053", "publisher": "CERT.PL", "title": "The CGM CLININET application runs the cgm-updater process listening on an open network port without any authen", "summary": "The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.\n\n\n\n\nThe vulnerability was confirmed to affect versions up to\u00a02026.MS3 but later versions may also be vulnerable.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00323, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.170", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30053"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24072, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2025-30049", "publisher": "CERT.PL", "title": "The CGM CLININET application stores user passwords as unsalted MD5 hashes.\n\n\nThis issue was fixed in versions ", "summary": "The CGM CLININET application stores user passwords as unsalted MD5 hashes.\n\n\nThis issue was fixed in versions 2026.MS1 and 2026.MS3", "cvss": 8.2, "sev": "HIGH", "epss": 0.00174, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.690", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30049"}], "cwe": ["CWE-916"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06549, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in CGM CLININET software", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-55486", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.08 to before version 26.05, the IIIF Auth 2.0 endpoints auth/login and auth/token in AuthorizationFlowResource accept an origin query parameter without validation and then (1) embed it into the Content-Security-Policy: frame-ancestors response header and (2) embed it into an HTML response body as a JavaScript single-quoted postMe", "cvss": 9.3, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:33.657", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55486"}], "cwe": ["CWE-79", "CWE-113", "CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-30054", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to local privilege escalation", "summary": "CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these files to execute arbitrary code as root.\n\n\nThe vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.001, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.290", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30054"}], "cwe": ["CWE-732"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.00821, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in CGM CLININET software", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-30045", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into R", "summary": "CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated from these expressions, an authenticated, high-privileged attacker can cause arbitrary code to be executed with root privileges.\u00a0\n\n\nThe vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00199, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.327", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30045"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "H", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.09191, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in CGM CLININET software", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-55459", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.require(algorithm).withIssuer(issuer).build() and does not enforce the aud claim during cryptographic validation. The aud check is performed manually afterwards via a single string-equality call, which only handles single-string aud va", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:33.207", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55459"}], "cwe": ["CWE-287", "CWE-345"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-55457", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, Configuration.getWebApiToken returns the empty string when webapi.authorization.token is not configured. AuthorizationFilter compares the supplied token against this default without first checking that the configured token is non-empty. A request to any @AuthorizationBinding-protected endpoint with an empty ?token= value ", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:33.060", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55457"}], "cwe": ["CWE-287", "CWE-1392"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114621", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to log into the admin panel can embed SQL fragments in those options to execute arbitrary SQL against the application's database, including reading password ", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:51.143", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114621"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115481", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, `PermissionGroupsService::build()` reads a plugin's `config/permission.php` to decide what each user group may reach. When that file is absent it writes a wildcard allow rule instead: `url` `/baser/<prefix>/<plugin>/*`, `method` `*`, `auth` true, for every non-admin group. BcCustomContent has no such file in any release. After an ad", "cvss": 8.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.307", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115481"}], "cwe": ["CWE-434"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114355", "publisher": "Switzerland Government Common Vulnerability Program", "title": "OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9", "summary": "OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to execute arbitrary commands as root by writing a crafted line to the Android log (logcat), which the helper reads and passes to a shell eval.", "cvss": 8.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:36.323", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114355"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114354", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI Crystal", "summary": "Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to execute arbitrary OS commands as root, because the handler passes a caller-supplied string to system() in the root-privileged 'assistant' daemon without any caller-identity or permission check.", "cvss": 8.6, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:35.297", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114354"}], "cwe": ["CWE-78", "CWE-862"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:02:04.936815+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-55463", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11.0 to before version 26.05, several Jakarta WebSocket endpoints in goobi-viewer-core (DownloadTaskEndpoint, CampaignEndpoint, AutocompleteEndpoint, UserEndpoint) accept connections without verifying that the associated HttpSession belongs to a logged-in user, and none validate the Origin header against an allowlist. An unauthent", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:33.360", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55463"}], "cwe": ["CWE-306", "CWE-862", "CWE-1385"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2025-58403", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supp", "summary": "CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenticated attacker can craft a malicious URL containing JavaScript or HTML code, which is executed in the victim's browser when the URL is visited, allowing the attacker to steal session cookies and perform actions on behalf of the victim within the application.\n\n\n\nThe vulnerability was confirmed to affect versio", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.417", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-58403"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38745, "pinned": false}, {"id": "CVE-2025-30043", "publisher": "CERT.PL", "title": "CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path", "summary": "CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents.\u00a0\n\n\nThis issue was fixed in version 2026.MS3", "cvss": 7.1, "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:03.300", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30043"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.09687, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in CGM CLININET software", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-115457", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode expansion runs over the complete rendered page, including HTML-escaped blog comments supplied by unauthenticated visitors. A comment containing the BcBaser.getGoogleMaps shortcode can set apiBaseUrl to an attacker-controlled script URL, which is emitted as a script src and executes JavaScript on the site's origin when another visit", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:51.867", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115457"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114624", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an array, allowing a string submitted through the admin JSON API to be stored unchanged. Entity reads, including front-end rendering and API responses, deserialize the stored value with unserialize() without an allowed_classes restriction, accepting both raw and base64-encod", "cvss": 7.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:51.583", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114624"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114622", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update() and getFullpath(), but ThemeFileForm::_execute() subsequently applies rawurldecode() to fullpath before writing. Because normalizePath() resolves only literal dot segments, percent-encoded traversal can pass the containment checks and become a path outsi", "cvss": 7.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:51.283", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114622"}], "cwe": ["CWE-22", "CWE-180"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114356", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.", "summary": "Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to invoke privileged operations, including factory reset with user-data wipe (transaction 153), shutdown (105), clock/timezone change (101/123), and the firmware-apply hand-off (151), because onTransact() performs no caller-identity or permission check.", "cvss": 7.0, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:36.507", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114356"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114353", "publisher": "Switzerland Government Common Vulnerability Program", "title": "Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600", "summary": "Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sending the hard-coded magic string 'dji26656677' to the USB-gadget serial interface (/dev/ttyGS0), after which each subsequent line is passed to system().", "cvss": 7.0, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:33.397", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114353"}], "cwe": ["CWE-912"], "vector": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-55465", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/{solrField}/spatial/search concatenates the user-supplied region query parameter directly into a Solr query string with no escaping, no local-param stripping, and no runtime schema enforcement (the OpenAPI @Schema(pattern=...) annotation is documentat", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:33.500", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55465"}], "cwe": ["CWE-89", "CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-55444", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet (RssResolver, GET /rss/) accepts the q and filterQuery parameters and concatenates them into Solr queries without validation. The servlet predates the REST API layer and lacks the input validation present in GET /api/v1/records/rss. q forms the main query body (wrapped only in literal parentheses); ", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.910", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55444"}], "cwe": ["CWE-20", "CWE-89", "CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-46347", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, when a password reset link is visited, the application generates a replacement password in a predictable way and emails it to the account holder. The insufficient entropy allows the password to be brute-forced by an attacker who can approximate the server-side generation time. Exploiting this finding in isolation requires", "cvss": 6.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:31.180", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46347"}], "cwe": ["CWE-330", "CWE-340", "CWE-640"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-55442", "publisher": "GitHub, Inc.", "title": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser", "summary": "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.03 to before version 26.05, SolrTools.cleanUpQuery() strips Solr local-parameter syntax ({!...}) from user-supplied query strings before they reach Solr. Its regex can be bypassed by wrapping the local parameter in a second pair of curly braces ({{!...}}): the outer braces are stripped, the inner {!...} survives intact, and a val", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:32.730", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55442"}], "cwe": ["CWE-20", "CWE-116"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115480", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json endpoint accepts submissions without enforcing the form's auth_captcha setting. BcMail\\Controller\\Api\\MailMessagesController::add() and MailMessagesService::create() omit the BcCaptchaService::check() verification of captcha_id and auth_captcha performed by MailController::su", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.160", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115480"}], "cwe": ["CWE-693", "CWE-799"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115479", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a comma-separated address list in a public mail form's email field and cause a single auto-reply to be addressed to multiple third parties. MailMessageMailer::sendFormToUser() passes the visitor-controlled userMail value to parseAndNormalizeMailAddresses(), which splits it with explode(',') and supplies every r", "cvss": 5.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:52.010", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115479"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2025-30051", "publisher": "CERT.PL", "title": "The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker cre", "summary": "The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account.\u00a0\n\n\nThis issue was fixed in version 2026.MS3", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00098, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:04.923", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-30051"}], "cwe": ["CWE-732"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00721, "pinned": false}, {"id": "CVE-2026-114623", "publisher": "GitHub, Inc.", "title": "baserCMS is a website development framework", "summary": "baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs() constructs a path containing literal ../ segments, and the view and edit actions pass it to ThemeFilesService::get() without containment validation. Authori", "cvss": 6.5, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T14:17:51.430", "modified": "2026-10-23T16:28:32.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114623"}], "cwe": ["CWE-22", "CWE-200", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-109618", "publisher": "PHP Group", "title": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the reques", "summary": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.1162, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T14:17:09.357", "modified": "2026-10-23T16:26:54.713", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 7.3.0 and < 8.2.35", ">= 8.3.0 and < 8.3.36", ">= 8.4.0 and < 8.4.27", ">= 8.5.0 and < 8.5.12"], "fixed": "8.2.35, 8.3.36, 8.4.27, 8.5.12", "safe": "before 7.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_7.3.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_7.3.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ruggedcom ape1808 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "pan-os", "vendor": "paloaltonetworks", "type": "os", "affected": [">= 10.2.0 and < 10.2.7", "10.2.7", "10.2.7 h1", "10.2.7 h10", "10.2.7 h11", "10.2.7 h12", "10.2.7 h13", "10.2.7 h14"], "fixed": "10.2.7, 11.1.4, 11.2.4, 12.1.4, 12.2.4", "safe": "before 10.2.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "panorama virtual appliance", "vendor": "paloaltonetworks", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy panorama-virtual-appliance || rpm -q panorama-virtual-appliance || panorama-virtual-appliance --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109618"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"}], "cwe": ["CWE-416", "CWE-755", "CWE-824", "CWE-1325"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 71, "tier": "P1", "why": ["Critical severity", "EPSS top 4%: very likely to be exploited", "Public exploit reference", "Covered by 11 security sources", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96047, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm5", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm5\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.28", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.28\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.13", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.13\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.35-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.35-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.27-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.27-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "fixed", "fixed": "php-8.3.36-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87070\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "fixed", "fixed": "php8.4-8.4.27-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87071\nrpm -q php8.4", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "php", "status": "fixed", "fixed": "php-8.3.19-1.el10_0.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88561\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "php", "status": "fixed", "fixed": "php-8.0.30-8.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87151\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 9.2 Update Services for SAP Solutions", "pkg": "php", "status": "fixed", "fixed": "php-8.0.30-1.el9_2.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88659\nrpm -q php", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3304", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-109618.html", "note": "ALAS2023-2026-3304"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true, "pocs": [{"kind": "poc", "name": "ikow/php2shell-poc (1698 stars)", "url": "https://github.com/ikow/php2shell-poc", "stars": 1698}, {"kind": "poc", "name": "eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC (970 stars)", "url": "https://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC", "stars": 970}, {"kind": "poc", "name": "assetnote/php2shell-scanner (473 stars)", "url": "https://github.com/assetnote/php2shell-scanner", "stars": 473}, {"kind": "edb", "name": "PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE", "url": "https://www.exploit-db.com/exploits/52704"}, {"kind": "nuclei", "name": "PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash Detection", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-109618.yaml"}], "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products  (Severity: HIGH", "url": "https://security.paloaltonetworks.com/CVE-2026-109618", "date": "2026-10-24"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-026-critical-vulnerabilities-impacting-php-cve-2026-109618-cve-2026-109619", "date": "2026-10-23"}, {"src": "Cisco Security Advisories", "group": "vendor", "title": "Vulnerabilities in PHP Affecting Cisco Products: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Vulnerabilities%20in%20PHP%20Affecting%20Cisco%20Products:%20October%202026%26vs_k=1", "date": "2026-10-23"}, {"src": "Siemens ProductCERT", "group": "vendor", "title": "SSA-566435 V1.0: PHP2Shell Vulnerabilities in Siemens Software Products", "url": "https://cert-portal.siemens.com/productcert/html/ssa-566435.html", "date": "2026-10-23"}, {"src": "Siemens ProductCERT", "group": "vendor", "title": "SSA-566512 V1.0: PHP2Shell Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices", "url": "https://cert-portal.siemens.com/productcert/html/ssa-566512.html", "date": "2026-10-23"}, {"src": "Unit 42 (Palo Alto)", "group": "research", "title": "Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23)", "url": "https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/", "date": "2026-10-23"}, {"src": "Horizon3.ai", "group": "research", "title": "CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available", "url": "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-109618-cve-2026-109619/", "date": "2026-10-23"}, {"src": "The Hacker News", "group": "news", "title": "PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware", "url": "https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html", "date": "2026-10-23"}, {"src": "Security Affairs", "group": "news", "title": "PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet", "url": "https://securityaffairs.com/201538/hacking/php2shell-millions-of-attacks-no-confirmed-successful-exploits-yet.html", "date": "2026-10-23"}, {"src": "CERT/CC Vulnerability Notes", "group": "gov", "title": "VU#763488: Memory corruption vulnerabilities in PHP", "url": "https://kb.cert.org/vuls/id/763488", "date": "2026-10-22"}, {"src": "HKCERT", "group": "gov", "title": "PHP Multiple Vulnerabilities", "url": "https://www.hkcert.org/security-bulletin/php-multiple-vulnerabilities_20261022", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3301 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3301.html", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3302 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3302.html", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3303 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3303.html", "date": "2026-10-22"}], "buzz": 11, "pinned": false, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-24401", "publisher": "GitHub, Inc.", "title": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00303, "kev": false, "added": "2026-01-24", "pub": "2026-01-24T02:15:48.760", "modified": "2026-10-23T16:16:51.507", "products": [{"name": "avahi", "vendor": "avahi", "type": "app", "affected": ["< 0.9", "0.9 rc1", "0.9 rc2"], "fixed": "0.9", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy avahi || rpm -q avahi || avahi --version"}, {"label": "2. UPGRADE to 0.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade avahi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade avahi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24401"}, {"t": "Patch", "u": "https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/avahi/avahi/issues/501"}, {"t": "Vendor Advisory", "u": "https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2192, "pinned": false}, {"id": "CVE-2026-113792", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T16:17:27.173", "modified": "2026-10-23T16:16:51.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113792"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39377, "vendors": [{"os": "Python (pip)", "pkg": "pypdf", "status": "fixed", "fixed": "6.20.1", "cmd": "pip install --upgrade \"pypdf>=6.20.1\"\npip show pypdf", "url": "https://github.com/advisories/GHSA-qfv9-64jg-mh7p", "note": "vulnerable: < 6.20.1"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "pypdf2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-113788", "publisher": "GitHub, Inc.", "title": "Lagoon is an application delivery platform for Kubernetes", "summary": "Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that would allow an attacker to execute arbitrary code which could lead to, among other things, elevated administrative permissions. It is mitigated by the fact that an attacker must have a Lagoon user account. Exploitation may be detected by checking the container logs of the `ssh` service for: `too many ar", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.0031, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T16:17:26.440", "modified": "2026-10-23T16:16:51.237", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113788"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.22702, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-111663", "publisher": "VulnCheck", "title": "Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attacke", "summary": "Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the full response via the returned ActiveStorage blob URL.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:48.077", "modified": "2026-10-23T16:16:51.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111663"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20009, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-111658", "publisher": "VulnCheck", "title": "SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allow", "summary": "SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can read and overwrite another site's channel names, file paths, templates, link URLs, and custom fields, breaking multi-site isolation.", "cvss": 3.8, "sev": "LOW", "epss": 0.00265, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:47.227", "modified": "2026-10-23T16:16:50.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111658"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17433, "pinned": false}, {"id": "CVE-2016-20104", "publisher": "VulnCheck", "title": "EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allo", "summary": "EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd, which readfile() returns unvalidated, disclosing local system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-1", "cvss": 7.5, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:14.193", "modified": "2026-10-23T16:16:50.360", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-20104"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31867, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2015-20128", "publisher": "VulnCheck", "title": "FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to ", "summary": "FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sys_City query, to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.", "cvss": 8.2, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:13.357", "modified": "2026-10-23T16:16:50.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-20128"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18271, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2014-125133", "publisher": "VulnCheck", "title": "NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthentica", "summary": "NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve sensitive files like wp-config.php. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00676, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:12.560", "modified": "2026-10-23T16:16:50.017", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2014-125133"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51692, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2012-20003", "publisher": "VulnCheck", "title": "Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that a", "summary": "Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims' browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00215, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:11.730", "modified": "2026-10-23T16:16:48.887", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2012-20003"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11321, "pinned": false}, {"id": "CVE-2026-55862", "publisher": "GitHub, Inc.", "title": "pupnp is an SDK for development of UPnP device and control point applications", "summary": "pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and ixmlNode_getElementsByTagNameRecursive, ixmlNode_getElementsByTagNameNSRecursive, ixmlNode_cloneNodeTreeRecursive, and ixmlNode_isAncestor in ixml/src/node.c recurse", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00378, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T16:18:44.060", "modified": "2026-10-23T16:10:19.583", "products": [{"name": "pupnp", "vendor": "pupnp project", "type": "app", "affected": ["< 2.0.0"], "fixed": "2.0.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pupnp || rpm -q pupnp || pupnp --version"}, {"label": "2. UPGRADE to 2.0.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pupnp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pupnp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55862"}, {"t": "Patch", "u": "https://github.com/pupnp/pupnp/commit/82ccaec7ab6b1258ea1ac66374d8940712ccd4c4"}, {"t": "Exploit, Mitigation", "u": "https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247"}, {"t": "Exploit, Mitigation", "u": "https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.30549, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 13", "pkg": "pupnp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50772", "publisher": "MITRE", "title": "An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted", "summary": "An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00926, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:09.207", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50772"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60124, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50772", "url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50772"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-67678", "publisher": "MITRE", "title": "File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary co", "summary": "File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00857, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:45.137", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67678"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58026, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/RainyGao-GitHub/DocSys/issues/49", "url": "https://github.com/RainyGao-GitHub/DocSys/issues/49"}, {"kind": "writeup", "name": "github.com/Y4y17/CVE/blob/main/DocSys/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%", "url": "https://github.com/Y4y17/CVE/blob/main/DocSys/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-67967", "publisher": "MITRE", "title": "Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code", "summary": "Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00649, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:47.840", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67967"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50481, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/H0111mes/Tenda-W20E-Vulnerability-Disclosure", "url": "https://github.com/H0111mes/Tenda-W20E-Vulnerability-Disclosure"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-75110", "publisher": "VulnCheck", "title": "MemOS is a memory operating system for LLMs and AI agents", "summary": "MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv(\"INTERNAL_SERVICE_SECRET\") returns None and a request omitting the X-Internal-Service header also yields None, so the comparison None == None eva", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00663, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:50.043", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75110"}], "cwe": ["CWE-697"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51132, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/MemTensor/MemOS/issues/2259", "url": "https://github.com/MemTensor/MemOS/issues/2259"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-50774", "publisher": "MITRE", "title": "An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.", "summary": "An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0061, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:31.767", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50774"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48577, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50774", "url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50774"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-51346", "publisher": "MITRE", "title": "SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to e", "summary": "SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00702, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:09.320", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51346"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52735, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-47698", "publisher": "GitHub, Inc.", "title": "vm2 is an open source vm/sandbox for Node.js", "summary": "vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and reach e.constructor.constructor for arbitrary host command execution. This issue is fixed in version 3.11.6.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00971, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:45.640", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47698"}], "cwe": ["CWE-913"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.61575, "vendors": [{"os": "npm", "pkg": "vm2", "status": "fixed", "fixed": "3.11.6", "cmd": "npm install vm2@\">=3.11.6\"\nnpm ls vm2", "url": "https://github.com/advisories/GHSA-cfcw-xp6x-25gj", "note": "vulnerable: <= 3.11.5"}], "vendors_checked": "2026-10-23T16:40:36.324765+00:00", "vendor_fixed": true, "pocs": [], "pinned": false}, {"id": "CVE-2026-73522", "publisher": "VulnCheck", "title": "COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remot", "summary": "COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp_to_can() function increments its write index without bounding it against the caller-supplied array size, and because the listener accepts datagrams from any sender matching a hardcoded unaut", "cvss": 7.5, "sev": "HIGH", "epss": 0.03954, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:14.030", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73522"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "EPSS top 10%: very likely to be exploited", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.90388, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-50770", "publisher": "MITRE", "title": "An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a cra", "summary": "An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0061, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:08.990", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50770"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48577, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50770", "url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50770"}], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-50776", "publisher": "MITRE", "title": "Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to ob", "summary": "Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01803, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:31.980", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50776"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.78386, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50776", "url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50776"}], "pinned": false, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-47683", "publisher": "GitHub, Inc.", "title": "vm2 is an open source vm/sandbox for Node.js", "summary": "vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concat(list, totalLength) or Buffer.from(arrayLike) with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory allocations that bypass the configured cap and can exhaust the host process. This issue is fixed in version 3.11.6.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00538, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:45.363", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47683"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4451, "vendors": [{"os": "npm", "pkg": "vm2", "status": "fixed", "fixed": "3.11.6", "cmd": "npm install vm2@\">=3.11.6\"\nnpm ls vm2", "url": "https://github.com/advisories/GHSA-gmc2-2x9w-cgh9", "note": "vulnerable: <= 3.11.5"}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-67918", "publisher": "MITRE", "title": "Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive infor", "summary": "Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint", "cvss": 7.5, "sev": "HIGH", "epss": 0.0136, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T22:17:25.910", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67918"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.71512, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/luoxuanxi/cve/tree/main/cve-hermes-studio-afr", "url": "https://github.com/luoxuanxi/cve/tree/main/cve-hermes-studio-afr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-65974", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.render_template is exposed without forcing restrict_globals, allowing server-side template injection and remote code execution. This issue is fixed in versions 15.111.0 and 16.22.0.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.01029, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:46.887", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65974"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.63384, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "pocs": [], "pinned": false, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-65832", "publisher": "GitHub, Inc.", "title": "Deskflow is a keyboard and mouse sharing app", "summary": "Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) values to ServerProxy::setOptions() in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m_modifierTranslationTable, after which ServerProxy::translateKey() or ServerProxy::translateModifierMask() indexes the seven-row s_translationTable or s_masks arrays ou", "cvss": 8.2, "sev": "HIGH", "epss": 0.00551, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:46.750", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65832"}], "cwe": ["CWE-125", "CWE-129"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45333, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Debian 13", "pkg": "deskflow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/deskflow/deskflow/security/advisories/GHSA-8rcq-7w87-h64j", "url": "https://github.com/deskflow/deskflow/security/advisories/GHSA-8rcq-7w87-h64j"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-61666", "publisher": "GitHub, Inc.", "title": "websocket-driver is a WebSocket protocol handler with pluggable I/O", "summary": "websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00445, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:39.917", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61666"}], "cwe": ["CWE-248"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37683, "vendors": [{"os": "RubyGems", "pkg": "websocket-driver", "status": "fixed", "fixed": "0.8.2", "cmd": "bundle update websocket-driver\nbundle list | grep websocket-driver", "url": "https://github.com/advisories/GHSA-2x63-gw47-w4mm", "note": "vulnerable: < 0.8.2"}, {"os": "Debian 12", "pkg": "ruby-websocket-driver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "ruby-websocket-driver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-47686", "publisher": "GitHub, Inc.", "title": "vm2 is an open source vm/sandbox for Node.js", "summary": "vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process from an embedder-exposed host function that throws an error with that object as its cause and then execute arbitrary host commands. This issue is fixed ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00581, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:45.507", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47686"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.47068, "vendors": [{"os": "npm", "pkg": "vm2", "status": "fixed", "fixed": "3.11.6", "cmd": "npm install vm2@\">=3.11.6\"\nnpm ls vm2", "url": "https://github.com/advisories/GHSA-m283-3h24-438v", "note": "vulnerable: <= 3.11.5"}], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71979", "publisher": "VulnCheck", "title": "INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains ", "summary": "INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers can send a single TCP packet on port 7624 with mismatched XML tags to trigger an unbounded sprintf() write into a fixed 1024-byte stack buffer in MsgQ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00584, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:12.370", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71979"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47206, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-56677", "publisher": "GitHub, Inc.", "title": "9Router is an AI router & token saver", "summary": "9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing unauthenticated attackers when dashboard login is disabled to scan internal services and reflect OIDC discovery fields including token_endpoint and jwks_u", "cvss": 8.6, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T22:17:14.970", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56677"}], "cwe": ["CWE-306", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30247, "vendors": [{"os": "npm", "pkg": "9router", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-8g4w-4ffg-8vgx", "note": "vulnerable: <= 0.5.4"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx", "url": "https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-12553", "publisher": "HP Inc.", "title": "HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor t", "summary": "HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:24.560", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12553"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36019, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-54284", "publisher": "GitHub, Inc.", "title": "sqlparse is a non-validating SQL parser module for Python", "summary": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split() before depth and token limits terminate processing. This issue is fixed in version 0.6.0.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00332, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:11.400", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54284"}], "cwe": ["CWE-407", "CWE-1333"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25233, "vendors": [{"os": "Python (pip)", "pkg": "sqlparse", "status": "fixed", "fixed": "0.6.0", "cmd": "pip install --upgrade \"sqlparse>=0.6.0\"\npip show sqlparse", "url": "https://github.com/advisories/GHSA-pwgv-4x5q-6m9f", "note": "vulnerable: <= 0.5.5"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.2.4-3ubuntu0.1+esm1", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.2.4-3ubuntu0.1+esm1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.2-1ubuntu0.22.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.2-1ubuntu0.22.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.4-1ubuntu0.2", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.4-1ubuntu0.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f", "url": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75011", "publisher": "VulDB", "title": "A flaw has been found in kylecui NetForensicMCP 2.1.0", "summary": "A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.01817, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:42.910", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75011"}], "cwe": ["CWE-74", "CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.78556, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/kylecui/NetForensicMCP/issues/1", "url": "https://github.com/kylecui/NetForensicMCP/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75479", "publisher": "VulnCheck", "title": "JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that", "summary": "JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full report definitions including embedded SQL statements and live query data.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00465, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:50.333", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75479"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39321, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/jeecgboot/jimureport/issues/4695", "url": "https://github.com/jeecgboot/jimureport/issues/4695"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71980", "publisher": "VulnCheck", "title": "Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDfr", "summary": "Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe() function in src/cng.c that allows unauthenticated network-adjacent attackers to trigger a heap read beyond buffer boundaries by sending a zero-length comfort-noise RTP payload. A zero-length payload causes an integer underflow in the uint8_t filter order calculation, which wraps to 255 and is clamped to 10, causing the function to u", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:12.510", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71980"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4853, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-73523", "publisher": "VulnCheck", "title": "COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows u", "summary": "COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The num_can_msgs variable declared as uint8_t truncates the -1 error return value from avtp_to_can() to 255, causing a write loop to iterate 255 times over a 15-slot", "cvss": 7.5, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:14.170", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73523"}], "cwe": ["CWE-197"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45235, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-68005", "publisher": "MITRE", "title": "An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP ", "summary": "An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function", "cvss": 7.5, "sev": "HIGH", "epss": 0.00582, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:45.347", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68005"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47087, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "mini-httpd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mini-httpd", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75111", "publisher": "VulnCheck", "title": "Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowi", "summary": "Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00572, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:50.193", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75111"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46586, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/evidentlyai/evidently/issues/1887", "url": "https://github.com/evidentlyai/evidently/issues/1887"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75014", "publisher": "VulDB", "title": "A flaw has been found in SourceCodester Pet Grooming Management Software 1.0", "summary": "A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:47.647", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75014"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36285, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/niaoniaollll/cve/issues/1", "url": "https://github.com/niaoniaollll/cve/issues/1"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75103", "publisher": "VulnCheck", "title": "Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any au", "summary": "Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account takeover and arbitrary code execution.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00429, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:49.200", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75103"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.36155, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/crawlab-team/crawlab/issues/1623", "url": "https://github.com/crawlab-team/crawlab/issues/1623"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-57485", "publisher": "GitHub, Inc.", "title": "Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files", "summary": "Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java injects the STIRLING-PDF-BACKEND-API-USER API key into pipeline subrequests, allowing an authenticated ROLE_USER to retrieve the key through /api/v1/user/get-api-key, impersonate the internal servic", "cvss": 8.5, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:44.587", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57485"}], "cwe": ["CWE-200", "CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.35396, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-3xxh-mm3g-c9w5", "url": "https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-3xxh-mm3g-c9w5"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75050", "publisher": "JetBrains s.r.o.", "title": "In JetBrains YouTrack before 2026.1.13901, \n2026.2.17950 doS attack was possible via crafted type parameters", "summary": "In JetBrains YouTrack before 2026.1.13901, \n2026.2.17950 doS attack was possible via crafted type parameters", "cvss": 7.1, "sev": "HIGH", "epss": 0.01063, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.097", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "youtrack", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.1.13901", ">= 2026.2 and < 2026.2.17950"], "fixed": "2026.1.13901, 2026.2.17950", "safe": "before 2026.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy youtrack || rpm -q youtrack || youtrack --version"}, {"label": "2. UPGRADE to 2026.1.13901 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade youtrack"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade youtrack"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.2 (Debian / Ubuntu)", "cmd": "apt-cache madison youtrack\nsudo apt install youtrack=<VERSION_BEFORE_2026.2>\nsudo apt-mark hold youtrack"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list youtrack\nsudo dnf downgrade youtrack-<VERSION_BEFORE_2026.2>\nsudo dnf versionlock add youtrack"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75050"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.64377, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-74238", "publisher": "VulnCheck", "title": "TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() functi", "summary": "TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can send a malformed datagram to the Velodyne UDP sensor port, which lacks sender-address restrictions present in other drivers, causing fabricated points d", "cvss": 7.5, "sev": "HIGH", "epss": 0.00483, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:42.713", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74238"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40734, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-59893", "publisher": "GitHub, Inc.", "title": "sqlparse is a non-validating SQL parser module for Python", "summary": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This issue is fixed in version 0.6.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00337, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:35.730", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59893"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25899, "vendors": [{"os": "Python (pip)", "pkg": "sqlparse", "status": "fixed", "fixed": "0.6.0", "cmd": "pip install --upgrade \"sqlparse>=0.6.0\"\npip show sqlparse", "url": "https://github.com/advisories/GHSA-prg7-hcfm-mfcr", "note": "vulnerable: <= 0.5.6.dev0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.2.4-3ubuntu0.1+esm1", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.2.4-3ubuntu0.1+esm1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.2-1ubuntu0.22.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.2-1ubuntu0.22.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.4-1ubuntu0.2", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.4-1ubuntu0.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr", "url": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75481", "publisher": "VulnCheck", "title": "SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating se", "summary": "SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users and workspaces.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0036, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:50.647", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75481"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.2858, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/skypilot-org/skypilot/issues/9846", "url": "https://github.com/skypilot-org/skypilot/issues/9846"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-71491", "publisher": "GitHub, Inc.", "title": "sqlparse is a non-validating SQL parser module for Python", "summary": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_GROUPING_TOKENS guard, causing quadratic CPU consumption through sqlparse.parse() and sqlparse.format(sql, strip_comments=True). This issue is fixed in version 0.6.0.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:12.120", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71491"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17168, "vendors": [{"os": "Python (pip)", "pkg": "sqlparse", "status": "fixed", "fixed": "0.6.0", "cmd": "pip install --upgrade \"sqlparse>=0.6.0\"\npip show sqlparse", "url": "https://github.com/advisories/GHSA-f2ff-p2ww-7p4p", "note": "vulnerable: <= 0.5.5"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.2.4-3ubuntu0.1+esm1", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.2.4-3ubuntu0.1+esm1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.2-1ubuntu0.22.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.2-1ubuntu0.22.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "sqlparse", "status": "fixed", "fixed": "0.4.4-1ubuntu0.2", "cmd": "sudo apt update && sudo apt install --only-upgrade sqlparse\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' sqlparse)\" ge \"0.4.4-1ubuntu0.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "sqlparse", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75529", "publisher": "CIRCL", "title": "Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality", "summary": "Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using send_file(task.file.path) without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. \n\n\nBecause Flask determines the response MIME type ", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00444, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:58.923", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75529"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37584, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-73424", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts x_astro_path for the public /_isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to render routes protected only by Vercel edge path rules or split edge middleware. This issue is fixed in 11.0.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:13.873", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73424"}], "cwe": ["CWE-441", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3126, "vendors": [{"os": "npm", "pkg": "@astrojs/vercel", "status": "fixed", "fixed": "11.0.3", "cmd": "npm install @astrojs/vercel@\">=11.0.3\"\nnpm ls @astrojs/vercel", "url": "https://github.com/advisories/GHSA-x27w-589x-frm2", "note": "vulnerable: >= 10.0.3, < 11.0.3"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/withastro/astro/security/advisories/GHSA-x27w-589x-frm2", "url": "https://github.com/withastro/astro/security/advisories/GHSA-x27w-589x-frm2"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75012", "publisher": "VulDB", "title": "A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023", "summary": "A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00655, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:47.317", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75012"}], "cwe": ["CWE-404", "CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50775, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/wyxstarry/afdc067090575c216a9d2622c3338e5c", "url": "https://gist.github.com/wyxstarry/afdc067090575c216a9d2622c3338e5c"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75013", "publisher": "VulDB", "title": "A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023", "summary": "A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00655, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:47.483", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75013"}], "cwe": ["CWE-404", "CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.50775, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "gist.github.com/wyxstarry/21e6c2853891a3beb140a7c879069f9f", "url": "https://gist.github.com/wyxstarry/21e6c2853891a3beb140a7c879069f9f"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-33437", "publisher": "GitHub, Inc.", "title": "Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files", "summary": "Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with innerHTML, allowing a malicious PDF to execute stored cross-site scripting when a user clicks Get Info and to access browser-session data or modify page conten", "cvss": 8.1, "sev": "HIGH", "epss": 0.00399, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:16:35.650", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-33437"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33027, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-qc47-qgh9-xj63", "url": "https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-qc47-qgh9-xj63"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-63178", "publisher": "GitHub, Inc.", "title": "Onyx is an open-source AI platform", "summary": "Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and add_users_to_user_group in ee/onyx/db/user_group.py without enforcing _validate_curator_can_modify_group, allowing a curator to add accounts to arbitrary groups and obtain document access thro", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00516, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T22:17:16.130", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63178"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.43084, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m", "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-65822", "publisher": "GitHub, Inc.", "title": "ERPNext is a free and open source Enterprise Resource Planning tool", "summary": "ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactive_customers/inactive_customers.py accepts an unvalidated doctype filter and interpolates it into raw SQL in get_sales_details and get_last_sales_amt, allowing an authenticated user to extract sensitive information and manipulate database queries. This issue is fixed in versions 15.116.0 and 16.23.0.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:46.610", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65822"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39239, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-48053", "publisher": "GitHub, Inc.", "title": "Kolibri is an offline-first education platform", "summary": "Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints on the `RemoteFacilityUser*` viewsets; remediation review found two further reflection points on the same pattern. The GET endpoint was unauthenticated", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:16:39.660", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48053"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31298, "vendors": [{"os": "Python (pip)", "pkg": "kolibri", "status": "fixed", "fixed": "0.19.4", "cmd": "pip install --upgrade \"kolibri>=0.19.4\"\npip show kolibri", "url": "https://github.com/advisories/GHSA-4mj9-pf4r-cqrc", "note": "vulnerable: <= 0.19.3"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/learningequality/kolibri/security/advisories/GHSA-4mj9-pf4r-cqrc", "url": "https://github.com/learningequality/kolibri/security/advisories/GHSA-4mj9-pf4r-cqrc"}, {"kind": "writeup", "name": "github.com/pypa/advisory-database/tree/main/vulns/kolibri/PYSEC-2026-2554.yaml", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/kolibri/PYSEC-2026-2554.yaml"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-62982", "publisher": "GitHub, Inc.", "title": "Glances is an open-source system cross-platform monitoring tool", "summary": "Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_mustache_dict() in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render() and be executed by secure_popen() through administrator-configured action templates. This issue is fixed in 4.5.6.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00197, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:56.740", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62982"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.08961, "vendors": [{"os": "Python (pip)", "pkg": "glances", "status": "fixed", "fixed": "4.5.6", "cmd": "pip install --upgrade \"glances>=4.5.6\"\npip show glances", "url": "https://github.com/advisories/GHSA-73wf-9vmv-5pv9", "note": "vulnerable: >= 4.5.2, < 4.5.6"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "glances", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glances", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9", "url": "https://github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-75048", "publisher": "JetBrains s.r.o.", "title": "In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible", "summary": "In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible", "cvss": 8.2, "sev": "HIGH", "epss": 0.00319, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:51.870", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "youtrack", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.18068"], "fixed": "2026.2.18068", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy youtrack || rpm -q youtrack || youtrack --version"}, {"label": "2. UPGRADE to 2026.2.18068 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade youtrack"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade youtrack"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75048"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23615, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75051", "publisher": "JetBrains s.r.o.", "title": "In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible", "summary": "In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible", "cvss": 8.1, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.213", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "youtrack", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.17917"], "fixed": "2026.2.17917", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy youtrack || rpm -q youtrack || youtrack --version"}, {"label": "2. UPGRADE to 2026.2.17917 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade youtrack"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade youtrack"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75051"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27416, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68517", "publisher": "GitHub, Inc.", "title": "Glances is an open-source system cross-platform monitoring tool", "summary": "Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_origins guard in glances/outputs/glances_restful_api.py uses exact list equality instead of wildcard membership, allowing a multi-origin list containing the wildcard to retain cors_credentials and expose authenticated REST API data to an untrusted website visited by a previously authenticated user. This issue is fixed in 4.5.6.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0046, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:40.173", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68517"}], "cwe": ["CWE-942"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38893, "vendors": [{"os": "Python (pip)", "pkg": "glances", "status": "fixed", "fixed": "4.5.6", "cmd": "pip install --upgrade \"glances>=4.5.6\"\npip show glances", "url": "https://github.com/advisories/GHSA-fp27-88fp-2phg", "note": "vulnerable: < 4.5.6"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/nicolargo/glances/security/advisories/GHSA-fp27-88fp-2phg", "url": "https://github.com/nicolargo/glances/security/advisories/GHSA-fp27-88fp-2phg"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-68518", "publisher": "GitHub, Inc.", "title": "Glances is an open-source system cross-platform monitoring tool", "summary": "Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/actions.py sanitizes individual Mustache values before chevron.render(), allowing adjacent unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-controlled process or container fields are rendered by an administrator-configured action template. This issue is fixed in 4.5.6.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:40.353", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68518"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.06416, "vendors": [{"os": "Python (pip)", "pkg": "glances", "status": "fixed", "fixed": "4.5.6", "cmd": "pip install --upgrade \"glances>=4.5.6\"\npip show glances", "url": "https://github.com/advisories/GHSA-qcpp-8x79-hhp3", "note": "vulnerable: <= 4.5.5"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-68520", "publisher": "GitHub, Inc.", "title": "Glances is an open-source system cross-platform monitoring tool", "summary": "Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_secure() in glances/config.py checks only option names and exposes public_username and credentials embedded in public_api values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This issue is fixed in 4.5.6.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00405, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:06.753", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68520"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33682, "vendors": [{"os": "Python (pip)", "pkg": "glances", "status": "fixed", "fixed": "4.5.6", "cmd": "pip install --upgrade \"glances>=4.5.6\"\npip show glances", "url": "https://github.com/advisories/GHSA-4h34-v6r8-mmjc", "note": "vulnerable: < 4.5.6"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glances", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-63667", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled _id, name, and extension fields in aposAttachments.json without ensuring that the resolved path remains under the extracted attachments directory, allowing an authenticated contributor to import a crafted archive, read a host file", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0046, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:44.720", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63667"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38902, "vendors": [{"os": "npm", "pkg": "@apostrophecms/import-export", "status": "fixed", "fixed": "3.6.2", "cmd": "npm install @apostrophecms/import-export@\">=3.6.2\"\nnpm ls @apostrophecms/import-export", "url": "https://github.com/advisories/GHSA-79qf-vqgc-7xx3", "note": "vulnerable: <= 3.6.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-71553", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set() and apos.util.get(), allowing an authenticated editor to overwrite the shared Object.prototype.toString function's call property and cause a persistent process-wide denial of service until restart.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00429, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:46.073", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71553"}], "cwe": ["CWE-1321"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36115, "vendors": [{"os": "npm", "pkg": "apostrophe", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-vmg4-6gfg-83qx", "note": "vulnerable: <= 4.32.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75531", "publisher": "CIRCL", "title": "Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables", "summary": "Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted directly into the inline JavaScript onclick handler used by the Submit to Lookyloo action.\n\n\nAlthough the value was subject to HTML escaping by the template engine, it was embedded inside a JavaScript string within an HTML attribute. An attacker-controlled URL containing spec", "cvss": 7.0, "sev": "HIGH", "epss": 0.00436, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:59.067", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75531"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36913, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-50773", "publisher": "MITRE", "title": "An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbt", "summary": "An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00245, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T19:16:31.663", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50773"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.14844, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50773", "url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50773"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-73560", "publisher": "GitHub, Inc.", "title": "vLLM is an inference and serving engine for large language models", "summary": "vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers_utils/processors/mimo_v2_omni.py passes attacker-controlled image and audio strings through _fetch_image, requests.get, and Image.open instead of MediaConnector, bypassing allowed_media_domains and allowed_local_media_path protections and allowing server-side requests and reads of arbitrary files accessible to", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:48.960", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "vllm", "vendor": "vllm", "type": "app", "affected": ["< 0.26.0"], "fixed": "0.26.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vllm || rpm -q vllm || vllm --version"}, {"label": "2. UPGRADE to 0.26.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vllm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vllm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73560"}, {"t": "Patch", "u": "https://github.com/vllm-project/vllm/commit/54503ecec0f3ac31e5ecfc5f28652e4cc42307b5"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/vllm-project/vllm/pull/43117"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4hhp-h66f-j5j7"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4hhp-h66f-j5j7"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.33916, "vendors": [{"os": "Python (pip)", "pkg": "vllm", "status": "fixed", "fixed": "0.26.0", "cmd": "pip install --upgrade \"vllm>=0.26.0\"\npip show vllm", "url": "https://github.com/advisories/GHSA-4hhp-h66f-j5j7", "note": "vulnerable: < 0.26.0"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75109", "publisher": "VulnCheck", "title": "Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handl", "summary": "Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00295, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:49.897", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75109"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.20975, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/determined-ai/determined/issues/10270", "url": "https://github.com/determined-ai/determined/issues/10270"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-9771", "publisher": "Zephyr Project", "title": "The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c", "summary": "The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer (K_SYSCALL_MEMORY_WRITE) and passed the two struct device * arguments, src_dev and dst_dev, directly into the implementation without any object validation \u2014 unlike every sibling flash syscal", "cvss": 8.8, "sev": "HIGH", "epss": 0.00142, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:57.720", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9771"}], "cwe": ["CWE-822", "CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03236, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-68cj-3hg4-5vpm", "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-68cj-3hg4-5vpm"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-46345", "publisher": "GitHub, Inc.", "title": "compliance-trestle is a tooling platform for managing compliance as code", "summary": "compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jinja` allows writing files outside the intended workspace. The application does not properly validate, `../`,  `..\\`, or absolute paths. This allows arbitrary file write to attacker-controlled locations. Versions 3.12.3 and 4.0.3 patch the issue.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00204, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:16:38.393", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-46345"}], "cwe": ["CWE-22", "CWE-36", "CWE-73"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09878, "vendors": [{"os": "Python (pip)", "pkg": "compliance-trestle", "status": "fixed", "fixed": "4.0.3", "cmd": "pip install --upgrade \"compliance-trestle>=4.0.3\"\npip show compliance-trestle", "url": "https://github.com/advisories/GHSA-4q5v-7g7x-j79w", "note": "vulnerable: >= 4.0.0, < 4.0.3"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/oscal-compass/compliance-trestle/commit/247fcce289f60103f3d8e28d8ec51a6986b94fb", "url": "https://github.com/oscal-compass/compliance-trestle/commit/247fcce289f60103f3d8e28d8ec51a6986b94fb6"}, {"kind": "writeup", "name": "github.com/oscal-compass/compliance-trestle/commit/7d107b3ac53caca7bde97a6278b23cd739d9452", "url": "https://github.com/oscal-compass/compliance-trestle/commit/7d107b3ac53caca7bde97a6278b23cd739d94525"}, {"kind": "writeup", "name": "github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-4q5v-7g7x-j79w", "url": "https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-4q5v-7g7x-j79w"}], "ssvc": null, "pinned": false}, {"id": "CVE-2026-75060", "publisher": "JetBrains s.r.o.", "title": "In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools", "summary": "In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools", "cvss": 8.4, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:53.227", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "pycharm", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pycharm || rpm -q pycharm || pycharm --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pycharm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pycharm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75060"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07371, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "pinned": false}, {"id": "CVE-2026-75480", "publisher": "VulnCheck", "title": "OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access ", "summary": "OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant records. Attackers can query these endpoints to retrieve private memories, resources, skills, and secret material belonging to other users in the same account without administrative privileges.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00415, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:50.477", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75480"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.34749, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/volcengine/OpenViking/issues/3724", "url": "https://github.com/volcengine/OpenViking/issues/3724"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-75049", "publisher": "JetBrains s.r.o.", "title": "In JetBrains YouTrack before 2026.1.13903, \n2026.2.17950 an authenticated user could read restricted articles ", "summary": "In JetBrains YouTrack before 2026.1.13903, \n2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:51.987", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "youtrack", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.1.13903", ">= 2026.2 and < 2026.2.17950"], "fixed": "2026.1.13903, 2026.2.17950", "safe": "before 2026.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy youtrack || rpm -q youtrack || youtrack --version"}, {"label": "2. UPGRADE to 2026.1.13903 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade youtrack"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade youtrack"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2026.2 (Debian / Ubuntu)", "cmd": "apt-cache madison youtrack\nsudo apt install youtrack=<VERSION_BEFORE_2026.2>\nsudo apt-mark hold youtrack"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list youtrack\nsudo dnf downgrade youtrack-<VERSION_BEFORE_2026.2>\nsudo dnf versionlock add youtrack"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75049"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26308, "pinned": false}, {"id": "CVE-2026-75056", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible", "cvss": 7.8, "sev": "HIGH", "epss": 0.00194, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.770", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75056"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08625, "pinned": false}, {"id": "CVE-2026-63669", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the page module's move() operation fails to enforce the destination parent's _create permission because its oldParent archive condition disables the check for ordinary moves, allowing an authenticated editor or contributor to use _targetId and _position through the page REST update endpoint to move a controlled page into a restricted subtree and make nudgeNewPeers", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:44.870", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63669"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22804, "pinned": false}, {"id": "CVE-2026-71486", "publisher": "GitHub, Inc.", "title": "vLLM is an inference and serving engine for large language models", "summary": "vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generate_responses, choices, token_ids, prompt_logprobs, logprobs.content, top_logprobs, and routed_experts structures are processed by OnlineDerenderer and tokenizer.decode before max_model_len, max_tokens, max_num_seqs, or response-size ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00374, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:45.927", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "vllm", "vendor": "vllm", "type": "app", "affected": ["< 0.26.0"], "fixed": "0.26.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vllm || rpm -q vllm || vllm --version"}, {"label": "2. UPGRADE to 0.26.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vllm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vllm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71486"}, {"t": "Patch", "u": "https://github.com/vllm-project/vllm/commit/8e61b646e2d157f9b93451fa048f9c8530c8a67b"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/vllm-project/vllm/pull/47260"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8737-qx52-hjff"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.3014, "pinned": false}, {"id": "CVE-2026-50771", "publisher": "MITRE", "title": "Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute ar", "summary": "Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:09.100", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50771"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2305, "pinned": false}, {"id": "CVE-2026-68519", "publisher": "GitHub, Inc.", "title": "Glances is an open-source system cross-platform monitoring tool", "summary": "Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions.py ignores --disable-config-exec for on-alert action commands and invokes secure_popen() with shell operators enabled, allowing configured redirection, command chaining, or pipes to execute when an alert triggers. This issue is fixed in 4.5.6.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00178, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:18:06.610", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68519"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06994, "pinned": false}, {"id": "CVE-2026-63670", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 2.17.6, sanitizeHtml() can pass disallowed executable markup through packages/sanitize-html/index.js when textarea or xmp is included in allowedTags because a literal solidus after the raw-text end-tag name is treated as text by htmlparser2 and the ontext handler emits that content without escaping, while a browser parses the following img onerror markup as active HTML. T", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00327, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T20:16:45.000", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63670"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24561, "pinned": false}, {"id": "CVE-2026-19589", "publisher": "HashiCorp Inc.", "title": "Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended fi", "summary": "Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability (CVE-2026-19589) is fixed in Packer 1.16.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00194, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:43.593", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19589"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08609, "pinned": false}, {"id": "CVE-2026-40145", "publisher": "BeyondTrust", "title": "A vulnerability exists in the interaction between a Endpoint Privilege Management\u00a0(Windows\u00a0Deployment)\u00a0support", "summary": "A vulnerability exists in the interaction between a Endpoint Privilege Management\u00a0(Windows\u00a0Deployment)\u00a0support\u00a0utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:39.787", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-40145"}], "cwe": ["CWE-1220"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04242, "pinned": false}, {"id": "CVE-2026-75104", "publisher": "VulnCheck", "title": "Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to r", "summary": "Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:49.340", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75104"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20087, "pinned": false}, {"id": "CVE-2026-65329", "publisher": "Apple Inc.", "title": "An authentication issue was addressed with improved state management", "summary": "An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T22:17:23.830", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "ipados", "vendor": "apple", "type": "os", "affected": ["< 26.6.1"], "fixed": "26.6.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "iphone os", "vendor": "apple", "type": "os", "affected": ["< 26.6.1"], "fixed": "26.6.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65329"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/148282"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14536, "pinned": false}, {"id": "CVE-2026-75054", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projec", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.543", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75054"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04116, "pinned": false}, {"id": "CVE-2026-75057", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log", "summary": "In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.880", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.1.5"], "fixed": "2026.1.5", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.1.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75057"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.06004, "pinned": false}, {"id": "CVE-2026-75053", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.430", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75053"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14238, "pinned": false}, {"id": "CVE-2026-59894", "publisher": "GitHub, Inc.", "title": "sqlparse is a non-validating SQL parser module for Python", "summary": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in sqlparse.format output_format='python' and output_format='php' and the corresponding sqlformat -l modes, allowing crafted SQL to terminate the generated string and inject Python or PHP code when a downstream consumer executes or imports the generated source. This issue is fixed in version 0.6.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00129, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T18:17:35.913", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59894"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02288, "pinned": false}, {"id": "CVE-2026-12519", "publisher": "Zephyr Project", "title": "The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/m", "summary": "The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/modem/vendor_standalone/wncm14a2a.c). The response line is linearized into a fixed 40-byte stack buffer via net_buf_linearize(), which caps the copy at 39 bytes and returns out_len <= 39. The two quote-delimiter scanning loops, however, were bounded by len \u2014 the full CR/LF-delimited frame length returned by net_buf_findcrlf() \u2014 rather than", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:38.867", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12519"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13603, "pinned": false}, {"id": "CVE-2026-64760", "publisher": "Apple Inc.", "title": "An information leakage was addressed with additional validation", "summary": "An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive kernel state.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T22:17:20.937", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "ipados", "vendor": "apple", "type": "os", "affected": ["< 18.7.10"], "fixed": "18.7.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "iphone os", "vendor": "apple", "type": "os", "affected": ["< 18.7.10"], "fixed": "18.7.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-64760"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/148287"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.05348, "pinned": false}, {"id": "CVE-2026-75055", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.657", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75055"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04115, "pinned": false}, {"id": "CVE-2026-75058", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.977", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75058"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.04116, "pinned": false}, {"id": "CVE-2026-12629", "publisher": "Zephyr Project", "title": "The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive error interrupts", "summary": "The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts (PL011_IMSC_ERROR_MASK) are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the RX interrupt and the per-byte RSR status but not the error interrupt status in MIS. The interrupt service routine pl011_isr() acknowledged only the ", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:39.010", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12629"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13103, "pinned": false}, {"id": "CVE-2026-12630", "publisher": "Zephyr Project", "title": "Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in get_ihpc_in", "summary": "Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in get_ihpc_inlined_size() (subsys/net/ip/6lo.c). The destination inline size is looked up in da_inline_size_table, which has 13 entries, using an index built from the M, DAC and DAM bits of the received IPHC dispatch word (iphc & NET_6LO_IPHC_DA_MASK, a 4-bit value of 0-15). The reserved combinations 13, 14 and 15 are not bounds-checked and read past ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T17:16:39.130", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12630"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16819, "pinned": false}, {"id": "CVE-2026-75059", "publisher": "JetBrains s.r.o.", "title": "In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible", "summary": "In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:53.110", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "pycharm", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pycharm || rpm -q pycharm || pycharm --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pycharm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pycharm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75059"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.07111, "pinned": false}, {"id": "CVE-2026-75052", "publisher": "JetBrains s.r.o.", "title": "In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible", "summary": "In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects", "cvss": 3.6, "sev": "LOW", "epss": 0.00175, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T16:17:52.320", "modified": "2026-10-23T16:10:00.313", "products": [{"name": "intellij idea", "vendor": "jetbrains", "type": "app", "affected": ["< 2026.2.1"], "fixed": "2026.2.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy intellij-idea || rpm -q intellij-idea || intellij-idea --version"}, {"label": "2. UPGRADE to 2026.2.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade intellij-idea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade intellij-idea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75052"}, {"t": "Vendor Advisory", "u": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.06708, "pinned": false}, {"id": "CVE-2026-75483", "publisher": "VulnCheck", "title": "powerlevel10k fails to neutralize control characters in the package.json version field when rendering the pack", "summary": "powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render when the shell enters affected directories.", "cvss": 3.3, "sev": "LOW", "epss": 0.00171, "kev": false, "added": "2026-08-17", "pub": "2026-08-17T21:16:57.930", "modified": "2026-10-23T16:10:00.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75483"}], "cwe": ["CWE-150"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06192, "pinned": false}, {"id": "CVE-2026-57486", "publisher": "GitHub, Inc.", "title": "pupnp is an SDK for development of UPnP device and control point applications", "summary": "pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocument_createAttribute legitimately leave those fields NULL. When ixmlElement_removeAttributeNode compares two distinct attribute objects with the same nodeName through find_conditio", "cvss": 7.5, "sev": "HIGH", "epss": 0.00411, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T16:18:44.510", "modified": "2026-10-23T16:07:55.893", "products": [{"name": "pupnp", "vendor": "pupnp project", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pupnp || rpm -q pupnp || pupnp --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pupnp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pupnp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57486"}, {"t": "Patch", "u": "https://github.com/pupnp/pupnp/commit/4b2f775e3b98de3cfb096707bcde040c5562d9ec"}, {"t": "Exploit, Mitigation", "u": "https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq"}, {"t": "Exploit, Mitigation", "u": "https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34318, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 13", "pkg": "pupnp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-57487", "publisher": "GitHub, Inc.", "title": "pupnp is an SDK for development of UPnP device and control point applications", "summary": "pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_parse_chunky_entity and parser_parse_chunky_body accumulate decoded bytes in parser->msg.entity. The g_maxContentLength checks in http_RecvMessage in upnp/src/genlib/net/http/httpreadwrite.c therefore reject ove", "cvss": 7.5, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T16:18:44.663", "modified": "2026-10-23T16:07:21.000", "products": [{"name": "pupnp", "vendor": "pupnp project", "type": "app", "affected": ["< 2.0.2"], "fixed": "2.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy pupnp || rpm -q pupnp || pupnp --version"}, {"label": "2. UPGRADE to 2.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade pupnp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade pupnp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57487"}, {"t": "Patch", "u": "https://github.com/pupnp/pupnp/commit/9ff9bc583ad8ee4ba022634434a7b71db9bd96e1"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26115, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 13", "pkg": "pupnp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-109619", "publisher": "PHP Group", "title": "PHP has various global state that temporarily points into request memory", "summary": "PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).", "cvss": 8.1, "sev": "HIGH", "epss": 0.05991, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T14:17:09.823", "modified": "2026-10-23T16:06:48.917", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 5.4.0 and < 8.2.35", ">= 8.3.0 and < 8.3.36", ">= 8.4.0 and < 8.4.27", ">= 8.5.0 and < 8.5.12"], "fixed": "8.2.35, 8.3.36, 8.4.27, 8.5.12", "safe": "before 5.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.35 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_5.4.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_5.4.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ruggedcom ape1808 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "pan-os", "vendor": "paloaltonetworks", "type": "os", "affected": [">= 10.2.0 and < 10.2.7", "10.2.7", "10.2.7 h1", "10.2.7 h10", "10.2.7 h11", "10.2.7 h12", "10.2.7 h13", "10.2.7 h14"], "fixed": "10.2.7, 11.1.4, 11.2.4, 12.1.4, 12.2.4", "safe": "before 10.2.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "panorama virtual appliance", "vendor": "paloaltonetworks", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy panorama-virtual-appliance || rpm -q panorama-virtual-appliance || panorama-virtual-appliance --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109619"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp"}], "cwe": ["CWE-416", "CWE-755", "CWE-824", "CWE-1325"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 65, "tier": "P1", "why": ["High severity", "EPSS top 7%: very likely to be exploited", "Public exploit reference", "Covered by 11 security sources", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.933, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm5", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm5\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.28", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.28\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.13", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.13\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.35-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.35-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.27-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.27-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "fixed", "fixed": "php-8.3.36-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87070\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "fixed", "fixed": "php8.4-8.4.27-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87071\nrpm -q php8.4", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "php", "status": "fixed", "fixed": "php-8.3.19-1.el10_0.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88561\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "php", "status": "fixed", "fixed": "php-5.4.16-48.el7_9.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88693\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "php", "status": "fixed", "fixed": "php-8.0.30-8.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87151\nrpm -q php", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3304", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-109619.html", "note": "ALAS2023-2026-3304"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true, "mentions": [{"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products  (Severity: HIGH", "url": "https://security.paloaltonetworks.com/CVE-2026-109618", "date": "2026-10-24"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-026-critical-vulnerabilities-impacting-php-cve-2026-109618-cve-2026-109619", "date": "2026-10-23"}, {"src": "Cisco Security Advisories", "group": "vendor", "title": "Vulnerabilities in PHP Affecting Cisco Products: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Vulnerabilities%20in%20PHP%20Affecting%20Cisco%20Products:%20October%202026%26vs_k=1", "date": "2026-10-23"}, {"src": "Siemens ProductCERT", "group": "vendor", "title": "SSA-566435 V1.0: PHP2Shell Vulnerabilities in Siemens Software Products", "url": "https://cert-portal.siemens.com/productcert/html/ssa-566435.html", "date": "2026-10-23"}, {"src": "Unit 42 (Palo Alto)", "group": "research", "title": "Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23)", "url": "https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/", "date": "2026-10-23"}, {"src": "Horizon3.ai", "group": "research", "title": "CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available", "url": "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-109618-cve-2026-109619/", "date": "2026-10-23"}, {"src": "The Hacker News", "group": "news", "title": "PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware", "url": "https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html", "date": "2026-10-23"}, {"src": "Security Affairs", "group": "news", "title": "PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet", "url": "https://securityaffairs.com/201538/hacking/php2shell-millions-of-attacks-no-confirmed-successful-exploits-yet.html", "date": "2026-10-23"}, {"src": "CERT/CC Vulnerability Notes", "group": "gov", "title": "VU#763488: Memory corruption vulnerabilities in PHP", "url": "https://kb.cert.org/vuls/id/763488", "date": "2026-10-22"}, {"src": "HKCERT", "group": "gov", "title": "PHP Multiple Vulnerabilities", "url": "https://www.hkcert.org/security-bulletin/php-multiple-vulnerabilities_20261022", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3301 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3301.html", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3302 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3302.html", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3303 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3303.html", "date": "2026-10-22"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3304 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3304.html", "date": "2026-10-22"}], "buzz": 11, "pinned": false, "pocs": [{"kind": "poc", "name": "aarsaputra/php2shell (15 stars)", "url": "https://github.com/aarsaputra/php2shell", "stars": 15}, {"kind": "poc", "name": "unlimit0118/CVE-2026-109619-php2shell-poc (4 stars)", "url": "https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc", "stars": 4}, {"kind": "poc", "name": "cozybear-dev/cve-2026-109619 (4 stars)", "url": "https://github.com/cozybear-dev/cve-2026-109619", "stars": 4}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-115535", "publisher": "VulDB", "title": "A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a", "summary": "A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Settings Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This produc", "cvss": 2.4, "sev": "LOW", "epss": 0.0021, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T01:16:54.073", "modified": "2026-10-23T16:06:43.463", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115535"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10669, "pinned": false}, {"id": "CVE-2026-112862", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database ", "summary": "Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00313, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.393", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112862"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23039, "vendors": [], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112860", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau web", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00236, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.280", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112860"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.13829, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112857", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This is", "summary": "Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.447", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112857"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112853", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.T", "summary": "Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.940", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112853"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112859", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object ", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.700", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112859"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112858", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issu", "summary": "Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.573", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112858"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112856", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.323", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112856"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112855", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue af", "summary": "Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.197", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112855"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112854", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object I", "summary": "Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.070", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112854"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112851", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.697", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112851"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112848", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This", "summary": "Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.310", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112848"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112847", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects ZenSoul: from n/a through 1.13.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.190", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112847"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112846", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.057", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112846"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112359", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configu", "summary": "Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00232, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.540", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112359"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1331, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112852", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This i", "summary": "Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.", "cvss": 8.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.817", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112852"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112850", "publisher": "Patchstack", "title": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner", "summary": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.", "cvss": 8.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.563", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112850"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112837", "publisher": "Patchstack", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Ga", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00211, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.043", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112837"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10826, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112821", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Acc", "summary": "Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from n/a through 9.6.3.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.687", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112821"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.04713, "pinned": false}, {"id": "CVE-2026-112838", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.8.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:06.163", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112838"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03511, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112835", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.927", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112835"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03511, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112849", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThe", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme v2: from n/a through 7.0.", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:06.437", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112849"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112863", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash K", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0.", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:07.830", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112863"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-112825", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Magepeople inc", "summary": "Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through 1.5.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00201, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T09:17:05.810", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112825"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09443, "pinned": false}, {"id": "CVE-2026-115536", "publisher": "VulDB", "title": "A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2", "summary": "A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component Admin Routing Page. The manipulation of the argument content results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for atta", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00273, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T02:16:57.203", "modified": "2026-10-23T16:06:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115536"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18653, "pinned": false}, {"id": "CVE-2026-102917", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00098, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:01.273", "modified": "2026-10-23T16:05:55.517", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102917"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292422"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0075, "pinned": false}, {"id": "CVE-2026-107674", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for Sys", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.0006, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:02.473", "modified": "2026-10-23T16:05:39.767", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107674"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292225"}], "cwe": ["CWE-667"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 8e-05, "pinned": false}, {"id": "CVE-2026-17068", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper e", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00139, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:06.063", "modified": "2026-10-23T16:03:36.963", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17068"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292423"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02968, "pinned": false}, {"id": "CVE-2026-17073", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtr", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00131, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:06.190", "modified": "2026-10-23T15:56:41.560", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17073"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292423"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02452, "pinned": false}, {"id": "CVE-2026-17275", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.", "cvss": 3.7, "sev": "LOW", "epss": 0.00187, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:06.313", "modified": "2026-10-23T15:52:57.220", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17275"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292222"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07916, "pinned": false}, {"id": "CVE-2026-17488", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:06.443", "modified": "2026-10-23T15:46:32.053", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17488"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292270"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16726, "pinned": false}, {"id": "CVE-2026-17491", "publisher": "IBM Corporation", "title": "IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions du", "summary": "IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00182, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T19:17:06.557", "modified": "2026-10-23T15:40:47.427", "products": [{"name": "i", "vendor": "ibm", "type": "app", "affected": ["7.3", "7.4", "7.5", "7.6"], "fixed": null, "safe": "before 7.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy i || rpm -q i || i --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.3 (Debian / Ubuntu)", "cmd": "apt-cache madison i\nsudo apt install i=<VERSION_BEFORE_7.3>\nsudo apt-mark hold i"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list i\nsudo dnf downgrade i-<VERSION_BEFORE_7.3>\nsudo dnf versionlock add i"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17491"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292273"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07399, "pinned": false}, {"id": "CVE-2026-10572", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:01.440", "modified": "2026-10-23T15:35:14.310", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10572"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26026, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-10574", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:01.780", "modified": "2026-10-23T15:34:30.750", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10574"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26026, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-10743", "publisher": "IBM Corporation", "title": "IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va", "summary": "IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00277, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:02.107", "modified": "2026-10-23T15:33:41.670", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10743"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-1223"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19066, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-11828", "publisher": "IBM Corporation", "title": "IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha", "summary": "IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-10-19", "pub": "2026-10-19T17:17:16.130", "modified": "2026-10-23T15:23:08.880", "products": [{"name": "mq operator", "vendor": "ibm", "type": "app", "affected": [">= 2.0.0 and <= 2.0.29", ">= 3.2.0 and <= 3.2.29", "3.3.0", "3.4.0", "3.4.1", "3.5.0", "3.5.1", "3.5.2"], "fixed": "newer than 3.2.29", "safe": "before 2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version"}, {"label": "2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mq-operator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mq-operator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mq-operator\nsudo apt install mq-operator=<VERSION_BEFORE_2.0.0>\nsudo apt-mark hold mq-operator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mq-operator\nsudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0>\nsudo dnf versionlock add mq-operator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "supplied mq advanced container images", "vendor": "ibm", "type": "app", "affected": ["9.4.1.0 r1", "9.4.1.0 r2", "9.4.1.1 r1", "9.4.2.0 r1", "9.4.2.0 r2", "9.4.2.1 r1", "9.4.2.1 r2", "9.4.3.0 r1"], "fixed": null, "safe": "before 9.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison supplied-mq-advanced-container-images\nsudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0>\nsudo apt-mark hold supplied-mq-advanced-container-images"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list supplied-mq-advanced-container-images\nsudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0>\nsudo dnf versionlock add supplied-mq-advanced-container-images"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11828"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292667"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.16, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-76307", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could u", "summary": "In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authentication token values for other users. If the inferred token grants administrative access, that user could gain administrative access to the Splunk SOAR instance.\nThe vulnerability is possible because the REST API accepts caller-controlled query filters on sensitive user rec", "cvss": 7.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T23:17:28.893", "modified": "2026-10-23T15:17:34.747", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76307"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.23379, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-76303", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store att", "summary": "In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation, Splunk SOAR could run that content in the browser of the user who opened the app documentation. With this access, the first user could access data and make", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T23:17:28.390", "modified": "2026-10-23T15:17:34.630", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76303"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06777, "pinned": false}, {"id": "CVE-2026-76287", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline", "summary": "In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope.\nThe vulnerability is possible because the Data Management Representational State Transfer (REST) API verifies the required capability but does not verify that the requested preview j", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00168, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T23:17:26.383", "modified": "2026-10-23T15:17:34.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76287"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05705, "pinned": false}, {"id": "CVE-2026-57121", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource \u2014 projects, agents, issues, labels, issue dependencies, and issue-label attachments \u2014 created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account ca", "cvss": 8.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.057", "modified": "2026-10-23T15:17:34.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57121"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai-platform", "status": "fixed", "fixed": "0.1.6", "cmd": "pip install --upgrade \"praisonai-platform>=0.1.6\"\npip show praisonai-platform", "url": "https://github.com/advisories/GHSA-rh39-9c67-59mh", "note": "vulnerable: = 0.1.4"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57113", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/template@v1.0.0. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into ~/.praison/cache/templates/github/<owner>/<repo>/<template>/<ref> without normalizing each segment or checking that the final p", "cvss": 8.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.373", "modified": "2026-10-23T15:17:33.910", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57113"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-f44v-7qgw-9gh9", "note": "vulnerable: >= 2.6.0, <= 4.6.57"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-48539", "publisher": "VulnCheck", "title": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled r", "summary": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored by ReportScheduling.btnSaveReport_Click() without output encoding and is executed in the browser of the user who created the scheduled report when they ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-07-23", "pub": "2026-07-23T16:17:26.470", "modified": "2026-10-23T15:17:31.873", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48539"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13598, "pinned": false}, {"id": "CVE-2026-48530", "publisher": "VulnCheck", "title": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules con", "summary": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The injected payload is stored by CategorizationPolicyWizard.SaveAllConfigSettings() without output encoding and is executed in the browsers of users who subseq", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-07-23", "pub": "2026-07-23T16:17:25.250", "modified": "2026-10-23T15:17:31.733", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48530"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13592, "pinned": false}, {"id": "CVE-2026-115727", "publisher": "VulnCheck", "title": "AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py har", "summary": "AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.", "cvss": 8.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:13.560", "modified": "2026-10-23T15:17:30.460", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115727"}], "cwe": ["CWE-489"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115723", "publisher": "VulnCheck", "title": "Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicio", "summary": "Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and send a short fragment, causing BRecv to memcpy past the buffer and crash or corrupt SCADA, HMI or gateway processes.", "cvss": 7.4, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:12.983", "modified": "2026-10-23T15:17:30.323", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115723"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115478", "publisher": "GitHub, Inc.", "title": "obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults", "summary": "obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_entity` regenerate memory notes from SQLite at the computed `memory/<type>/<name>.md` path without reliably preserving note ownership or the consistency of a failed lifecycle operation. During shared materialization, a hand-authored note or an orphan lef", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:30.023", "modified": "2026-10-23T15:17:30.147", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115478"}], "cwe": ["CWE-459", "CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115477", "publisher": "GitHub, Inc.", "title": "obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults", "summary": "obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a 2026-07-28-era client declaring `elicitation.form` support, a dispatch-gated tool call offered an `inputRequired` confirmation could still complete after the human declined or cancelled, or the elicitation response was omitted or malformed, provided the client ec", "cvss": 7.1, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:29.840", "modified": "2026-10-23T15:17:29.967", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115477"}], "cwe": ["CWE-285", "CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T14:52:14.700663+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115390", "publisher": "VulnCheck", "title": "Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled c", "summary": "Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref and try_table catch paths. Malicious guests can reset consumed fuel after calls to run exponentially long on linear fuel, evading timeouts and periodic yields for denial of service.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:46.510", "modified": "2026-10-23T15:17:29.350", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115390"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07587, "pinned": false}, {"id": "CVE-2026-115386", "publisher": "VulnCheck", "title": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vul", "summary": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fd_readdir implementation that copies uninitialized struct padding into guest memory. Guests with a preopened directory can list entries to receive three bytes of leftover host stack or heap memory per directory entry.", "cvss": 2.6, "sev": "LOW", "epss": 0.0015, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:45.857", "modified": "2026-10-23T15:17:29.220", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115386"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03839, "pinned": false}, {"id": "CVE-2026-115382", "publisher": "VulnCheck", "title": "Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:", "summary": "Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing the host embedding.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:45.227", "modified": "2026-10-23T15:17:29.057", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115382"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12617, "pinned": false}, {"id": "CVE-2026-115364", "publisher": "VulnCheck", "title": "OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy serv", "summary": "OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is enabled, attackers can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit to shut down these services.", "cvss": 2.2, "sev": "LOW", "epss": 0.00258, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.810", "modified": "2026-10-23T15:17:28.437", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115364"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16495, "pinned": false}, {"id": "CVE-2026-115356", "publisher": "VulnCheck", "title": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Au", "summary": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth method, that the service account token originally used to authenticate is still valid. An authenticated attacker can keep renewing such tokens to persist access after the Kubernetes service account has been deleted.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:41.677", "modified": "2026-10-23T15:17:28.317", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115356"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.06552, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115333", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware th", "summary": "Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashed_key. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ as that organization, altering its metered usage and billing.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:52.563", "modified": "2026-10-23T15:17:28.193", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115333"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21473, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-115329", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_obj", "summary": "Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_object() that uses an unscoped queryset without organization filtering or permission checks. Authenticated users or API keys from any organization can supply another organization's subscription_id to read, cancel, update, switch plans, or modify addons, altering another tenant's billing.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:52.010", "modified": "2026-10-23T15:17:28.063", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115329"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10015, "pinned": false}, {"id": "CVE-2026-115325", "publisher": "VulnCheck", "title": "Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allo", "summary": "Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to /api/extclients/{network}/{clientid} to replace public keys, disable clients, and obtain WireGuard private keys.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:51.400", "modified": "2026-10-23T15:17:27.940", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115325"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.20404, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115321", "publisher": "VulnCheck", "title": "Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that a", "summary": "Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own project's issue as parent and reference another project's comment UID to overwrite comments they cannot access.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:50.827", "modified": "2026-10-23T15:17:27.807", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115321"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12696, "pinned": false}, {"id": "CVE-2026-114663", "publisher": "VulnCheck", "title": "Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported mod", "summary": "Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function's scope rather than at declaration. When a contract's parameter, local, or loop variable shares such a name, attacker-influenced input can replace the intended value, including out-of-range values for narrow types such as uint8, corrupting validation or accounting logic.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00136, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:58.603", "modified": "2026-10-23T15:17:27.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114663"}], "cwe": ["CWE-706"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0276, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114659", "publisher": "VulnCheck", "title": "Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex", "summary": "Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages API routes check only directory-level admin.pages permissions, without enforcing the Pages API's api.pages.read/write permissions or page-level permissions rules. Authenticated non-super users with api.access and admin.pages or admin.configuration.pages permissions can read page source and frontmatter, modify content, or de", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:57.923", "modified": "2026-10-23T15:17:27.557", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114659"}], "cwe": ["CWE-424"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15767, "pinned": false}, {"id": "CVE-2026-114642", "publisher": "VulnCheck", "title": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a clie", "summary": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by ServersTransport, so one service's TLS client configuration is reused for another service's backend. An unauthenticated client can arm the slot via a backend issuing an NTLM or Negotiate challenge, then reach another service on the same keep-alive connection, bypassing its root CAs, server name, and certifi", "cvss": 8.7, "sev": "HIGH", "epss": 0.00167, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:57.250", "modified": "2026-10-23T15:17:27.383", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114642"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.05613, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114638", "publisher": "VulnCheck", "title": "Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGIN", "summary": "Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide after dot-to-dash normalization. Attackers holding certificates from another host's CA can access a host requiring its own client CA, while that host's legitimate clients are refused.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00186, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:56.653", "modified": "2026-10-23T15:17:27.220", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114638"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.07842, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114634", "publisher": "VulnCheck", "title": "WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFr", "summary": "WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows redirects without re-validating targets with isSSRFSafeURL(). Authenticated uploaders can store a videoLink pointing to a redirector, causing internal GET requests when visitors view the video, enabling internal port scanning via the embed-versus-video render oracle.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00198, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T02:16:55.990", "modified": "2026-10-23T15:17:27.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114634"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09092, "pinned": false}, {"id": "CVE-2026-114607", "publisher": "GitHub, Inc.", "title": "Better Auth is an authentication and authorization library for TypeScript", "summary": "Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth provider, and use account.storeStateStrategy set to database can accept an OAuth sign-in state value as a Magic Link token. These s", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00347, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T17:16:58.577", "modified": "2026-10-23T15:17:26.763", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114607"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27075, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-114515", "publisher": "GitHub, Inc.", "title": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and m", "summary": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3, a valid Self-Service Portal user with permission to create job containers and read visibility on a computer and package can queue an uninstall job without deploy permission for those resources. Requests to `self-service/ajax-handler/job-containers.php` pass `uninstall_package_assignment_id[]` value", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00213, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T15:17:05.650", "modified": "2026-10-23T15:17:26.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114515"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11071, "pinned": false}, {"id": "CVE-2026-114492", "publisher": "VulnCheck", "title": "gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators t", "summary": "gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with '../' sequences, causing os.RemoveAll to delete any directory writable by the server process.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00419, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:27.943", "modified": "2026-10-23T15:17:26.523", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114492"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.35189, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114361", "publisher": "VulDB", "title": "A vulnerability was detected in HarnessRouter up to 0.31.10", "summary": "A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in improper authorization. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. Upgrading to version 0.31.11 mitigates this", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:17:00.977", "modified": "2026-10-23T15:17:25.923", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114361"}], "cwe": ["CWE-266", "CWE-285"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23694, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114145", "publisher": "GitHub, Inc.", "title": "GitPython is a python library used to interact with Git repositories", "summary": "GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodule() in git/objects/submodule/base.py accepts an attacker-influenced submodule path such as .git/hooks and invokes _clone_repo() before safely rejecting the destination. In 3.1.x, _validate_repo_path() does not exist and the call succeeds silently, while in 3.2.0 and later affected revisions the check in git/index/base.py raises ValueError only aft", "cvss": 7.5, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:17:57.250", "modified": "2026-10-23T15:17:25.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114145"}], "cwe": ["CWE-696"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17141, "vendors": [{"os": "Python (pip)", "pkg": "Gitpython", "status": "fixed", "fixed": "3.2.1", "cmd": "pip install --upgrade \"Gitpython>=3.2.1\"\npip show Gitpython", "url": "https://github.com/advisories/GHSA-83vg-56qc-22m7", "note": "vulnerable: <= 3.2.0"}, {"os": "Debian 12", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-git", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-114137", "publisher": "GitHub, Inc.", "title": "Django REST framework is a toolkit for building Web APIs", "summary": "Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and reports zero deletions without raising an error. Applications, administrative integrations, or operational scripts that revoke credentials through a TokenP", "cvss": 7.4, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T21:17:56.057", "modified": "2026-10-23T15:17:25.650", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114137"}], "cwe": ["CWE-390", "CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27477, "vendors": [{"os": "Python (pip)", "pkg": "djangorestframework", "status": "fixed", "fixed": "3.18.2", "cmd": "pip install --upgrade \"djangorestframework>=3.18.2\"\npip show djangorestframework", "url": "https://github.com/advisories/GHSA-xw6w-gcfp-cf8m", "note": "vulnerable: >= 3.12.0, < 3.18.2"}, {"os": "Debian 12", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-114132", "publisher": "GitHub, Inc.", "title": "Nuxt is an open-source web development framework for Vue.js", "summary": "Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by default while Nitro matches server-side route-rule keys case-sensitively, allowing a request whose path differs only by letter case to render without the server rule intended for that page. The mismatch can skip redirect, headers, proxy, ssr: false, and noScripts, and can cause getRouteRules(event) and matchRouteRules to return n", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:26.113", "modified": "2026-10-23T15:17:25.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114132"}], "cwe": ["CWE-178", "CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23083, "vendors": [{"os": "npm", "pkg": "nuxt", "status": "fixed", "fixed": "4.6.2", "cmd": "npm install nuxt@\">=4.6.2\"\nnpm ls nuxt", "url": "https://github.com/advisories/GHSA-vjh5-4x84-xrqp", "note": "vulnerable: >= 4.0.0, < 4.6.2"}, {"os": "npm", "pkg": "@nuxt/nitro-server", "status": "fixed", "fixed": "4.6.2", "cmd": "npm install @nuxt/nitro-server@\">=4.6.2\"\nnpm ls @nuxt/nitro-server", "url": "https://github.com/advisories/GHSA-vjh5-4x84-xrqp", "note": "vulnerable: >= 4.2.0, < 4.6.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-114128", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and style elements as trusted HTML without distinguishing compiler-generated literal content from dynamic expression values. An application that passes attacker-controlled data directly as a dynamic child can allow a value containing a closing script or style tag to terminate the element and inject arbitrar", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00263, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:25.507", "modified": "2026-10-23T15:17:25.413", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114128"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17165, "pinned": false}, {"id": "CVE-2026-114124", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for macOS offscreen rendering was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could provide inconsistent frame geometry and cause the main process to read out-of-bounds memo", "cvss": 3.9, "sev": "LOW", "epss": 0.00151, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:24.800", "modified": "2026-10-23T15:17:25.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114124"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03926, "pinned": false}, {"id": "CVE-2026-113800", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid and usb permission checks made from an iframe caused setPermissionCheckHandler to receive the top-level frame's origin and details instead of the requesting frame's. An application that delegated hid or usb to a cross-origin untrusted iframe and allowed device access with origin", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00241, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T17:18:25.270", "modified": "2026-10-23T15:17:25.113", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113800"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.14434, "pinned": false}, {"id": "CVE-2026-113796", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Electron treated pages opened into a new window from links as application-initiated navigations instead of preserving the page containing the link as the initiator. The resulting top-level request could be classified as same-site, causing SameSite=Strict cookies to be sent and Sec-F", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00184, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T17:18:24.570", "modified": "2026-10-23T15:17:24.973", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113796"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07539, "pinned": false}, {"id": "CVE-2026-112333", "publisher": "VulnCheck", "title": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled r", "summary": "GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored by ReportScheduling.btnSaveReport_Click() without output encoding and is executed in the browser of the user who created the scheduled report when they ", "cvss": 5.4, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T15:17:24.487", "modified": "2026-10-23T15:17:24.603", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112333"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-111678", "publisher": "VulnCheck", "title": "Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in pr", "summary": "Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiword or corrupting style parsing.", "cvss": 3.3, "sev": "LOW", "epss": 0.00167, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:50.627", "modified": "2026-10-23T15:17:24.320", "products": [{"name": "antiword", "vendor": "antiword project", "type": "app", "affected": ["<= 0.37"], "fixed": "newer than 0.37", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy antiword || rpm -q antiword || antiword --version"}, {"label": "2. UPGRADE to newer than 0.37 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade antiword"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade antiword"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111678"}, {"t": "Exploit, Mitigation", "u": "https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read"}, {"t": "Exploit, Mitigation", "u": "https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.05611, "pinned": false}, {"id": "CVE-2026-111668", "publisher": "VulnCheck", "title": "AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows", "summary": "AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read organization-wide AI spend, and can modify suggestion statuses or generate reports.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00239, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:48.790", "modified": "2026-10-23T15:17:24.183", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111668"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14186, "pinned": false}, {"id": "CVE-2026-111079", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Goose", "summary": "A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data\u2014such as API tokens, passwords, or environment variables containing secrets\u2014in the terminal, this unredacted information is transmitted across trust boundaries. This can lead t", "cvss": 7.4, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:15.460", "modified": "2026-10-23T15:17:23.993", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111079"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1297, "vendors": [{"os": "RHEL 10", "pkg": "goose", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "goose", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-110744", "publisher": "Red Hat, Inc.", "title": "A flaw was found in multicluster-global-hub-operator-bundle", "summary": "A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator or obtains its service account credentials can exploit this flaw to achieve privilege escalation, gaining full administrative control over the cluster", "cvss": 7.2, "sev": "HIGH", "epss": 0.00292, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:23.350", "modified": "2026-10-23T15:17:23.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110744"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.20669, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-104068", "publisher": "VulnCheck", "title": "JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability th", "summary": "JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craft a backup archive containing a symbolic link that archive extraction follows without validating targets or enforcing destination containment, potentiall", "cvss": 7.2, "sev": "HIGH", "epss": 0.00557, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T17:16:56.720", "modified": "2026-10-23T15:17:22.943", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104068"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.45699, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-100886", "publisher": "VulDB", "title": "A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011", "summary": "A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 4.6.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was cont", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00767, "kev": false, "added": "2026-09-27", "pub": "2026-09-27T23:16:59.020", "modified": "2026-10-23T15:17:22.593", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-100886"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55076, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:31:13.918852+00:00", "vendor_fixed": true, "pinned": false, "pocs": [{"kind": "poc", "name": "heapframe/seetong-ts81xxd3x-rce (1 stars)", "url": "https://github.com/heapframe/seetong-ts81xxd3x-rce", "stars": 1}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2025-60497", "publisher": "MITRE", "title": "A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows a", "summary": "A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T15:17:14.280", "modified": "2026-10-23T15:17:22.237", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60497"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06271, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60497: NULL pointer dereference in GPAC/MP4Box GetESD via crafted MP4 input", "url": "https://seclists.org/oss-sec/2026/q4/355", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60494", "publisher": "MITRE", "title": "A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project", "summary": "A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:17:42.877", "modified": "2026-10-23T15:17:22.070", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60494"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09428, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60494: invalid memory read in GPAC/MP4Box gf_props_equal_internal via crafted MP4 input", "url": "https://seclists.org/oss-sec/2026/q4/354", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60492", "publisher": "MITRE", "title": "A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 all", "summary": "A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T15:17:13.997", "modified": "2026-10-23T15:17:21.910", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60492"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15906, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60492: uncontrolled recursion in GPAC/MP4Box BIFS decoder via crafted MP4 input", "url": "https://seclists.org/oss-sec/2026/q4/353", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60491", "publisher": "MITRE", "title": "A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2", "summary": "A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00209, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T15:17:13.867", "modified": "2026-10-23T15:17:21.800", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60491"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10501, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60491: heap use-after-free in GPAC/MP4Box dasher_flush_segment via crafted MPEG-2 TS input", "url": "https://seclists.org/oss-sec/2026/q4/352", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60490", "publisher": "MITRE", "title": "A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC ", "summary": "A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T15:17:13.727", "modified": "2026-10-23T15:17:21.690", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60490"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05854, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60490: heap use-after-free in GPAC/MP4Box gf_filter_pid_send_event_downstream via crafted MPEG-2 TS input", "url": "https://seclists.org/oss-sec/2026/q4/351", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60489", "publisher": "MITRE", "title": "A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP", "summary": "A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T14:17:07.333", "modified": "2026-10-23T15:17:21.570", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60489"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05294, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60489: NULL pointer dereference in GPAC/MP4Box dasher_insert_timeline_entry via crafted MP4 input", "url": "https://seclists.org/oss-sec/2026/q4/350", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2025-60487", "publisher": "MITRE", "title": "A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before", "summary": "A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T15:17:13.580", "modified": "2026-10-23T15:17:21.453", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60487"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05854, "mentions": [{"src": "oss-security list", "group": "research", "title": "CVE-2025-60487: NULL pointer dereference in GPAC/MP4Box gf_isom_get_esd via crafted XML input", "url": "https://seclists.org/oss-sec/2026/q4/349", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2021-48018", "publisher": "VulnCheck", "title": "Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locatio", "summary": "Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the contract's intended logic.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T01:17:18.983", "modified": "2026-10-23T15:17:20.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48018"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23844, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-104252", "publisher": "GitHub, Inc.", "title": "Vitess is a database clustering system for horizontal scaling of MySQL", "summary": "Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML escaping. Under the default allow-all ACL policy, a remote unauthenticated attacker can send an operator a crafted request that executes script in the operator", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00885, "kev": false, "added": "2026-10-13", "pub": "2026-10-13T20:17:12.453", "modified": "2026-10-23T15:14:48.240", "products": [{"name": "vitess", "vendor": "linuxfoundation", "type": "app", "affected": ["< 23.0.5", ">= 24.0.0 and < 24.0.2"], "fixed": "23.0.5, 24.0.2", "safe": "before 24.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vitess || rpm -q vitess || vitess --version"}, {"label": "2. UPGRADE to 23.0.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade vitess"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade vitess"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 24.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison vitess\nsudo apt install vitess=<VERSION_BEFORE_24.0.0>\nsudo apt-mark hold vitess"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vitess\nsudo dnf downgrade vitess-<VERSION_BEFORE_24.0.0>\nsudo dnf versionlock add vitess"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104252"}, {"t": "Patch", "u": "https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"}, {"t": "Patch", "u": "https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"}, {"t": "Patch", "u": "https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/vitessio/vitess/pull/20255"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/vitessio/vitess/pull/20273"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/vitessio/vitess/pull/20274"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 64, "tier": "P1", "why": ["Critical severity", "Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.58883, "vendors": [{"os": "Go", "pkg": "vitess.io/vitess", "status": "fixed", "fixed": "0.23.5", "cmd": "go get vitess.io/vitess@v0.23.5\ngo list -m vitess.io/vitess", "url": "https://github.com/advisories/GHSA-v75v-6fpf-gvw8", "note": "vulnerable: < 0.23.5"}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-106461", "publisher": "GitHub, Inc.", "title": "Backstage is an open framework for building developer portals", "summary": "Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect authorization in scaffolder task listing. An authenticated internal user may be able to view metadata for scaffolder tasks outside the visibility intended by a deployment's permission policy. Stored task secrets are not included in the affected response, and no integrity or availability impact wa", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00193, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T21:17:16.870", "modified": "2026-10-23T15:01:23.893", "products": [{"name": "backstage\\/plugin-scaffolder-backend", "vendor": "linuxfoundation", "type": "app", "affected": ["< 4.1.0"], "fixed": "4.1.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend"}, {"label": "2. UPGRADE to 4.1.0", "cmd": "npm install backstageplugin-scaffolder-backend@\">=4.1.0\""}]}, {"name": "backstage", "vendor": "linuxfoundation", "type": "app", "affected": ["< 1.54.6"], "fixed": "1.54.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy backstage || rpm -q backstage || backstage --version"}, {"label": "2. UPGRADE to 1.54.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade backstage"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade backstage"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106461"}, {"t": "Patch", "u": "https://github.com/backstage/backstage/commit/0253c50673f2832b0b1e9f73348186434e7bd09e"}, {"t": "Patch, Release Notes", "u": "https://github.com/backstage/backstage/releases/tag/v1.54.6"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/backstage/backstage/security/advisories/GHSA-7hfw-grcm-cqm6"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.0848, "vendors": [{"os": "npm", "pkg": "@backstage/plugin-scaffolder-backend", "status": "fixed", "fixed": "4.1.0", "cmd": "npm install @backstage/plugin-scaffolder-backend@\">=4.1.0\"\nnpm ls @backstage/plugin-scaffolder-backend", "url": "https://github.com/advisories/GHSA-7hfw-grcm-cqm6", "note": "vulnerable: < 4.1.0"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-106486", "publisher": "GitHub, Inc.", "title": "Backstage is an open framework for building developer portals", "summary": "Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate filesystem paths. An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect paths outside the ex", "cvss": 8.5, "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-10-06", "pub": "2026-10-06T21:17:17.323", "modified": "2026-10-23T15:01:04.000", "products": [{"name": "backstage\\/plugin-scaffolder-backend-module-bitbucket-cloud", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.3.10"], "fixed": "0.3.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-bitbucket-cloud"}, {"label": "2. UPGRADE to 0.3.10", "cmd": "npm install backstageplugin-scaffolder-backend-module-bitbucket-cloud@\">=0.3.10\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-bitbucket-server", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.2.25"], "fixed": "0.2.25", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-bitbucket-server"}, {"label": "2. UPGRADE to 0.2.25", "cmd": "npm install backstageplugin-scaffolder-backend-module-bitbucket-server@\">=0.2.25\""}]}, {"name": "backstage", "vendor": "linuxfoundation", "type": "app", "affected": ["< 1.54.6"], "fixed": "1.54.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy backstage || rpm -q backstage || backstage --version"}, {"label": "2. UPGRADE to 1.54.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade backstage"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade backstage"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106486"}, {"t": "Patch", "u": "https://github.com/backstage/backstage/commit/818528e112c36167d76187e9e63fb518399c4dd2"}, {"t": "Patch, Release Notes", "u": "https://github.com/backstage/backstage/releases/tag/v1.54.6"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/backstage/backstage/security/advisories/GHSA-g8rx-f7m5-7794"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24384, "vendors": [{"os": "npm", "pkg": "@backstage/plugin-scaffolder-backend-module-bitbucket-cloud", "status": "fixed", "fixed": "0.3.10", "cmd": "npm install @backstage/plugin-scaffolder-backend-module-bitbucket-cloud@\">=0.3.10\"\nnpm ls @backstage/plugin-scaffolder-backend-module-bitbucket-cloud", "url": "https://github.com/advisories/GHSA-g8rx-f7m5-7794", "note": "vulnerable: < 0.3.10"}, {"os": "npm", "pkg": "@backstage/plugin-scaffolder-backend-module-bitbucket-server", "status": "fixed", "fixed": "0.2.25", "cmd": "npm install @backstage/plugin-scaffolder-backend-module-bitbucket-server@\">=0.2.25\"\nnpm ls @backstage/plugin-scaffolder-backend-module-bitbucket-server", "url": "https://github.com/advisories/GHSA-g8rx-f7m5-7794", "note": "vulnerable: < 0.2.25"}], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-91653", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Essbase Web Platform)", "summary": "Vulnerability in Oracle Essbase (component: Essbase Web Platform).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical", "cvss": 8.5, "sev": "HIGH", "epss": 0.00195, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.567", "modified": "2026-10-23T15:00:10.417", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91653"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08681, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91652", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Ora", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.463", "modified": "2026-10-23T15:00:04.073", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91652"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14527, "pinned": false}, {"id": "CVE-2026-91651", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Essbase Web Platform)", "summary": "Vulnerability in Oracle Essbase (component: Essbase Web Platform).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CV", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.350", "modified": "2026-10-23T14:59:36.610", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91651"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21627, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91650", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Java Based Agent)", "summary": "Vulnerability in Oracle Essbase (component: Java Based Agent).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/A", "cvss": 3.7, "sev": "LOW", "epss": 0.00269, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.233", "modified": "2026-10-23T14:59:24.450", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91650"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18095, "pinned": false}, {"id": "CVE-2026-91649", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Java Based Agent)", "summary": "Vulnerability in Oracle Essbase (component: Java Based Agent).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.123", "modified": "2026-10-23T14:59:17.857", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91649"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05076, "pinned": false}, {"id": "CVE-2026-91648", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Java Based Agent)", "summary": "Vulnerability in Oracle Essbase (component: Java Based Agent).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.017", "modified": "2026-10-23T14:59:09.140", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91648"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24902, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91646", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as  unauthorized read access to a subset of Oracle Essbas", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.787", "modified": "2026-10-23T14:58:54.207", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91646"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15522, "pinned": false}, {"id": "CVE-2026-93682", "publisher": "PHP Group", "title": "When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value", "summary": "When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server controls whether the client is sent to the host root or to the current directory.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T20:17:47.597", "modified": "2026-10-23T14:58:22.930", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93682"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-7875-c8px-7q5f"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-7875-c8px-7q5f"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27963, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm4", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.27", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.27\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.12", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:8.2/php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-93682.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/php/php-src/security/advisories/GHSA-7875-c8px-7q5f", "url": "https://github.com/php/php-src/security/advisories/GHSA-7875-c8px-7q5f"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "pinned": false}, {"id": "CVE-2026-91645", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/P", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.663", "modified": "2026-10-23T14:58:22.683", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91645"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24901, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true, "pocs": [], "ssvc": null, "pinned": false}, {"id": "CVE-2026-91644", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or co", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00218, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.543", "modified": "2026-10-23T14:58:05.110", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91644"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.11622, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91643", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Java Based Agent)", "summary": "Vulnerability in Oracle Essbase (component: Java Based Agent).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.430", "modified": "2026-10-23T14:57:58.883", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91643"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15552, "pinned": false}, {"id": "CVE-2026-91642", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as  unauthorized read access to a subset of Oracle Essbase acce", "cvss": 7.3, "sev": "HIGH", "epss": 0.00241, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.310", "modified": "2026-10-23T14:57:53.440", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91642"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.14468, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91641", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Ora", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.190", "modified": "2026-10-23T14:57:45.780", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91641"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12334, "pinned": false}, {"id": "CVE-2026-91640", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Ora", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:04.073", "modified": "2026-10-23T14:57:39.433", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91640"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12334, "pinned": false}, {"id": "CVE-2026-91639", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 7.7, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.930", "modified": "2026-10-23T14:57:20.673", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91639"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.2986, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91654", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as  unauthorized read access to a subset of Oracle Essbase acces", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00175, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.683", "modified": "2026-10-23T14:57:02.363", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91654"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06625, "pinned": false}, {"id": "CVE-2025-14181", "publisher": "PHP Group", "title": "The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, wh", "summary": "The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00341, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:19.840", "modified": "2026-10-23T14:56:56.713", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-14181"}, {"t": "Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-cj93-vc83-wgqv"}, {"t": "Vendor Advisory", "u": "https://github.com/php/php-src/security/advisories/GHSA-cj93-vc83-wgqv"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26449, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm4", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.27", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.27\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.12", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:8.2/php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-14181.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/php/php-src/security/advisories/GHSA-cj93-vc83-wgqv", "url": "https://github.com/php/php-src/security/advisories/GHSA-cj93-vc83-wgqv"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3161 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3161.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3162 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3162.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3163 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3163.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3164 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3164.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2PHP8.2-2026-014 (important): php", "url": "https://alas.aws.amazon.com/AL2/ALAS2PHP8.2-2026-014.html", "date": "2026-10-12"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-91655", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00208, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.803", "modified": "2026-10-23T14:56:48.697", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91655"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.10407, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91637", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Sc", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00286, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.693", "modified": "2026-10-23T14:56:37.227", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91637"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.20023, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91632", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or com", "cvss": 7.7, "sev": "HIGH", "epss": 0.00282, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:03.113", "modified": "2026-10-23T14:56:17.930", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91632"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.19679, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-1218", "publisher": "PHP Group", "title": "The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still hold", "summary": "The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.", "cvss": 3.4, "sev": "LOW", "epss": 0.00182, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:20.993", "modified": "2026-10-23T14:55:37.780", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-1218"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-r6x9-5r99-36j7"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.07405, "vendors": [{"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm4", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.27", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.27\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.12", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:8.2/php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-1218.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3161 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3161.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3162 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3162.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3163 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3163.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3164 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3164.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2PHP8.2-2026-014 (important): php", "url": "https://alas.aws.amazon.com/AL2/ALAS2PHP8.2-2026-014.html", "date": "2026-10-12"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-17545", "publisher": "PHP Group", "title": "On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, C", "summary": "On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00322, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:23.253", "modified": "2026-10-23T14:43:15.817", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17545"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-9f67-6fw4-hpfp"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-9f67-6fw4-hpfp"}], "cwe": ["CWE-67"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24034, "vendors": [{"os": "Debian 12", "pkg": "php8.2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:7.4/php", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91656", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Federated Partitions)", "summary": "Vulnerability in Oracle Essbase (component: Federated Partitions).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00208, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:05.920", "modified": "2026-10-23T14:35:07.820", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91656"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P2", "why": ["Critical severity"], "fix": false, "watched": false, "epss_pct": 0.10408, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115497", "publisher": "Wordfence", "title": "The Music Store \u2013 WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all version", "summary": "The Music Store \u2013 WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires a valid purchase_id token, which any user can obtain by making a single low-cost purchase or receiving a s", "cvss": 7.5, "sev": "HIGH", "epss": 0.0095, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:15.063", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115497"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.60888, "vendors": [], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-94267", "publisher": "WPScan", "title": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO Wor", "summary": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary posts, including the ones in which the site stores its own field definitions, which in turn leads to arbitrary code execution on the server. Exploitatio", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00192, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:08.200", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94267"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08398, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-109198", "publisher": "Wordfence", "title": "The Anti-Spam by CleanTalk \u2013 Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cros", "summary": "The Anti-Spam by CleanTalk \u2013 Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 6.89.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires", "cvss": 7.2, "sev": "HIGH", "epss": 0.00351, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T05:17:14.773", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109198"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.27547, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-94268", "publisher": "WPScan", "title": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO Wor", "summary": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not resolve the target of the update-user action in its front-end Forms module consistently between the stage that authorises the request and the stage that carries it out, which allows unauthenticated visitors to bypass the guard protecting administrator accounts, take over the site administrator's accou", "cvss": 8.1, "sev": "HIGH", "epss": 0.00178, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:08.297", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94268"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07041, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-94262", "publisher": "WPScan", "title": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO Wor", "summary": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not verify that the requester is authorised to edit the targeted user account in the update-user action of its front-end Forms module, performing that check only when the target account holds an administrator role, which allows unauthenticated visitors to overwrite any non-administrator account's credenti", "cvss": 8.1, "sev": "HIGH", "epss": 0.00132, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:08.000", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94262"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.02538, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115365", "publisher": "VulnCheck", "title": "OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that", "summary": "OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to reference policies from arbitrary namespaces using specially crafted policy names. Attackers holding such tokens can gain capabilities of cached policies in other namespaces, including the root namespace, to act across namespace boundaries.", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00304, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.953", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115365"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22003, "pinned": false}, {"id": "CVE-2026-109936", "publisher": "WPScan", "title": "The Otter Blocks  WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its dyna", "summary": "The Otter Blocks  WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its dynamic-content tokens while rendering blocks, so the pattern can consume the quote that closes an HTML attribute and pull adjacent unescaped data into the markup as new attributes. This allows unauthenticated users to achieve stored Cross-Site Scripting that executes in the browser of any visitor who views an affected page, including a logge", "cvss": 7.5, "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.487", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109936"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06396, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-113499", "publisher": "WPScan", "title": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to styl", "summary": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes a quote that terminates an attribute in the rendered page, and combined with unescaped comment author output this allows unauthenticated users whose comment is published to inject attributes that execute JavaScript in the browser of any visitor, including a logged-in administrator, who views front-end pages w", "cvss": 7.5, "sev": "HIGH", "epss": 0.00187, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.490", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113499"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07852, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-113500", "publisher": "WPScan", "title": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to styl", "summary": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that closes an attribute in the rendered page, and combined with unescaped comment author output this allows unauthenticated users whose comments are published to inject event-handler attributes that run JavaScript in the browser of any visitor, including a logged-in administrator, viewing front", "cvss": 7.5, "sev": "HIGH", "epss": 0.00187, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.587", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113500"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07852, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-111982", "publisher": "WPScan", "title": "The User Profile Builder  WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the ", "summary": "The User Profile Builder  WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific account selected on its front-end Edit Profile form, allowing an Administrator of a Multisite subsite to change any other user's account email, including a Network Super Admin's, and take over that account through the password-reset flow.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00132, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.097", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111982"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02539, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-109933", "publisher": "WPScan", "title": "The Otter Blocks  WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styl", "summary": "The Otter Blocks  WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when any visitor, including administrators, views the affected post.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.170", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109933"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04073, "pinned": false}, {"id": "CVE-2026-111966", "publisher": "WPScan", "title": "The User Profile Builder  WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attr", "summary": "The User Profile Builder  WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes before outputting it back in a redirect message, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks against higher-privileged users who submit the affected form.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.997", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111966"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04073, "pinned": false}, {"id": "CVE-2026-94264", "publisher": "WPScan", "title": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO Wor", "summary": "The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate or escape some of its form shortcode attributes, which can be pointed at values taken from the visitor's own request and are then output without escaping, allowing users with a role as low as contributor to have arbitrary script run in the browser of anyone led to open a crafted link or page,", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:08.103", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94264"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04072, "pinned": false}, {"id": "CVE-2026-109934", "publisher": "WPScan", "title": "The Otter Blocks  WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readab", "summary": "The Otter Blocks  WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable before returning its data through a REST API endpoint, treating any post with the published status as public, allowing unauthenticated users to read manual excerpts of password-protected posts, the content and titles of non-public post types, and, on WooCommerce sites, coupon codes and their descriptions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.283", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109934"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.03505, "pinned": false}, {"id": "CVE-2026-94263", "publisher": "WPScan", "title": "The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 t", "summary": "The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed server-side when they submit a form whose stored configuration does not carry the relevant setting.", "cvss": 4.8, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:19.283", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94263"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-115359", "publisher": "VulnCheck", "title": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resol", "summary": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded certificates, so quota rules scoped to backend-specific roles are not enforced. Valid callers can repeatedly issue tokens without consuming the configured role-based rate limit budget.", "cvss": 3.7, "sev": "LOW", "epss": 0.00187, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.093", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115359"}], "cwe": ["CWE-799"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07908, "pinned": false}, {"id": "CVE-2026-111738", "publisher": "WPScan", "title": "The Speed Optimizer  WordPress plugin before 7.8.5 does not verify network-level privilege before applying an ", "summary": "The Speed Optimizer  WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00132, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.897", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111738"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02538, "pinned": false}, {"id": "CVE-2026-113472", "publisher": "WPScan", "title": "The Depicter \u2014 Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files ", "summary": "The Depicter \u2014 Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor media-upload endpoint, checking only the client-supplied MIME type and a case-sensitive block of the .php extension, which allows users with the Editor role and above to upload files with other active extensions into the public uploads directory, leading to stored script execution in the site origin and, depending on the ser", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00155, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.393", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113472"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04308, "pinned": false}, {"id": "CVE-2026-112219", "publisher": "WPScan", "title": "The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of files", "summary": "The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem locations it may serve files from to network administrators on multisite, allowing a subsite administrator who is not trusted at the network level to approve arbitrary locations and have the Download Monitor WordPress plugin before 5.3.5 serve readable files from outside the uploads directory, including files belonging to other subs", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00168, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.193", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112219"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05839, "pinned": false}, {"id": "CVE-2026-112230", "publisher": "WPScan", "title": "The Popup Builder  WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup c", "summary": "The Popup Builder  WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on unauthenticated requests, allowing unauthenticated attackers to move affected popups into the Trash and overwrite their stored preview data.", "cvss": 3.7, "sev": "LOW", "epss": 0.00137, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.297", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112230"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.02813, "pinned": false}, {"id": "CVE-2026-115361", "publisher": "VulnCheck", "title": "OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on for", "summary": "OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity metadata templates within wildcard grants. Attackers whose identity metadata contains wildcard or path segments can access paths that should be denied within the broader wildcard-granted scope.", "cvss": 4.1, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.380", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115361"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10021, "pinned": false}, {"id": "CVE-2026-111965", "publisher": "WPScan", "title": "The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all co", "summary": "The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.", "cvss": 4.3, "sev": "MEDIUM", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:09.450", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111965"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "pinned": false}, {"id": "CVE-2026-110537", "publisher": "WPScan", "title": "The Essential Addons for Elementor  WordPress plugin before 6.8.7 does not verify that an administrator may ma", "summary": "The Essential Addons for Elementor  WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability, which on WordPress Multisite could allow a subsite administrator to change the approval and login state of accounts belonging to other sites on the network.", "cvss": 3.8, "sev": "LOW", "epss": 0.00132, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.693", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110537"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02539, "pinned": false}, {"id": "CVE-2026-111737", "publisher": "WPScan", "title": "The Speed Optimizer  WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before out", "summary": "The Speed Optimizer  WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup).", "cvss": 3.5, "sev": "LOW", "epss": 0.00153, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.790", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111737"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04073, "pinned": false}, {"id": "CVE-2026-115363", "publisher": "VulnCheck", "title": "OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that expose", "summary": "OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_acme_eab_mac_key value through the sys/config/state/sanitized endpoint. Callers of the sanitized configuration endpoint can retrieve the ACME External Account Binding MAC key used for TLS listener certificates, letting them bind to the operator's ACME account.", "cvss": 3.3, "sev": "LOW", "epss": 0.00125, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.660", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115363"}], "cwe": ["CWE-212"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0204, "pinned": false}, {"id": "CVE-2026-110510", "publisher": "WPScan", "title": "The Essential Addons for Elementor  WordPress plugin before 6.8.7 does not validate the HTML tag setting of so", "summary": "The Essential Addons for Elementor  WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages.", "cvss": 3.5, "sev": "LOW", "epss": 0.00097, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.587", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110510"}], "cwe": ["CWE-345"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00704, "pinned": false}, {"id": "CVE-2026-113501", "publisher": "WPScan", "title": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dism", "summary": "The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific notice being dismissed, so on sites in certain configurations a low-privileged authenticated user (Subscriber) can dismiss administrative notices the LiteSpeed Cache WordPress plugin before 7.9.2 marks as non-dismissible, including a warning that sensitive files may be", "cvss": 3.1, "sev": "LOW", "epss": 0.00143, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:06.683", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113501"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03274, "pinned": false}, {"id": "CVE-2026-115366", "publisher": "VulnCheck", "title": "OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-", "summary": "OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/* is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones, or register installed plugins through a child namespace's sys/ mount, causing denial of service.", "cvss": 2.6, "sev": "LOW", "epss": 0.00179, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.100", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115366"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07108, "pinned": false}, {"id": "CVE-2026-115357", "publisher": "VulnCheck", "title": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/", "summary": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root token generation or rekey operations without a corresponding response audit record, hindering forensic detection.", "cvss": 2.2, "sev": "LOW", "epss": 0.0021, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:41.817", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115357"}], "cwe": ["CWE-778"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10636, "pinned": false}, {"id": "CVE-2026-115362", "publisher": "VulnCheck", "title": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth met", "summary": "OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leaving expired Secret IDs valid until the periodic tidy removes them. An attacker holding an expired, untidied Secret ID can log in and gain access beyond its TTL.", "cvss": 2.2, "sev": "LOW", "epss": 0.00197, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:42.520", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115362"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08968, "pinned": false}, {"id": "CVE-2026-115358", "publisher": "VulnCheck", "title": "OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive ", "summary": "OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers can submit requests with malformed TypeKVPair or TypeHeader field values, causing error messages containing sensitive input to be recorded in audit logs.", "cvss": 2.0, "sev": "LOW", "epss": 0.00195, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:41.953", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115358"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08757, "pinned": false}, {"id": "CVE-2026-115369", "publisher": "VulnCheck", "title": "OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs take", "summary": "OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans is enabled. Authenticated callers with sign permission can submit a CSR with an out-of-range IP SAN to pki/sign/<role> and obtain CA-signed certificates for unauthorized IPs.", "cvss": 2.2, "sev": "LOW", "epss": 0.00134, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T19:17:43.243", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115369"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02672, "pinned": false}, {"id": "CVE-2026-109935", "publisher": "WPScan", "title": "The Otter Blocks  WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a publis", "summary": "The Otter Blocks  WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post is rendered through the WordPress REST API, allowing unauthenticated users to read block content that the site owner restricted to specific roles, logged-in users, the post author, categories or tags, or (on the Pro tier) Stripe purchasers.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T06:17:05.390", "modified": "2026-10-23T14:20:57.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109935"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03504, "pinned": false}, {"id": "CVE-2023-6915", "publisher": "Red Hat, Inc.", "title": "A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel", "summary": "A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00258, "kev": false, "added": "2024-01-15", "pub": "2024-01-15T10:15:26.627", "modified": "2026-10-23T14:20:36.027", "products": [{"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["10.0"], "fixed": null, "safe": "before 10.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "codeready linux builder", "vendor": "redhat", "type": "app", "affected": ["8.0", "9.0"], "fixed": null, "safe": "before 8.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy codeready-linux-builder || rpm -q codeready-linux-builder || codeready-linux-builder --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.0 (Debian / Ubuntu)", "cmd": "apt-cache madison codeready-linux-builder\nsudo apt install codeready-linux-builder=<VERSION_BEFORE_8.0>\nsudo apt-mark hold codeready-linux-builder"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list codeready-linux-builder\nsudo dnf downgrade codeready-linux-builder-<VERSION_BEFORE_8.0>\nsudo dnf versionlock add codeready-linux-builder"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "codeready linux builder for arm64", "vendor": "redhat", "type": "app", "affected": ["8.0_aarch64"], "fixed": null, "safe": "before 8.0_aarch64", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy codeready-linux-builder-for-arm64 || rpm -q codeready-linux-builder-for-arm64 || codeready-linux-builder-for-arm64 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.0_aarch64 (Debian / Ubuntu)", "cmd": "apt-cache madison codeready-linux-builder-for-arm64\nsudo apt install codeready-linux-builder-for-arm64=<VERSION_BEFORE_8.0_aarch64>\nsudo apt-mark hold codeready-linux-builder-for-arm64"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list codeready-linux-builder-for-arm64\nsudo dnf downgrade codeready-linux-builder-for-arm64-<VERSION_BEFORE_8.0_aarch64>\nsudo dnf versionlock add codeready-linux-builder-for-arm64"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "codeready linux builder for power little endian", "vendor": "redhat", "type": "app", "affected": ["8.0", "9.0_ppc64le"], "fixed": null, "safe": "before 8.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy codeready-linux-builder-for-power-little-endian || rpm -q codeready-linux-builder-for-power-little-endian || codeready-linux-builder-for-power-little-endian --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.0 (Debian / Ubuntu)", "cmd": "apt-cache madison codeready-linux-builder-for-power-little-endian\nsudo apt install codeready-linux-builder-for-power-little-endian=<VERSION_BEFORE_8.0>\nsudo apt-mark hold codeready-linux-builder-for-power-little-endian"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list codeready-linux-builder-for-power-little-endian\nsudo dnf downgrade codeready-linux-builder-for-power-little-endian-<VERSION_BEFORE_8.0>\nsudo dnf versionlock add codeready-linux-builder-for-power-little-endian"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "codeready linux builder for power little endian els", "vendor": "redhat", "type": "app", "affected": ["8.10"], "fixed": null, "safe": "before 8.10", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy codeready-linux-builder-for-power-little-endian-els || rpm -q codeready-linux-builder-for-power-little-endian-els || codeready-linux-builder-for-power-little-endian-els --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.10 (Debian / Ubuntu)", "cmd": "apt-cache madison codeready-linux-builder-for-power-little-endian-els\nsudo apt install codeready-linux-builder-for-power-little-endian-els=<VERSION_BEFORE_8.10>\nsudo apt-mark hold codeready-linux-builder-for-power-little-endian-els"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list codeready-linux-builder-for-power-little-endian-els\nsudo dnf downgrade codeready-linux-builder-for-power-little-endian-els-<VERSION_BEFORE_8.10>\nsudo dnf versionlock add codeready-linux-builder-for-power-little-endian-els"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["8.0", "9.0", "9.4", "9.6", "9.8"], "fixed": null, "safe": "before 8.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-6915"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/errata/RHSA-2024:2394"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/errata/RHSA-2024:2950"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/errata/RHSA-2024:3138"}, {"t": "Patch", "u": "https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/errata/RHSA-2024:2394"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/errata/RHSA-2024:2950"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.16557, "vendors": [{"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "fixed", "fixed": "5.4.0-172.190", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.4.0-172.190\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-97.107", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-97.107\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.76-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.76-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.6.13-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.6.13-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-4.18.0-553.rt7.342.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:2950\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "fixed", "fixed": "kernel-4.18.0-553.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:3138\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-427.13.1.el9_4", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:2394\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2024-519", "url": "https://alas.aws.amazon.com/cve/html/CVE-2023-6915.html", "note": "ALAS2023-2024-519"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-113682", "publisher": "VulnCheck", "title": "Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler", "summary": "Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an unauthenticated LDAP bind that is accepted as successful authentication.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T16:17:13.210", "modified": "2026-10-23T14:17:32.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113682"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.40224, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-113600", "publisher": "VulnCheck", "title": "Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticate", "summary": "Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsController#update and #destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE requests to /comments/:id with enumerable sequential IDs to edit or delete comments on contacts, accounts, leads, and opportunities owned by others.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T16:17:09.210", "modified": "2026-10-23T14:17:32.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113600"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19244, "pinned": false}, {"id": "CVE-2026-113595", "publisher": "VulnCheck", "title": "Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation t", "summary": "Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE_SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00259, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T16:17:08.083", "modified": "2026-10-23T14:17:32.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113595"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16691, "pinned": false}, {"id": "CVE-2026-111693", "publisher": "VulnCheck", "title": "DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthe", "summary": "DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtain an administrator token and access all protected /webapi routes.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00378, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:52.773", "modified": "2026-10-23T14:17:31.503", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111693"}], "cwe": ["CWE-1392"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30547, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-111683", "publisher": "VulnCheck", "title": "Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staf", "summary": "Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/<id> and /api/server_room/<id> to read asset hostnames, serials and management IPs, and to modify, move or create racks.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00239, "kev": false, "added": "2026-10-16", "pub": "2026-10-16T18:17:51.350", "modified": "2026-10-23T14:17:31.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111683"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14186, "pinned": false}, {"id": "CVE-2025-71434", "publisher": "VulnCheck", "title": "Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in t", "summary": "Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with srcType=2. Attackers can inject SQL through doc_datefrom/doc_dateto fields and read results via /api/ec/dev/table/counts to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-07-19.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00254, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T11:17:06.373", "modified": "2026-10-23T14:17:30.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-71434"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16072, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2012-20002", "publisher": "VulnCheck", "title": "TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allow", "summary": "TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like ../../../../wp-config.php to retrieve database credentials and system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T21:17:10.613", "modified": "2026-10-23T14:17:29.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2012-20002"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.34415, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-6103", "publisher": "PHP Group", "title": "phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check", "summary": "phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:23.790", "modified": "2026-10-23T14:07:18.323", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6103"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-j3wh-g957-2m85"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-j3wh-g957-2m85"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.05622, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3161 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3161.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3162 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3162.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3163 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3163.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3164 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3164.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2PHP8.2-2026-014 (important): php", "url": "https://alas.aws.amazon.com/AL2/ALAS2PHP8.2-2026-014.html", "date": "2026-10-12"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-31694", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page ca", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exc", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-05-01", "pub": "2026-05-01T14:16:19.133", "modified": "2026-10-23T14:06:26.363", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.15 and < 6.18.25", ">= 6.19 and < 7.0.2", "7.1 rc1", "7.1 rc2"], "fixed": "6.18.25, 7.0.2", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic s7-1500 tm mfp firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-31694"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/474ce83c96a55f2eeb14dee2be375eeadfdacdf5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/51a8de6c50bf947c8f534cd73da4c8f0a13e7bed"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7de93abfaae1b2dc94da8a07a36421bd073f1d8f"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06657, "vendors": [{"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1817", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-31694.html", "note": "ALAS2023-2026-1817"}], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2019-15598", "publisher": "HackerOne", "title": "A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able t", "summary": "A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02742, "kev": false, "added": "2019-12-18", "pub": "2019-12-18T21:15:12.523", "modified": "2026-10-23T13:58:00.743", "products": [{"name": "tree-kill", "vendor": "tree-kill project", "type": "app", "affected": ["< 1.2.2"], "fixed": "1.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls tree-kill"}, {"label": "2. UPGRADE to 1.2.2", "cmd": "npm install tree-kill@\">=1.2.2\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2019-15598"}], "cwe": ["CWE-94", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.86076, "vendors": [{"os": "npm", "pkg": "tree-kill", "status": "fixed", "fixed": "1.2.2", "cmd": "npm install tree-kill@\">=1.2.2\"\nnpm ls tree-kill", "url": "https://github.com/advisories/GHSA-j7fq-p9q7-5wfv", "note": "vulnerable: < 1.2.2"}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-91765", "publisher": "PHP Group", "title": "cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit", "summary": "cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exists in the SOAP value decoder and in the WSDL node search helper.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00516, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:24.550", "modified": "2026-10-23T13:49:32.333", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91765"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-rgrp-mwpx-f6rm"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43111, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "fixed", "fixed": "php-8.3.36-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87070\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "fixed", "fixed": "php8.4-8.4.27-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87071\nrpm -q php8.4", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "php", "status": "fixed", "fixed": "php-8.0.30-8.el9_8.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87151\nrpm -q php", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-91765.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3161 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3161.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3162 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3162.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3163 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3163.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3164 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3164.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2PHP8.2-2026-014 (important): php", "url": "https://alas.aws.amazon.com/AL2/ALAS2PHP8.2-2026-014.html", "date": "2026-10-12"}], "buzz": 2, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/php/php-src/security/advisories/GHSA-rgrp-mwpx-f6rm", "url": "https://github.com/php/php-src/security/advisories/GHSA-rgrp-mwpx-f6rm"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-91766", "publisher": "PHP Group", "title": "When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Pro", "summary": "When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP. A server that can steer a redirect therefore receives credentials that were only meant for the original origin. This is the same class of issue that libcurl fixed in 7.58.0 ( CVE-2018-1000007 https://", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00338, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:24.673", "modified": "2026-10-23T13:46:07.313", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91766"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-fpwc-w8rq-cr92"}], "cwe": ["CWE-200", "CWE-522"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26025, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm4", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.27", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.27\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.12", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:8.2/php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-91766.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "github.com/php/php-src/security/advisories/GHSA-fpwc-w8rq-cr92", "url": "https://github.com/php/php-src/security/advisories/GHSA-fpwc-w8rq-cr92"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3161 (important): php8.2", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3161.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3162 (important): php8.3", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3162.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3163 (important): php8.4", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3163.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3164 (important): php8.5", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3164.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2PHP8.2-2026-014 (important): php", "url": "https://alas.aws.amazon.com/AL2/ALAS2PHP8.2-2026-014.html", "date": "2026-10-12"}], "buzz": 2, "pinned": false}, {"id": "CVE-2026-91769", "publisher": "PHP Group", "title": "PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no ", "summary": "PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN was still accepted when its CN matched the requested peer_name. A certificate trusted by the client for one name can therefore be used to impersonate anot", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00135, "kev": false, "added": "2026-09-25", "pub": "2026-09-25T21:17:24.913", "modified": "2026-10-23T13:20:43.460", "products": [{"name": "php", "vendor": "php", "type": "app", "affected": [">= 8.2.0 and < 8.2.34", ">= 8.3.0 and < 8.3.35", ">= 8.4.0 and < 8.4.26", ">= 8.5.0 and < 8.5.11"], "fixed": "8.2.34, 8.3.35, 8.4.26, 8.5.11", "safe": "before 8.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy php || rpm -q php || php --version"}, {"label": "2. UPGRADE to 8.2.34 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade php"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade php"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison php\nsudo apt install php=<VERSION_BEFORE_8.2.0>\nsudo apt-mark hold php"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list php\nsudo dnf downgrade php-<VERSION_BEFORE_8.2.0>\nsudo dnf versionlock add php"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91769"}, {"t": "Vendor Advisory, Exploit", "u": "https://github.com/php/php-src/security/advisories/GHSA-vvx9-73fr-5jjx"}], "cwe": ["CWE-297"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.02713, "vendors": [{"os": "Ubuntu 20.04", "pkg": "php7.4", "status": "fixed", "fixed": "7.4.3-4ubuntu2.29+esm4", "cmd": "sudo apt update && sudo apt install --only-upgrade php7.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php7.4)\" ge \"7.4.3-4ubuntu2.29+esm4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "php8.1", "status": "fixed", "fixed": "8.1.2-1ubuntu2.27", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.1\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.1)\" ge \"8.1.2-1ubuntu2.27\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "php8.3", "status": "fixed", "fixed": "8.3.6-0ubuntu0.24.04.12", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.3)\" ge \"8.3.6-0ubuntu0.24.04.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "php8.2", "status": "fixed", "fixed": "8.2.34-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.2)\" ge \"8.2.34-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "php8.4", "status": "fixed", "fixed": "8.4.26-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade php8.4\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' php8.4)\" ge \"8.4.26-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "php8.4", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "php:8.2/php", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php82", "status": "fixed", "fixed": "php82-8.2.35-r0", "cmd": "apk add --upgrade php82\napk info -v php82", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "php84", "status": "fixed", "fixed": "php84-8.4.27-r0", "cmd": "apk add --upgrade php84\napk info -v php84", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "php83", "status": "fixed", "fixed": "php83-8.3.36-r0", "cmd": "apk add --upgrade php83\napk info -v php83", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3164", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-91769.html", "note": "ALAS2023-2026-3164"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-115507", "publisher": "VulnCheck", "title": "Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notif", "summary": "Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into email anchors. Authenticated users can craft titles or display names that close the anchor and inject phishing links into task-comment and task-mention notification emails sent to project members.", "cvss": 3.5, "sev": "LOW", "epss": 0.00197, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.767", "modified": "2026-10-23T13:19:13.093", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115507"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08882, "pinned": false}, {"id": "CVE-2026-115505", "publisher": "VulnCheck", "title": "libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that a", "summary": "libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actual_count or max_count values when clients call smb2_share_enum_async(), corrupting heap memory.", "cvss": 7.6, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.470", "modified": "2026-10-23T13:19:13.070", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115505"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10664, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-115508", "publisher": "VulnCheck", "title": "Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker ", "summary": "Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, inc", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00305, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T20:17:06.910", "modified": "2026-10-23T13:19:11.597", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115508"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22099, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99087", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: fix NULL pointer dereferenc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: fix NULL pointer dereference when the 'R' flag is used\n\nIf the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the\nuser activates the device in the 'R' mode, a crash in dm_integrity_resume\nhappens because the function attempts to read the journal containing the\nbitmap.\n\nThis patch makes dm-integrity skip any writes to the device in\ndm_integrity_resume", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:33.240", "modified": "2026-10-23T13:17:33.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99087"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99087: dm-integrity: fix NULL pointer dereference when the 'R' flag is used", "url": "https://lore.kernel.org/linux-cve-announce/2026102317-CVE-2026-99087-48e1@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99086", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: validate the superblock on ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-integrity: validate the superblock on resume\n\ndm_integrity_resume() re-reads the superblock from the device so that it\npicks up the flags and the recalculate position. It performs no\nvalidation on the result, while the constructor validates the superblock\nit reads and sizes all the in-memory structures according to it. The user\nmay modify the superblock on the underlying devi", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:33.113", "modified": "2026-10-23T13:17:33.113", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99086"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99086: dm-integrity: validate the superblock on resume", "url": "https://lore.kernel.org/linux-cve-announce/2026102317-CVE-2026-99086-0ada@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99085", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Fix CPU hotplug hang when a dy", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler\n\nA CPU going down has to empty its own rq. Its hotplug thread waits in\nsched_cpu_wait_empty() until nothing else is left, and the only thing that\nwakes it is balance_push(), which runs from __schedule() on the dying CPU\nand pushes off the migratable tasks the CPU picks.\n\nsched_ext breaks this. A ta", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.803", "modified": "2026-10-23T13:17:32.803", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99085"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99085: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler", "url": "https://lore.kernel.org/linux-cve-announce/2026102317-CVE-2026-99085-99e4@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99084", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nreaddir: take no inode lock on an immutab", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nreaddir: take no inode lock on an immutable directory\n\niterate_dir() takes the directory's i_rwsem shared and holds it across\n->iterate_shared(). For a directory that never has an entry and is\nnever removed the lock keeps nothing still, it only orders every reader\nand every writer of that inode behind each other.\n\nFor the directory of a nullfs instance that matters. The instance", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.693", "modified": "2026-10-23T13:17:32.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99084"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99084: readdir: take no inode lock on an immutable directory", "url": "https://lore.kernel.org/linux-cve-announce/2026102316-CVE-2026-99084-217a@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99083", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix heap out-of-bounds write in kr", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix heap out-of-bounds write in krb5_authenticate()\n\nIn krb5_authenticate(), out_len is calculated to determine available\nheadroom in response_buf for the incoming Kerberos AP-REP token. However,\nwhen SMB2_SESSION_SETUP is processed as a non-first element of a compounded\nSMB2 request, the calculation omits work->next_smb2_rsp_hdr_off.\n\nThis causes out_len to overstate rem", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.577", "modified": "2026-10-23T13:17:32.577", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99083"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99083: ksmbd: fix heap out-of-bounds write in krb5_authenticate()", "url": "https://lore.kernel.org/linux-cve-announce/2026102316-CVE-2026-99083-29cb@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99082", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Use active memslots for the per", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Use active memslots for the per-vCPU MMIO cache\n\nKVM tags the per-vCPU MMIO cache with a memslot generation so that a\nmemslot update invalidates cached MMIO information.  Both the fill and\nvalidation paths use kvm_memslots(), which unconditionally selects address\nspace 0, even when the vCPU is running in SMM and using address space 1.\n\nCommit 56f17dd3fbc4 (\"kvm: x86: f", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.440", "modified": "2026-10-23T13:17:32.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99082"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99082: KVM: x86: Use active memslots for the per-vCPU MMIO cache", "url": "https://lore.kernel.org/linux-cve-announce/2026102314-CVE-2026-99082-e5b1@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99081", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: fix DMA mapping length for padde", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: fix DMA mapping length for padded small packets\n\nStefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412\nNetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces:\n\n  DMAR: [DMA Read NO_PASID] Request device [18:00.0] fault addr 0xfc499000\n        [fault reason 0x06] PTE Read access is not set\n  bnxt_en 0000:18:00.0 eno1np0: Abandoning msg {0xb4 ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.293", "modified": "2026-10-23T13:17:32.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99081"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99081: bnxt_en: fix DMA mapping length for padded small packets", "url": "https://lore.kernel.org/linux-cve-announce/2026102336-CVE-2026-99081-e8cb@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99080", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: Free any excess xarray nodes in clear", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: Free any excess xarray nodes in clear_inode()\n\nFor many years we've had a hard to hit leak of xarray nodes.  Hugh\ndocumented it well in commit 786b31121a2c.  Recently people and\nsyzbot have found ways to force it to happen with madvise.  Rather\nthan fix the leaks where they happen, just call xa_destroy() which\nhas the side-effect of cycling the i_pages lock.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.160", "modified": "2026-10-23T13:17:32.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99080"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99080: fs: Free any excess xarray nodes in clear_inode()", "url": "https://lore.kernel.org/linux-cve-announce/2026102336-CVE-2026-99080-12f4@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99079", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent stale XSK buffer relea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent stale XSK buffer release on refill retry\n\nWhen an XDP redirect to an AF_XDP socket fails because its RX ring is\nfull, the XSK core frees the buffer. During the subsequent batched refill\nof a legacy cyclic RQ, mlx5e also releases the WQE's XSK buffer before\nallocating a replacement. If that refill succeeds only partially, a WQE\nleft without a replacement retain", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:32.040", "modified": "2026-10-23T13:17:32.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99079"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99079: net/mlx5e: Prevent stale XSK buffer release on refill retry", "url": "https://lore.kernel.org/linux-cve-announce/2026102335-CVE-2026-99079-fd28@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99078", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent stale XSK buffer relea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry\n\nWith AF_XDP on a striding RQ, mlx5e defers releasing XSK buffers until\nan MPWQE is refilled. If XSK allocation then returns -ENOMEM,\nactual_wq_head is not advanced and a later NAPI poll retries the same\nWQE.\n\nmlx5e_free_rx_mpwqe() leaves each released slot marked as releasable. On\nretry it can therefore call xsk_", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.910", "modified": "2026-10-23T13:17:31.910", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99078"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99078: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry", "url": "https://lore.kernel.org/linux-cve-announce/2026102335-CVE-2026-99078-198e@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99077", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: udp: Create exceptions before socke", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: udp: Create exceptions before socket matching\n\nCurrently, when ICMP Fragmentation Needed and Redirect Message packets\nare locally delivered and quote a UDP packet, a FIB nexthop exception\n(FNHE) is only created if the kernel can match the UDP packet to an\nexisting socket.\n\nThis behavior allows off-path attackers to conduct a side-channel attack\non the FNHE cache in order t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.787", "modified": "2026-10-23T13:17:31.787", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99077"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99077: ipv4: udp: Create exceptions before socket matching", "url": "https://lore.kernel.org/linux-cve-announce/2026102335-CVE-2026-99077-f4a8@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99076", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: udp: Create exceptions before socke", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: udp: Create exceptions before socket matching\n\nCurrently, when ICMPv6 Packet Too Big and Redirect Message packets are\nlocally delivered and quote a UDP packet, an exception is only created\nin the IPv6 exception cache if the kernel can match the UDP packet to an\nexisting socket.\n\nThis behavior allows off-path attackers to conduct a side-channel attack\non the exception cache", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.663", "modified": "2026-10-23T13:17:31.663", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99076"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99076: ipv6: udp: Create exceptions before socket matching", "url": "https://lore.kernel.org/linux-cve-announce/2026102335-CVE-2026-99076-bbbc@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99075", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nrust_binder: reschedule node refcount upd", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nrust_binder: reschedule node refcount update on thread exit\n\nWhen a thread exits via BINDER_THREAD_EXIT, its pending work items are\ncancelled. If a thread exits while holding a pending node refcount\nincrement (e.g. pushed as deferred work to that thread), the refcount\nincrement was previously dropped because Node::cancel() and\nNodeWrapper::cancel() were no-ops.\n\nDropping the ref", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.550", "modified": "2026-10-23T13:17:31.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99075"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99075: rust_binder: reschedule node refcount update on thread exit", "url": "https://lore.kernel.org/linux-cve-announce/2026102334-CVE-2026-99075-c2fc@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99074", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop PMTU walk when nexthop group s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop PMTU walk when nexthop group shrinks\n\nCommit 7d3f3b4367f3 (\"net: ipv4: Cache pmtu for all packet paths if\nmultipath enabled\") made __ip_rt_update_pmtu() update every path.\n\nFor nexthop objects, fib_info_num_path() and fib_info_nhc()\nindependently load nh->nh_grp.  RCU protects each group's lifetime but\ndoes not make the loads observe the same group.  If replacement sh", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.397", "modified": "2026-10-23T13:17:31.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99074"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99074: ipv4: stop PMTU walk when nexthop group shrinks", "url": "https://lore.kernel.org/linux-cve-announce/2026102334-CVE-2026-99074-cd56@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99073", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop exception dump when nexthop gr", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop exception dump when nexthop group shrinks\n\nCommit 4ce5dc9316de (\"inet: switch inet_dump_fib() to RCU\nprotection\") allowed IPv4 FIB dumps to run concurrently with nexthop\nreplacement.\n\nfib_dump_info_fnhe() uses fib_info_num_path() as the loop bound,\nthen fib_info_nhc() independently reloads nh->nh_grp. If\nRTM_NEWNEXTHOP replaces a group with fewer paths between those l", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.260", "modified": "2026-10-23T13:17:31.260", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99073"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99073: ipv4: stop exception dump when nexthop group shrinks", "url": "https://lore.kernel.org/linux-cve-announce/2026102334-CVE-2026-99073-c68c@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99072", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop route notification sizing when", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: stop route notification sizing when nexthop group shrinks\n\nCommit 680aea08e78c (\"net: ipv4: Emit notification when fib\nhardware flags are changed\") added an RCU-only fib_nlmsg_size() call\nfor asynchronous hardware flag notifications.\n\nfib_nlmsg_size() checks fib_info_num_path() before each iteration,\nthen fib_info_nhc() independently reloads nh->nh_grp. If\nRTM_NEWNEXTHOP r", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.143", "modified": "2026-10-23T13:17:31.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99072"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99072: ipv4: stop route notification sizing when nexthop group shrinks", "url": "https://lore.kernel.org/linux-cve-announce/2026102334-CVE-2026-99072-ef2f@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99071", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: do not warn on route notification s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: do not warn on route notification size race\n\nCommit 680aea08e78c (\"net: ipv4: Emit notification when fib hardware\nflags are changed\") added asynchronous route notifications for hardware\nflag changes.\n\nfib_alias_hw_flags_set() sizes the skb with fib_nlmsg_size() and later\nfills it with fib_dump_info() while holding only RCU.  With nexthop\ncompatibility mode enabled, a concu", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:31.027", "modified": "2026-10-23T13:17:31.027", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99071"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99071: ipv4: do not warn on route notification size race", "url": "https://lore.kernel.org/linux-cve-announce/2026102334-CVE-2026-99071-4b3a@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99070", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: do not warn on route notification s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: do not warn on route notification size race\n\nfib6_info_hw_flags_set() sizes the skb with rt6_nlmsg_size() and later\nfills it with rt6_fill_node().  With nexthop compatibility mode enabled,\na concurrent replacement can grow the group between these independent\nsnapshots.  rt6_fill_node() can then legitimately return -EMSGSIZE, so\nthe warning does not prove a sizing bug.\n\nRem", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.907", "modified": "2026-10-23T13:17:30.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99070"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99069", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ati_remote2 - fix type confusion i", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ati_remote2 - fix type confusion in device attribute handlers\n\nPreviously, the channel_mask and mode_mask attributes were registered on\nthe parent usb_device via sysfs_create_group(). When commit b20d6bf8014b\n(\"Input: ati-remote2 - use driver core to instantiate device\nattributes\") converted the driver to let the driver core manage them via\ndev_groups in struct usb_driver", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.800", "modified": "2026-10-23T13:17:30.800", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99069"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99068", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix memory leakage when clea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix memory leakage when clearing DAO input mappers\n\nCommit e576e7843c0d (\"ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions\")\ncentralized the DAO input mapper clearing logic in\ndao_clear_input(), but omitted the kfree() calls.\n\nIt removes the mapper entries from the list and sets their pointers\nto NULL without freeing the allocated array. This leaks mem", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.693", "modified": "2026-10-23T13:17:30.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99068"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99067", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: scrub: fix local_root reference le", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()\n\nWhen paths_from_inode() fails, scrub_print_warning_inode() jumps to err\nwithout dropping the reference taken by btrfs_get_fs_root(), leaking a\nreference to the root every time path resolution fails while printing\nscrub warnings.  Every other error and success path of the function\ndrops the reference.\n\nDr", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.583", "modified": "2026-10-23T13:17:30.583", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99067"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99066", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: init_can_skb(): restore skb hea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: init_can_skb(): restore skb header initialization\n\nCommit 9f10374bb024 (\"can: remove private CAN skb headroom infrastructure\")\nremoved the skb_reset_mac_header()/skb_reset_network_header()/\nskb_reset_transport_header() calls from init_can_skb(). As a result, RX\nskbs from alloc_can_skb() and friends again carry mac_header = 0xFFFF.\nWhen such an skb reaches packet_rcv_sp", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.477", "modified": "2026-10-23T13:17:30.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99066"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99065", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Handle cpu hotplug race in", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()\n\nWith commit 2125c0034c5d (\"cgroup/cpuset: Make cpuset hotplug processing\nsynchronous\"), the cpuset hotplug operation becomes synchronous. That\ncommit also removes the code that handles race between cpuset_hotplug_work\nand cpu hotplug notifier with the assumption that race is now gone.\nLater commit 7a0aabd9ce69 (\"", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.367", "modified": "2026-10-23T13:17:30.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99065"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99064", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncipso: adjust cached option offsets when ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncipso: adjust cached option offsets when removing CIPSO\n\ncipso_v4_skbuff_delattr() removes the CIPSO bytes but does not adjust\ncached offsets for options that follow them.\n\nFor example, with a valid 10-byte CIPSO option followed by a seven-byte\nRR option, parsing records rr at offset 30.  Removing CIPSO moves RR to\noffset 20, while the cached offset remains 30.  Consumers such a", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.253", "modified": "2026-10-23T13:17:30.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99064"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99063", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm ioctl: don't let data_start run past t", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm ioctl: don't let data_start run past the buffer\n\nstruct dm_ioctl has seven bytes of trailing padding, so the smallest\nbuffer userspace is allowed to ask for, offsetof(struct dm_ioctl, data),\nis seven bytes shorter than sizeof(struct dm_ioctl).\n\nget_result_buffer() sets data_start to sizeof(struct dm_ioctl) without\nlooking at how big the buffer actually is. Ask for the minimum", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.140", "modified": "2026-10-23T13:17:30.140", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99063"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99062", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: account only unread bytes i", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: account only unread bytes in read_skb()\n\nAfter a partial stream receive, rx_bytes tracks the unread suffix while\nbuf_used and peer credit still cover the whole packet.\nvirtio_transport_read_skb() dequeues that packet but passes pkt_len for\nboth counters, underflowing rx_bytes.\n\nOn a connected CID_LOCAL stream with an SK_SKB verdict, a 40-byte read\nfrom a 100-byte p", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:30.020", "modified": "2026-10-23T13:17:30.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99062"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99061", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: fix P2P device removal ra", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: fix P2P device removal race in brcmf_detach()\n\nWhen the driver is removed while the user space process that created\nthe P2P device (e.g. wpa_supplicant) is still exiting, the P2P device\ninterface is removed twice and the kernel crashes.\n\nThe two paths are:\n\n - wpa_supplicant, on exit, sends NL80211_CMD_DEL_INTERFACE for the P2P\n   device. nl80211_del_interface() ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.873", "modified": "2026-10-23T13:17:29.873", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99061"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99060", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7603: initialize global sta", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7603: initialize global station WCID\n\nmt7603 uses a driver-private global station WCID for frames that have\nneither a station nor a vif, including frames injected through a monitor\ninterface. Unlike the core global WCID initialized by\nmt76_register_device(), this WCID is published without ever being passed\nto mt76_wcid_init().\n\nSince commit 0335c034e726 (\"wifi: mt7", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.753", "modified": "2026-10-23T13:17:29.753", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99060"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99059", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: noise: reject response consump", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: noise: reject response consumption after intermediate initiation\n\nTwo threads begin processing the identical response message, received\ntwice. The first thread, A, runs. While it's running, the second one,\nB, gets partway through, and during that slow calculation, or even while\nblocking on down_write(), A completes and then also a handshake\ninitiation that's already b", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.620", "modified": "2026-10-23T13:17:29.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99059"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99058", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Fix NULL current_pwq deref in ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Fix NULL current_pwq deref in chained work check\n\ncurrent_wq_worker() only tells us that %current is a kworker. It does\nnot guarantee that the worker is currently executing a work item, as\nworker->current_pwq is populated only while process_one_work() is running\nthe work function.\n\nis_chained_work() can be reached while queueing on a draining or\ndestroying workqueue. ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.503", "modified": "2026-10-23T13:17:29.503", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99058"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99058: workqueue: Fix NULL current_pwq deref in chained work check", "url": "https://lore.kernel.org/linux-cve-announce/2026102330-CVE-2026-99058-dee6@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99057", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: don't leak the skb when xen", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: don't leak the skb when xennet_fill_frags() fails\n\nWhen a response chain has more slots than fit in the skb's frags,\nxennet_fill_frags() returns an error and xennet_poll() jumps to its\nerror path.  That path moves what's left on tmpq to errq to be freed,\nbut the skb being filled was already dequeued from tmpq, so it's never\nfreed.  Each chain that overflows leaks t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.373", "modified": "2026-10-23T13:17:29.373", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99057"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99057: xen/netfront: don't leak the skb when xennet_fill_frags() fails", "url": "https://lore.kernel.org/linux-cve-announce/2026102330-CVE-2026-99057-9b53@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99056", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nstrparser: make sure __strp_recv isn't ru", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nstrparser: make sure __strp_recv isn't running before tearing down the parser\n\nThe comment above strp_done() claims that if strp is stopped,\nstrp_recv will no longer be called. That's only true if the caller has\na mechanism (eg locking) to guarantee that strp_recv() calls that\nstarted before strp_stop() have completed by the time we call\nstrp_done().\n\nThis adds a dummy lock_sock", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.257", "modified": "2026-10-23T13:17:29.257", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99056"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99056: strparser: make sure __strp_recv isn't running before tearing down the parser", "url": "https://lore.kernel.org/linux-cve-announce/2026102330-CVE-2026-99056-7abf@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99055", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: reject net_iov in zerocopy receive m", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: reject net_iov in zerocopy receive mapping hints\n\nAfter copying a readable prefix, receive_fallback_to_copy() asks\ntcp_zerocopy_set_hint_for_skb() where page mapping can resume. If the\nnext skb is unreadable, find_next_mappable_frag() passes its net_iov\nfragment to can_map_frag().\n\nskb_frag_page() returns NULL for a net_iov, but can_map_frag()\ndereferences it in PageCompoun", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.140", "modified": "2026-10-23T13:17:29.140", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99055"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99055: tcp: reject net_iov in zerocopy receive mapping hints", "url": "https://lore.kernel.org/linux-cve-announce/2026102330-CVE-2026-99055-394a@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99054", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: destroy topsrv workqueues before cl", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: destroy topsrv workqueues before closing connections\n\ntipc_topsrv_stop() closed subscriber connections while the topology\nserver's send and receive workqueues were still running. Socket\ncallbacks and subscription events could then queue more work, and\nin-flight send/recv work could drop the last connection reference\nduring the conn_idr walk.\n\nThat race produced several tea", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:29.013", "modified": "2026-10-23T13:17:29.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99054"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99054: tipc: destroy topsrv workqueues before closing connections", "url": "https://lore.kernel.org/linux-cve-announce/2026102330-CVE-2026-99054-8f17@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99053", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: hold a reference to nodes found by ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: hold a reference to nodes found by link name\n\ntipc_node_find_by_name() returns a node after dropping its RCU read lock\nwithout taking a reference.  The LINK_SET, LINK_GET and LINK_RESET_STATS\nhandlers then lock and access the node, racing with timer-driven cleanup of\na down peer.  Generic netlink serialization does not exclude the node\ntimer.\n\nThe following interleaving ca", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.877", "modified": "2026-10-23T13:17:28.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99053"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99053: tipc: hold a reference to nodes found by link name", "url": "https://lore.kernel.org/linux-cve-announce/2026102329-CVE-2026-99053-922f@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99052", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: preserve NATIVE_LABELS on alread", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts\n\nWhen an NFSv4 filesystem exported with security_label is mounted a\nsecond time, sget_fc() returns the existing superblock and\nnfs_get_root() calls security_sb_set_mnt_opts() again on it. Since the\nsuperblock is already SB_INITIALIZED, selinux_set_mnt_opts() takes an\nearly exit without setting SECURITY_LSM", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.747", "modified": "2026-10-23T13:17:28.747", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99052"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99052: selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts", "url": "https://lore.kernel.org/linux-cve-announce/2026102329-CVE-2026-99052-2c48@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99051", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsverity: RCU-delay the freeing of struct", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsverity: RCU-delay the freeing of struct fsverity_info\n\n__fsverity_get_info() calls rhashtable_lookup_fast(), which just uses\nrcu_read_lock() and doesn't directly synchronize with\nfsverity_remove_info().\n\nFor the same inode this isn't a problem: its fsverity_info is removed\nonly at inode eviction time or upon failure to enable verity, when the\ninode no longer needs its fsverity", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.633", "modified": "2026-10-23T13:17:28.633", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99051"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99050", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mpsse: fix race when arming the IRQ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mpsse: fix race when arming the IRQ poll worker\n\ngpio_mpsse_irq_enable() arms the poll worker before publishing it:\nschedule_work() runs before the worker is added to priv->workers. If\ngpio_mpsse_disconnect() walks the list in that window it misses the\nworker, and once disconnect returns, the USB core frees mpsse_priv\nwhile the orphaned gpio_mpsse_poll() work keeps accessi", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.513", "modified": "2026-10-23T13:17:28.513", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99050"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99049", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: xilinx: fix runtime PM leak on requ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: xilinx: fix runtime PM leak on request error path\n\npm_runtime_get_sync() leaves the usage counter incremented even when it\nfails, and xgpio_request() returns the error without dropping it.\n\ngpiolib does not call ->free() when ->request() fails, so xgpio_free(),\nwhich holds the only matching pm_runtime_put(), never runs. The reference\nis leaked and the controller can no lon", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.403", "modified": "2026-10-23T13:17:28.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99049"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "mentions": [{"src": "Linux Kernel CVE Announce", "group": "distro", "title": "CVE-2026-99049: gpio: xilinx: fix runtime PM leak on request error path", "url": "https://lore.kernel.org/linux-cve-announce/2026102328-CVE-2026-99049-a4f1@gregkh/", "date": "2026-10-23"}], "buzz": 1, "pinned": false}, {"id": "CVE-2026-99048", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix napi_disable deadlock when attem", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix napi_disable deadlock when attempting to disable XSK pools\n\nWhen disabling XSK pools, GVE calls the unlocked versions of\nnapi_disable and napi_enable. However, the netdev lock has already been\nacquired before ndo_bpf is called because GVE supports queue management\nops. Calling the unlocked versions of napi_disable/enable results in a\ndeadlock when attempting to disable ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.293", "modified": "2026-10-23T13:17:28.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99048"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99047", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are stopped\n\nGVE does not free XSK buffers when resetting ring state as a part of\nstopping queues. This causes all XSK buffers which are posted to the\nNIC to be leaked.\n\nFree XSK buffers attached to an allocated buf_state when stopping rings.\n\nThis issue was hit in production.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.183", "modified": "2026-10-23T13:17:28.183", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99047"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99046", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak on error descrip", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak on error descriptor\n\nWhen the error bit is set in the RX completion descriptor, the buf_state\nand its attached buffer should be freed. In the case of AF_XDP ZC, the\nXSK buffer was not freed, leading to a leak.\n\nThis issue was caught by LLM.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:28.073", "modified": "2026-10-23T13:17:28.073", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99046"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99045", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmveth: h_free logical LAN on open-fail ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmveth: h_free logical LAN on open-fail after register\n\nibmveth_open() registers the logical LAN, then allocates the RX\nbuffer pools. A pool failure jumps to out_free_buffer_pools without\nh_free_logical_lan(), so PHYP still owns the buffer-list page when\nit is unmapped. request_irq() failure already issued the hypercall\nbefore taking the same label.\n\nMove that h_free to the sha", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.953", "modified": "2026-10-23T13:17:27.953", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99045"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99044", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix use-after-free in dynamic port c", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix use-after-free in dynamic port cleanup\n\nice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase the dynamic\nport from pf->dyn_ports. However, it frees the VSI before reading the\nindex for the erase, resulting in a use-after-free.\n\nFollow the reverse of the allocation order in ice_alloc_dynamic_port()\nby erasing the xarray entry before freeing the VSI.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.843", "modified": "2026-10-23T13:17:27.843", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99044"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99043", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix metadata_dst refcount handling o", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix metadata_dst refcount handling on representor teardown\n\nice_eswitch_release_repr() uses metadata_dst_free() to release the\nrepresentor's metadata_dst.  metadata_dst_free() directly frees the\nunderlying memory without checking the dst_entry refcount.\n\nWhen ice_eswitch_port_start_xmit() processes a packet, it takes a\nreference via dst_hold() and attaches the metadata_dst ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.723", "modified": "2026-10-23T13:17:27.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99043"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99042", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/net: populate CONNECT filter fie", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6\n\nio_connect_bpf_populate() fills connect.port and connect.v6_addr for\nAF_INET6 only when addr_len >= sizeof(struct sockaddr_in6), i.e. 28\nbytes.\n\nThe IPv6 connect paths accept SIN6_LEN_RFC2133 (24 bytes), which\nalready holds sin6_port and sin6_addr. io_connect() passes addr_len to\nthe socket layer unchanged.\n\n", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.610", "modified": "2026-10-23T13:17:27.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99042"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99041", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_gre: remove obsolete ERSPAN PMTU upda", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_gre: remove obsolete ERSPAN PMTU update\n\nA tc tunnel_key action can attach a METADATA_IP_TUNNEL dst to an skb,\nand mirred can redirect it to a native ip6erspan device. The legacy PMTU\nupdate in ip6erspan_tunnel_xmit() treats that metadata dst as a route.\nSince it has no output device, dst_dev(dst)->mtu dereferences NULL.\n\nOn v7.2 with KASAN, an initial UID/GID 65534 process ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.487", "modified": "2026-10-23T13:17:27.487", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99041"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99040", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix add_key() race with keyring res", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix add_key() race with keyring restriction\n\n__key_create_or_update() snapshots keyring->restrict_link before taking\nthe destination keyring's semaphore.  keyring_restrict() installs a\nrestriction while holding that semaphore.\n\nThis allows a writer to observe no restriction, wait for the keyring\nowner to install a reject-all restriction and return successfully, and\nthen li", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.360", "modified": "2026-10-23T13:17:27.360", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99040"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99039", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick: core: wait for request completi", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick: core: wait for request completion before freeing card\n\nIn memstick_alloc_card() and memstick_set_rw_addr(),\nwait_for_completion_timeout() is used to wait for device identification\nand address configuration requests to complete.\n\nThe memstick subsystem does not provide an abort or cancellation\ncallback in struct memstick_host for in-flight requests. If\nwait_for_completi", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.223", "modified": "2026-10-23T13:17:27.223", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99039"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99038", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick: rtsx_usb_ms: complete requests ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick: rtsx_usb_ms: complete requests after eject instead of dropping them\n\nmemstick_check() can pass its host->removing check just before\nrtsx_usb_ms_drv_remove() sets eject/removing. Its next request is then\nsilently dropped: rtsx_usb_ms_request() skips schedule_work() once eject\nis set, and drv_remove's cancel_work_sync() can also cancel a queued\nhandle_req before it picks", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:27.067", "modified": "2026-10-23T13:17:27.067", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99038"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99037", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: reject the lmk IV mode with AEA", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: reject the lmk IV mode with AEAD ciphers\n\nA \"capi:\" table line that pairs an AEAD cipher with the lmk IV mode,\nfor example \"capi:gcm(aes)-lmk\" with the integrity:28:aead option,\ncauses an oops when it is loaded. lmk sets tfms_count to 64, but\ncrypt_alloc_tfms_aead only allocates one transform, so crypt_setkey\nreads past the end of the tfms_aead array and calls crypto_a", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.947", "modified": "2026-10-23T13:17:26.947", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99037"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99036", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix reading free memory in do_resume\n", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix reading free memory in do_resume\n\nWhen do_resume calls dm_table_get_mode(new_map), the call is done without\nholding any locks (it only holds a reference to the md). It may be\npossible that another concurrent ioctl on the same device will swap table\nafter dm_swap_table and before dm_table_get_mode. In this case,\ndm_table_get_mode(new_map) reads freed memory.\n\nThis race co", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.820", "modified": "2026-10-23T13:17:26.820", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99036"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99035", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: mtk-sd: Cancel request timeout work ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: mtk-sd: Cancel request timeout work on remove\n\nThe driver queues req_timeout while a request is active.\nmsdc_request_done() uses cancel_delayed_work(), which does not wait for\na timeout callback that has already started.\n\nThe timeout callback calls mmc_request_done(), which wakes the request\nwaiter, and then continues to use host->dev_comp and check the SDIO IRQ.\nDuring unb", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.700", "modified": "2026-10-23T13:17:26.700", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99035"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:04:22.615274+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99034", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-sprd: disable runtime PM on re", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-sprd: disable runtime PM on remove\n\nsdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does\nnot perform the corresponding runtime PM cleanup.\n\nThe probe failure path disables runtime PM before disabling the clocks,\nbut the normal remove path directly disables clocks that are also\nmanaged by the runtime PM callbacks. If the device is runtime\nsuspended, th", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.580", "modified": "2026-10-23T13:17:26.580", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99034"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99033", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: guard the ll header push in p", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: guard the ll header push in packet_rcv_spkt()\n\npacket_rcv_spkt() restores the link layer header with\n\n\tskb_push(skb, skb->data - skb_mac_header(skb));\n\nThat subtraction is only meaningful when the device actually has a link\nlayer header.  packet_rcv() and tpacket_rcv() both wrap it in\ndev_has_header(), which is also the predicate the block comment at the\ntop of the f", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.443", "modified": "2026-10-23T13:17:26.443", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99033"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99032", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: protect clcsock lifetime in smc_", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: protect clcsock lifetime in smc_getname\n\nsmc_getname() dereferences smc->clcsock without holding\nclcsock_release_lock. Link-group termination can release the CLC socket\nthrough smc_close_active_abort() while the SMC socket is still open,\nfor example after shutdown(SHUT_WR).\n\nA getsockname() caller can load smc->clcsock, then the termination worker\ncan clear the pointer ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.310", "modified": "2026-10-23T13:17:26.310", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99032"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99031", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: avoid recursive multicast po", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: avoid recursive multicast port cleanup\n\nbr_multicast_sg_del_exclude_ports() removes automatically added STAR_EXCL\nport groups by calling br_multicast_del_pg(). For S,G entries, that\ndeletion calls back into br_multicast_sg_del_exclude_ports(), so a large\nnumber of STAR_EXCL ports consumes one kernel stack frame per port and can\nhit the stack guard page.\n\nKeep the co", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.190", "modified": "2026-10-23T13:17:26.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99031"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99030", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don't leave stale bytes in s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()\n\nWhen skb_copy_and_csum_bits() reaches unreadable frags it returns 0\nafter copying only the linear part, and the rest of the caller's buffer\nis left as it was.  The callers copy into a buffer that is about to go\nout on the wire: an ICMP error quoting the offending packet, or a\ndriver's TX bounce buffer in skb_copy_", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:26.077", "modified": "2026-10-23T13:17:26.077", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99030"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99029", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: free the matchall entry on d", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: free the matchall entry on destroy\n\nsparx5_tc_matchall_replace() allocates a struct sparx5_mall_entry for\nevery offloaded matchall filter and adds it to sparx5->mall_entries.\nsparx5_tc_matchall_destroy() removes the entry from the list, but never\nfrees it, so the entry of every deleted mirror and goto matchall filter\nis leaked.\n\nFree the entry after unlinking it.\n\nT", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.963", "modified": "2026-10-23T13:17:25.963", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99029"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99028", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xilinx: axienet: Free outstanding DM", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop\n\nIn the dmaengine path the driver pre-submits RX buffers and holds\nin-flight TX buffers whose SKBs are DMA-mapped by the driver and freed\nonly in the completion callbacks. On ndo_stop() dmaengine_terminate_sync()\naborts these descriptors without running their callbacks, and the driver\nthen frees only the ring s", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.843", "modified": "2026-10-23T13:17:25.843", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99028"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99027", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: team: stop reusing skb after queue o", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: team: stop reusing skb after queue override\n\nA nonzero dev_queue_xmit() result does not return ownership of the skb.\nWhen an override port's qdisc drops it, the queue override helper used to\ntry another port or the mode transmit op with the freed skb.\n\nReturn the handoff decision separately from transmit success. Select only\nthe first override port under RCU and stop after ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.723", "modified": "2026-10-23T13:17:25.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99027"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99026", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: team: free skb when broadcast has no", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: team: free skb when broadcast has no txable port\n\nbc_transmit() sends the original skb through the last txable port.\nWhen no port is txable, it returns false without consuming the skb, but\nteam_xmit() still returns NETDEV_TX_OK. AF_PACKET sends then retain the\nskb and its socket write-memory charge.\n\nA TX-enabled, link-down port keeps the broadcast transmit op installed.\nCa", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.610", "modified": "2026-10-23T13:17:25.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99026"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99025", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: fix soft lockup in the netli", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: fix soft lockup in the netlink flow dump\n\nA production compute node carrying a few thousand datapath flows hit a\nsoft lockup inside a single netlink flow dump and panicked.\n\novs_flow_cmd_dump() calls ovs_flow_stats_get() for every flow it\nemits, and that releases stats->lock with spin_unlock_bh() once per\nCPU that has touched the flow. Every release is a local_bh_en", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.480", "modified": "2026-10-23T13:17:25.480", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99025"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99024", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\noptee: register TEE devices only once ful", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\noptee: register TEE devices only once fully initialized\n\noptee_probe() called tee_device_register() on both the client and the\nsupplicant device before the rest of struct optee had been initialized.\n\ntee_device_register() calls cdev_device_add(), which does two things at\nonce: it creates /dev/tee0 and /dev/teepriv0, and it links the device\ninto the tee class so that class_find_d", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.357", "modified": "2026-10-23T13:17:25.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99024"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99023", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: sequencing: pcie-m2: Fix leaking a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()\n\nof_regulator_bulk_get_all() allocates the consumers array and hands it to\nthe caller, who is expected to free it at an appropriate time.\npwrseq-pcie-m2.c never did, leading to a memory leak.\n\nAdd an explicit kfree() for the consumers array.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.247", "modified": "2026-10-23T13:17:25.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99023"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99022", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: ltc3676: don't read the write-", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: ltc3676: don't read the write-only HRST and CLIRQ registers\n\nHRST (0x1e) and CLIRQ (0x1f) are write-only command strobes. Writing HRST\ntriggers a hard reset of the chip and writing CLIRQ clears the interrupt;\nreading them returns nothing useful, and the read itself fires the command.\n\nThe result is that a plain register dump resets the board:\n\n  cat /sys/kernel/debug/", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.127", "modified": "2026-10-23T13:17:25.127", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99022"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99021", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: of: fill in supply names in of", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: of: fill in supply names in of_regulator_bulk_get_all()\n\nof_regulator_bulk_get_all() returns an array it allocated itself, and\nfills in only the consumer of each entry. Every other way of getting a\nbulk array has the supply name set, because the caller provides it, and\nthe core expects it to be there: regulator_bulk_enable() prints it when\na supply fails to enable, so", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:25.013", "modified": "2026-10-23T13:17:25.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99021"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99020", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: tps6594-regulator: Fix n_linea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4\n\nThe TPS65224 BUCK2, BUCK3 and BUCK4 descriptors pass 4 as\nn_linear_ranges, but tps65224_bucks_2_3_4_ranges[] only has two\nentries, covering selectors 0x00-0x45.\n\nThe linear range helpers loop over n_linear_ranges entries, so any\nlookup of a selector above 0x45 reads past the end of the array and\ntreats whate", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.897", "modified": "2026-10-23T13:17:24.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99020"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99019", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ch: Do not keep references to data ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ch: Do not keep references to data transfer element devices\n\nch_readconfig() looks up the scsi_device of every data transfer element\nwhose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in\nch->dt[]. scsi_device_lookup() takes a reference, and nothing ever drops\nit: ch_destroy() frees the array with kfree(). ch->dt[] is read nowhere\nelse - it only supplie", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.770", "modified": "2026-10-23T13:17:24.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99019"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99018", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: entry: gate shadow call stack relo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: entry: gate shadow call stack reload on sstatus.SPP, not tp\n\nUnder CONFIG_SHADOW_CALL_STACK, handle_exception() reloads the kernel\nshadow call stack pointer (gp) only when the trap came from userspace.\nIt made that decision with scs_load_current_if_task_changed, which\ncompares the trap-time tp (read back from sscratch into s5) against the\ncurrent tp:\n\n\tbeq\t\\prev, tp, _ski", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.650", "modified": "2026-10-23T13:17:24.650", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99018"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99017", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: errata: select RISCV_ALTERNATIVE_E", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE\n\nerrata_probe_ghostwrite() only marks the CPU as vulnerable when it is\ncalled at the RISCV_ALTERNATIVES_EARLY_BOOT stage, and the mitigation\nin ghostwrite_enable_mitigation() only takes effect if the vulnerable\nstate was recorded before the boot alternatives are patched.\n\nThe early boot stage is only executed whe", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.530", "modified": "2026-10-23T13:17:24.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99017"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99016", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: futex: untag the user pointer befo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: futex: untag the user pointer before the atomic access\n\naccess_ok() checks untagged_addr(uaddr), but arch_futex_atomic_op_inuser()\nand futex_atomic_cmpxchg_inatomic() hand the raw uaddr to the inline asm\namoswap/amoadd/.../lr.w+sc.w through the \"+m\" (*uaddr) operand.  When the\ntagged address ABI is enabled (CONFIG_RISCV_ISA_SUPM, prctl\nPR_SET_TAGGED_ADDR_CTRL with PMLEN !", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.413", "modified": "2026-10-23T13:17:24.413", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99016"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99015", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: Serialize dead-devic", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: Serialize dead-device detachment\n\nRebinding an HCI socket after its controller is unregistered can race\nmonitor control replay and crash the kernel. hci_sock_bind() clears\nhci_pi(sk)->hdev and drops the device reference under only the socket\nlock, whereas send_monitor_control_replay() holds hci_sk_list.lock for\nreading.\n\nReplay can observe a non-NULL hdev, t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.270", "modified": "2026-10-23T13:17:24.270", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99015"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99014", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix command skb life", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix command skb lifetime during scan setup\n\nDuring PA sync scan setup, hci_le_set_ext_scan_param_sync() gets the\naddress used for the PA_LINK lookup from hci_sent_cmd_data(). The\nreturned pointer borrows storage from sent_cmd or req_skb, without\nholding a reference to either skb.\n\nThe scan worker runs on req_workqueue while hci_cmd_work() runs on the\nseparat", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.137", "modified": "2026-10-23T13:17:24.137", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99014"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99013", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Reject concurrent BIS lis", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Reject concurrent BIS listener setup\n\niso_sock_listen() drops the socket lock before calling iso_listen_bis()\nto preserve the hdev->lock ordering. Two concurrent listen() calls on\nthe same broadcast socket can therefore both observe BT_BOUND. Caller\nA can attach connA and release the locks, then caller B can acquire\nthem and attach connB before A publishes BT_LIS", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:24.013", "modified": "2026-10-23T13:17:24.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99013"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99012", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Serialize concurrent conn", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Serialize concurrent connect calls\n\niso_sock_connect() checks the socket state before taking the socket lock\nand drops the lock again before setting up a connection. Two callers can\nboth pass the admission check while the socket is open or bound.\n\nCaller A can copy its destination for route selection, then caller B can\nreplace the socket destination before A bind", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.867", "modified": "2026-10-23T13:17:23.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99012"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99011", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: serialise sco_conn lifeti", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()\n\nsco_recv_scodata() upgrades the weak hcon->sco_data back-pointer to a\nstrong reference under hdev->lock:\n\n    hci_dev_lock(hdev);\n    hcon = hci_conn_hash_lookup_handle(hdev, handle);\n    ...\n    conn = sco_conn_hold_unless_zero(hcon->sco_data);\n    hci_dev_unlock(hdev);\n\nbut the pointer is cleared from the ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.740", "modified": "2026-10-23T13:17:23.740", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99011"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99010", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: free the skb when the ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: free the skb when the DLC has no owner\n\nrfcomm_recv_data() hands the skb to d->data_ready() and returns 0\nwithout freeing it, so the callback owns the skb from that point on.\nThe tty implementation frees it when the DLC has been detached from its\ndevice:\n\n  static void rfcomm_dev_data_ready(struct rfcomm_dlc *dlc,\n                                    struct sk_", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.620", "modified": "2026-10-23T13:17:23.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99010"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99009", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: connect the session so", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: connect the session socket without rfcomm_mutex\n\nAn RFCOMM connect() issued while a BR/EDR link is being authenticated\nmakes lockdep report a circular dependency, and the reported cycle is a\nreal AB/BA between rfcomm_mutex and hdev->lock.\n\nrfcomm_security_cfm() is called from the HCI event path, which already\nholds hdev->lock:\n\n  hci_rx_work()\n    hci_event_pa", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.470", "modified": "2026-10-23T13:17:23.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99009"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99008", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix NULL tty_dev deref", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown\n\nsyzbot hit a NULL pointer dereference in rfcomm_dev_shutdown() when an\nRFCOMM tty is closed.\n\nrfcomm_dev_add() puts the new device on rfcomm_dev_list first and only\nthen registers the tty device and saves it in dev->tty_dev. If that\nregistration fails, dev->tty_dev is never set at all. The device can be\nlook", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.290", "modified": "2026-10-23T13:17:23.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99008"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99007", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/fb-helper: defer setup when fbdev_pro", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN\n\n__drm_fb_helper_initial_config_and_unlock() calls\ndrm_client_modeset_probe() first, which already fills in each\nmode_set->mode/num_connectors for every connected output, and only\nafterwards calls drm_fb_helper_single_fb_probe() to create\nfb_helper->fb and wire it into those mode_sets via\ndrm_setup_crtcs_fb", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.157", "modified": "2026-10-23T13:17:23.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99007"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99006", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Prevent overstepping exec a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Prevent overstepping exec array boundary\n\nIt is possible for eb_relocate_parse_slow() to call kvfree() on\nentries outside the original exec array during following\nscenario inside eb_relocate_parse_slow():\n\n1) eb_copy_relocations() allocates as many as eb->buffer_count\n   copies for exec entries;\n2) eb_parse() appends up to two VMAs, right after incrementing\n   eb->", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:23.040", "modified": "2026-10-23T13:17:23.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99006"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99005", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Unmask interrupts only when ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Unmask interrupts only when ACTIVE is true\n\nThere is a small race window between intel_rps_boost() reading\na stale ACTIVE state and queuing rps->work, where ACTIVE may be\nchanged via asynchronous calls triggered by wakeref drop.\nThis means that rps_work() could be triggered after the GT has\nbeen parked, so unmasking RPS PM interrupts would happen without\nholding PM ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.893", "modified": "2026-10-23T13:17:22.893", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99005"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99004", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Size page table prealloc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Size page table preallocation by device address\n\nCommit 0a8224058a58 (\"drm/imagination: Fix page count for page table for\nmap() interface\") passed the device address to\npvr_mmu_op_context_create(), but the preallocation is still sized from\ndevice_addr + sgt_offset with an exclusive end. The offset into the\nobject's pages has no place in a device-virtual range, a", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.783", "modified": "2026-10-23T13:17:22.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99004"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99003", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panthor: validate userspace queue cou", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panthor: validate userspace queue count against initialized firmware slot count\n\nIn panthor_drv.c:panthor_ioctl_group_create(),\nthe queue count is validated against the hardcoded maximum:\n\n\tif (!args->queues.count || args->queues.count > MAX_CS_PER_CSG)\n\t\treturn -EINVAL;\n\nHowever, if the firmware reports fewer slots than MAX_CS_PER_CSG,\npanthor_fw_init_ifaces() will only ini", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.670", "modified": "2026-10-23T13:17:22.670", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99003"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99002", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: validate pitch coming from us", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: validate pitch coming from userspace\n\nValidate the pitch, alongside the box dimensions before trying\nto copy data from the underlying surface. Fixes possible\nout of bounds reads with cursor snooping.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.557", "modified": "2026-10-23T13:17:22.557", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99002"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99001", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/i2c: cancel the client work on rem", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/i2c: cancel the client work on remove\n\nxe_i2c_notifier() stores the DesignWare adapter in i2c->adapter and\nschedules i2c->work when the adapter is registered under the xe I2C\nplatform device, and xe_i2c_client_work() then instantiates the AMC\nclient device on that adapter.\n\nxe_i2c_remove() tears down the AMC, unregisters the client devices,\nthe bus notifier and the adapte", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.440", "modified": "2026-10-23T13:17:22.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99001"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-99000", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix shrinker accounting double-su", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix shrinker accounting double-subtraction on nested external pins\n\nxe_bo_pin_external() and xe_bo_unpin_external() support nested pins,\nsince the underlying ttm_bo_pin()/ttm_bo_unpin() maintain a pin_count\nrefcount rather than a boolean. However, the shrinker accounting calls\nxe_ttm_tt_account_subtract() and xe_ttm_tt_account_add() are invoked\nunconditionally on every p", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.297", "modified": "2026-10-23T13:17:22.297", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-99000"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98999", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix stale pinned_link entry when ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin\n\nxe_bo_pin_external() and xe_bo_unpin_external() maintain the bo's\npinned_link list membership in xe->pinned.late.external, based on\nwhether the current call is the outermost pin or the final unpin.\nHowever, the same external bo's pin_count can also be raised and\nlowered directly by __xe_pin_fb_vma()/__xe_u", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.177", "modified": "2026-10-23T13:17:22.177", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98999"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98998", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: th1520-dw-hdmi: Fix remove() ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: th1520-dw-hdmi: Fix remove() callback\n\nThis driver stores struct th1520_hdmi * in platform drvdata, but\nth1520_dw_hdmi_remove() was reading it back as struct dw_hdmi *\nand passing it to dw_hdmi_remove(), so teardown runs on the wrong\npointer.\n\nRetrieve struct th1520_hdmi * from platform drvdata and pass\nhdmi->dw_hdmi to dw_hdmi_remove().", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:22.063", "modified": "2026-10-23T13:17:22.063", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98998"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98997", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: only accept doorbell BO", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: only accept doorbell BOs as queue doorbell\n\namdgpu_userq_get_doorbell_index() pins any BO passed as doorbell_handle\ninto the doorbell domain. For a regular BO, TTM moves it with\nttm_bo_move_null() and its contents are lost. Since an importer on the\nsame device gets the exporter's GEM object, a client can do this to a\nbuffer another client shared with it.\n\nRejec", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.920", "modified": "2026-10-23T13:17:21.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98997"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98996", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: don't silently unmount busy mounts\n\nT", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: don't silently unmount busy mounts\n\nThe propagate_mount_busy() helper exists to decide whether a synchronous\ncan suceed. It does that by looking at the copies of the victims in the\nmounts its parent propagates to. One of those functions from propagation\nhell.\n\nIt skips a copy that has child mounts except for the case of a single\nchild mount covering the copy's root. That alg", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.770", "modified": "2026-10-23T13:17:21.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98996"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98995", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: reset the old parent's ->overm", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: reset the old parent's ->overmount in mnt_change_mountpoint()\n\n__umount_mnt() resets ->overmount of the parent when it unmounts the\nmount that overmounts it. mnt_change_mountpoint() doesn't. It moves the\nmount to its new parent and leaves the old one pointing at it.\n\nFor a mount that is moved beneath in attach_recursive_mnt() that doesn't\nmatter. The new mount has alr", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.660", "modified": "2026-10-23T13:17:21.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98995"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:05:58.527072+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98994", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nstatmount: read the parent of an unmounte", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nstatmount: read the parent of an unmounted mount under mount_lock\n\nstatmount_mnt_basic() reads the ids of the parent through m->mnt_parent\nwith namespace_sem held for reading. That's fine for a mount that is\nin a namespace. Everything above it is pinned by that namespace.\n\nSTATMOUNT_BY_FD also accepts a file descriptor on a mount that has\nbeen unmounted on purpose and that only ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.550", "modified": "2026-10-23T13:17:21.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98994"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98993", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't inherit MNT_UMOUNT in cl", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't inherit MNT_UMOUNT in clone_mnt()\n\nMNT_UMOUNT gets raised on a mount that umount_tree() or umount_one() has\ntaken out of its namespace. It's never cleared. __detach_mounts()\nunhooks a mount that carries it instead of unmounting it.\n\ndisconnect_mount() lets an unmounted child stay attached only if its\nparent carries it. propagate_umount() takes it as the sign tha", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.410", "modified": "2026-10-23T13:17:21.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98993"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98992", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't copy an unmounted mount ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't copy an unmounted mount tree\n\nmay_copy_tree() accepts a mount whose root is an nsfs or pidfs file\nbefore it checks whether that mount is mounted. This exception exists\nfor nsfs and pidfs mounts. They are part of no mount namespace so\nneither check_mnt() nor is_mounted() would let them through and\nbind-mounting a nsfsfd or a pidfd wouldn't work.\n\nProblem is that ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.283", "modified": "2026-10-23T13:17:21.283", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98992"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98991", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: queue a mount only once for mo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: queue a mount only once for mount notifications\n\nmnt_notify_add() puts a mount on notify_list. It doesn't check whether\nthe mount is on the list already. That's fine as long as every mount is\nqueued at most once per namespace_sem hold. It isn't.\n\npropagate_umount() moves a surviving overmount off a stack of mounts\nthat are going away and queues it as moved. shrink_sub", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:21.137", "modified": "2026-10-23T13:17:21.137", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98991"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98990", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check a submount for reference", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check a submount for references right before unmounting it\n\nshrink_submounts() and mark_mounts_for_expiry() first collect all the\nmounts they are allowed to unmount and then unmount them.\n\nWhether a mount is busy is decided by propagate_mount_busy() on the\ntree. But unmounting the first mount changes the tree that the second\none propagates into. propagate_umount()\nmov", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.980", "modified": "2026-10-23T13:17:20.980", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98990"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98989", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check a recursive bind mount f", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check a recursive bind mount for mount namespace loops\n\ndo_loopback() refuses to bind mount the file of a mount namespace that\nis as old as the caller's or older because a mount namespace that holds\na mount of its own file, or of an ancestor's, would cause a cycle. But\nit only checks the dentry the bind mount starts from. With MS_REC\neverything below it is copied and ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.863", "modified": "2026-10-23T13:17:20.863", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98989"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98988", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: keep covered mounts covered in", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: keep covered mounts covered in OPEN_TREE_NAMESPACE\n\nopen_tree(OPEN_TREE_NAMESPACE) creates a new mount namespace from a\ncopy of the tree at the given path. The caller needs to be privileged\nover its current user namespace because the new mount namespace will be\nowned by it. It doesn't need to be privileged over the mount namespace\nthe tree is copied from. An unprivile", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.753", "modified": "2026-10-23T13:17:20.753", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98988"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98987", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: look at the topmost mount for ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: look at the topmost mount for a mount namespace file\n\nattach_recursive_mnt() preallocates a mountpoint for the root of the\ntopmost mount of the source so that a mount that already sits at the\ndestination can be put on top of the source or on top of one of its\npropagated copies.\n\nThe copies are made without CL_COPY_MNT_NS_FILE so their chain of\novermounts is shorter th", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.643", "modified": "2026-10-23T13:17:20.643", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98987"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98986", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: remove the fsnotify marks of a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: remove the fsnotify marks of a mount namespace in process context\n\nmnt_ns_release() drops the last passive reference of a mount namespace\nand removes its fanotify marks via fsnotify_mntns_delete(). That takes\nthe mutex of every group with a mark on the namespace and the spinlock\nof the connector. Fine from process context. But mnt_ns_tree_remove()\nhands the reference ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.540", "modified": "2026-10-23T13:17:20.540", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98986"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98985", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check the mounts before readin", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: check the mounts before reading their parents in pivot_root()\n\npath_pivot_root() reads the parents of new_root and of the caller's root\nand checks whether they are shared before it checks that either mount is\nin the caller's mount namespace. Only namespace_sem is held. That's fine\nfor a mount that is in the caller's mount namespace.\n\nBut new_root can be a file descrip", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.420", "modified": "2026-10-23T13:17:20.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98985"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98984", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndcache: don't put a mountpoint on a dentr", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndcache: don't put a mountpoint on a dentry that's being removed\n\nrmdir(), unlink() and rename() call dont_mount() on the victim and then\ndetach_mounts() with the victim's inode locked. do_lock_mount() takes\nthe inode lock of the mountpoint and checks cant_mount() so a mount\ncan't show up after detach_mounts().\n\nBut attach_recursive_mnt() makes a second mountpoint for the root of", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.287", "modified": "2026-10-23T13:17:20.287", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98984"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98983", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nunshare: don't drop active namespace refe", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nunshare: don't drop active namespace references that were never taken\n\nActive references on the namespaces of an nsproxy are taken when the\nnsproxy is installed into a task in switch_task_namespaces() and\ncopy_namespaces() and dropped again by put_nsproxy() through\ndeactivate_nsproxy().\n\nBut ksys_unshare() calls put_nsproxy() on an nsproxy that was never\ninstalled when set_cred_", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.160", "modified": "2026-10-23T13:17:20.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98983"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98982", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't let a pseudo dentry beco", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: don't let a pseudo dentry become the root of a mount\n\nd_alloc_pseudo() hands out dentries for pipes, sockets and other files\nthat are never anyone's child or parent. They carry DCACHE_NORCU and\ndentry_free() frees them right away because no lockless path walk can\never reach them. That holds as long as such a dentry isn't the root of\na mount. But bind mounting /proc/se", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:20.043", "modified": "2026-10-23T13:17:20.043", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98982"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98981", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: unhash a dentry before detachi", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: unhash a dentry before detaching the mounts on it\n\nunlink(), rmdir() and rename() remove the entry from the filesystem,\ncall detach_mounts() on the entry with the inode locked and then call\nd_delete() once the inode is unlocked.\n\nThe thing is that between detach_mounts() and d_delete() the dentry is\nstill hashed and positive. But after detach_mounts() nothing covers t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.890", "modified": "2026-10-23T13:17:19.890", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98981"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98980", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamei: don't reveal overmounted entries i", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamei: don't reveal overmounted entries in refwalk\n\nIn rcuwalk the dentry is validated before it is accepted. step_into()\nstep_into() rechecks d_seq and __follow_mount_rcu() rechecks mount_lock.\nAn entry that gets unlinked in between causes the lookup to retry and\nmiss.\n\nA refwalk doesn't do this. lookup_fast() takes a reference on the hashed\ndentry and simply accepts it. So an ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.750", "modified": "2026-10-23T13:17:19.750", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98980"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98979", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: refuse an automount below a mo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: refuse an automount below a mount that is in no namespace\n\nIt's possible to add autmounts even when the parent mount isn't in the\nmount namespace of the caller. The only requirement we have is that the\nparent mount namespace must not be NULL, i.e., unmounted.\n\nProblem is that clone_private_mount() has MNT_NS_INTERNAL which makes\nthat trivially true. So that passes the", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.627", "modified": "2026-10-23T13:17:19.627", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98979"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98978", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: never expire a locked mount\n\nL", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: never expire a locked mount\n\nLocked mounts are special. They protect the underlying files and\ndirectories from being revealed. do_umount() refuses to unmount locked\nmounts but shrink_submounts() doesn't.\n\nA shrinkable mount can become locked once the owner of a user namespace\nputs it beneath a locked mount with MOVE_MOUNT_BENEATH. The locked\nproperty now moves to the ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.517", "modified": "2026-10-23T13:17:19.517", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98978"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98977", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: handle mount locking for autom", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: handle mount locking for automounts correctly\n\nIf mounts are propagated across user namespaces, attach_recursive_mnt()\nlocks every copy of the source mount to protect overmounts from\nvanishing and revealing the underlying files or directories.\n\nThe user namespace is taken from the caller's mount namespaces since\nthis is where the mounts end up. Except, that's not alwa", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.387", "modified": "2026-10-23T13:17:19.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98977"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98976", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: keep the lock on a mount that ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnamespace: keep the lock on a mount that a propagated copy is moved beneath\n\nattach_recursive_mnt() transfers MNT_LOCKED from the top mount to the\nmount that is moved beneath it with MOVE_MOUNT_BENEATH. This allows the\nowner of a user namespace to replace its locked /proc or its root. The\nmount beneath takes on the job of covering the underlying mountpoint\nallowing the top mount", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.280", "modified": "2026-10-23T13:17:19.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98976"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98975", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: stop exchanging reflink flags when e", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: stop exchanging reflink flags when exchanging mappings\n\nWhen an exchange covers both files from offset 0 to i_disk_size,\nxmi_can_exchange_reflink_flags() assumes every mapping moved and hands\nthe reflink flag over to the other file.\n\nThat assumption is wrong.  A file can still own shared blocks past\ni_disk_size, e.g. after EXCHANGE_RANGE_TO_EOF sets a smaller size\nwithout u", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.157", "modified": "2026-10-23T13:17:19.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98975"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98974", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix exchange-range-to-eof file size ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix exchange-range-to-eof file size exchange\n\nNorbert Szetei posted a patch containing an incomplete description of a\nbug in XFS_IOC_EXCHANGE_RANGE's TO_EOF flag.  The bug tricks\nexchange-range into modifying a file so that it has shared blocks\nstarting beyond EOF, which is never allowed because files never have\nwritten data beyond EOF, and you can only share written data b", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:19.013", "modified": "2026-10-23T13:17:19.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98974"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98973", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Fix unlocked list_del in drm_", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Fix unlocked list_del in drm_bridge_add()\n\nWhen re-adding a bridge that was previously removed, drm_bridge_add()\ndrops it from bridge_lingering_list without holding bridge_lock.\n\nBoth bridge_list and bridge_lingering_list are protected by bridge_lock,\nas they are concurrently modified by drm_bridge_remove() and\n__drm_bridge_free(), and walked by the debugfs 'bridges'", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.900", "modified": "2026-10-23T13:17:18.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98973"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98972", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Don't access cpuset_cgrp_s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()\n\nAfter seeing the patch [1] to guard is_in_v2_mode() with RCU, it makes\nme realize that is_in_v2_mode() may be called in a context where a new\ncgroup filesystem is being rebound with stale cpuset_cgrp_subsys.root\npointer. Avoid this potential UaF situation by adding a new cpuset_v2_mode\nflag which is set when", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.783", "modified": "2026-10-23T13:17:18.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98972"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98971", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: exar: initialize the ID before regi", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: exar: initialize the ID before registering its cleanup\n\ndevm_add_action_or_reset() invokes the cleanup action immediately when\nregistering the action fails.  gpio_exar_probe() currently stores the\nallocated ID in exar_gpio only after registering the action, so that\nfailure makes exar_devm_ida_free() release ID 0.  If the allocated ID is\nnonzero, this leaks that ID and can ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.673", "modified": "2026-10-23T13:17:18.673", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98971"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98970", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Free the BO cache size list on t", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Free the BO cache size list on teardown\n\nvc4_bo_cache_destroy() purges the cached BOs but never frees the size\nlist, leaking it on every unbind.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.563", "modified": "2026-10-23T13:17:18.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98970"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98969", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: em_text: reject unterminated a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: em_text: reject unterminated algo before autoload\n\nThis is a follow-up to commit 9c572a83037a (\"net/sched: fix potential\nstack infoleak in em_text_dump()\"), which zero-initialised the dump-side\nstruct. Sashiko pointed at a pre-existing bug that exposed the change-side\ninput-validation gap open.\n\nem_text_change() casts the raw netlink attribute payload to struct\ntcf_em", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.440", "modified": "2026-10-23T13:17:18.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98969"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98968", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\namt: send the relay's General Query direc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\namt: send the relay's General Query directly from the receive path\n\nAn skb queued in a qdisc can outlive the tunnel it references\nthrough a raw pointer in skb->cb. For example, with igmp_qrv set\nto 1 on the relay a tunnel lives for 135s, so a netem delay of\n180s on the amt device outlives it; when the tunnel expires and is\nfreed, the subsequent dequeue triggers a use-after-free ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.310", "modified": "2026-10-23T13:17:18.310", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98968"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98967", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxgb4/ch_ktls: disable softirqs around ti", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxgb4/ch_ktls: disable softirqs around tid_list erases\n\nchcr_ktls_cpl_act_open_rpl() inserts into tid_list from the receive path\nusing xa_insert_bh().  The array is shared by the adapter's connections\nand initialized with XA_FLAGS_LOCK_BH.  However, chcr_ktls_dev_del() and\nthe chcr_ktls_dev_add() error path use xa_erase(), which takes the XArray\nlock without disabling softirqs.\n", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.187", "modified": "2026-10-23T13:17:18.187", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98967"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98966", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix the program leak when XDP is", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix the program leak when XDP is replaced\n\nWe need to release the reference on the old BPF prog, whether\nwe are going to no-prog, or replacing the prog with another.\n\nSpotted by AI while running tests for the propagation series\n(leaked programs were accumulating). Selftest will come in\nthe net-next series to avoid conflicts.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:18.077", "modified": "2026-10-23T13:17:18.077", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98966"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98965", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Restore Ordered MMIO Writes for Tx D", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Restore Ordered MMIO Writes for Tx Doorbells\n\nThe DQL accounting state which tracks the number of bytes queued for the\nNIC to transmit, namely dql->num_queued, is updated by the ICE driver\nwhen it invokes __netdev_tx_sent_queue(). Subsequently the driver\nupdates the hardware queue tail allowing the NIC to begin processing the\nwork queue. The queue accounting update should b", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.950", "modified": "2026-10-23T13:17:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98965"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98964", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: use the local P2P device on metada", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: use the local P2P device on metadata allocation failure\n\nnvmet_req_alloc_p2pmem_sgls() assigns req->p2p_dev only after the data\nand metadata SGL allocations succeed. If the data allocation succeeds\nbut the metadata allocation fails, out_free_sg passes req->p2p_dev to\npci_p2pmem_free_sgl() before that assignment has taken place.\n\nPass the local p2p_dev argument instead, so", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.830", "modified": "2026-10-23T13:17:17.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98964"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98963", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: always return -EIOCBQUEUED after b", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio\n\nIf all bios finish before btrfs_encoded_read_regular_fill_pages()\nreturns, it calls btrfs_uring_read_extent_endio() and previously\nreturned the I/O status.  A negative errno then made\nbtrfs_uring_read_extent() unlock and free while\nbtrfs_uring_read_finished() did the same again.\n\nReturn -EIOCBQUEUED so only t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.713", "modified": "2026-10-23T13:17:17.713", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98963"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98962", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: free iov when btrfs_uring_read_ext", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: free iov when btrfs_uring_read_extent() fails\n\nAfter btrfs_uring_read_extent(), the caller always jumped to out_acct.\nThat skips kfree(data->iov), which is only correct for -EIOCBQUEUED\nwhere the deferred path owns the iov. On failure, fall through to\nout_free instead.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.607", "modified": "2026-10-23T13:17:17.607", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98962"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98961", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: unlock inode and extent in caller ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: unlock inode and extent in caller when io_uring read extent fails\n\nbtrfs_uring_read_extent() runs only after btrfs_encoded_read() has taken\nthe inode shared lock and the extent lock.  On failure it used to unlock\nin out_fail, and a pages-array allocation failure returned -ENOMEM\nwithout unlocking at all.\n\nUnlock in the caller instead on all failure returns, matching the\nc", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.500", "modified": "2026-10-23T13:17:17.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98961"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98960", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: don't stash io_uring encoded data ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: don't stash io_uring encoded data across -EAGAIN\n\nReturning -EAGAIN while leaving btrfs_uring_encoded_data in the cmd PDU\nleaks if the request is cancelled or the ring exits before reissue.\nio_uring does not free driver PDU allocations on cleanup.\n\nWrite: io_queue_sqe() always issues with IO_URING_F_NONBLOCK first, so\nreturn -EAGAIN before allocating and free data on ever", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.390", "modified": "2026-10-23T13:17:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98960"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98959", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix xattr replace when multiple xa", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix xattr replace when multiple xattrs are packed in the same item\n\nIf we have a btrfs_dir_item item that packs multiple xattrs and then we\nreplace the value of one of them (with the setxattr(2) family of syscalls)\nwith another value of a different size, we end up not having a fully\ninitialized btrfs_dir_item, resulting in a corruption that the tree\nchecker will detect at", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.233", "modified": "2026-10-23T13:17:17.233", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98959"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98958", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: account non-AQL frames per pe", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: account non-AQL frames per peer rather than per link\n\nThe driver increments wcid->non_aql_packets when a frame goes to the\nhardware queue. The completion path decrements the counter again.\n\nFor an MLO peer, the hardware reports the completion on the link that it\nused for the transmission. This link can differ from the link that the\ndriver queued the frame on. In that", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.120", "modified": "2026-10-23T13:17:17.120", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98958"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98957", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: disable rx napi when ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: disable rx napi when removing device\n\nUnloading the mt7915e module with a MT7916 triggers multiples WARN in\n__netif_napi_del_locked() and in page_pool_disable_direct_recycling()\nbecause the driver does not disable the napi before destroying it.\n\nThis is troublesome since on MT7916 it is required to unload the module\nand reinsert it with a different enable_6gh", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:17.007", "modified": "2026-10-23T13:17:17.007", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98957"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98956", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: adau1372: allow sleepy powerdown GP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: adau1372: allow sleepy powerdown GPIOs\n\ngpiod_set_value() emits a WARN when the GPIO provider indicates that it\ncan sleep, as is typical for I2C controlled GPIO expanders. Since the\npowerdown GPIO is only manipulated in process context, use the _cansleep\nvariant instead. This lets the driver use sleepy GPIOs to power off the\nchip.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.890", "modified": "2026-10-23T13:17:16.890", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98956"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98955", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of s", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of skb->len when computing thoff\n\n__skb_flow_dissect() computes key_control->thoff using:\n\n  key_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);\n\nmin_t(u16, ...) casts both arguments to u16 before comparing them.\nWhenever skb->len (or hlen) modulo 65536 is smaller than nhoff, the\ntruncated length wins and thoff is set to a bogus sm", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.740", "modified": "2026-10-23T13:17:16.740", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98955"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:14:51.897480+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98954", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: always dissect GSO packets in __virt", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: always dissect GSO packets in __virtio_net_hdr_to_skb()\n\nCommit 9e8db5913264 (\"net: avoid false positives in untrusted gso\nvalidation\") added a '&& skb->network_header' check before flow-dissecting\nGSO packets without VIRTIO_NET_HDR_F_NEEDS_CSUM in\n__virtio_net_hdr_to_skb(), because some callers (such as tun_get_user(),\ntun_xdp_one(), virtnet_receive_done(), and raw_verify_", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.600", "modified": "2026-10-23T13:17:16.600", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98954"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98953", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: fix devlink_rel reference leak w", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: fix devlink_rel reference leak when notify work is pending\n\ndevlink_rel_nested_in_notify_work_schedule() takes a reference on the\ndevlink_rel for the notify work and then queues the work, ignoring the\nreturn value of schedule_delayed_work(). If the work is already pending,\nnothing new is queued, the work runs only once and drops only one\nreference, so the extra one is l", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.480", "modified": "2026-10-23T13:17:16.480", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98953"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98952", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\npfcp: make sure the SEID is linear before", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\npfcp: make sure the SEID is linear before reading it\n\npfcp_encap_recv() only makes sure that the UDP header and the 4 byte\nPFCP header are in the linear area. When the S flag is set,\npfcp_session_recv() then reads the 8 byte SEID that follows, which is\nnot covered by the pskb_may_pull() check.\n\nA short PFCP packet with the S flag set, or one whose session header\nlies in a fragme", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.370", "modified": "2026-10-23T13:17:16.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98952"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98951", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: ptrace: Zero-initialize regset buf", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: ptrace: Zero-initialize regset buffers before copyin\n\nuser_regset_copyin() only copies `count` bytes, so a PTRACE_SETREGSET\nrequest with a short iov_len leaves the rest of the stack buffer\nuninitialized. In riscv_vr_set() that garbage is validated and copied\ninto the target's vstate, and in riscv_cfi_set() it can be stored as\nthe target's shadow stack pointer. Zero both b", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.267", "modified": "2026-10-23T13:17:16.267", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98951"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98950", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of h", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()\n\nbpf_flow_dissect() sanitizes the offsets returned by the BPF program\nwith clamp_t(u16, ..., hlen).\n\nIf hlen is bigger than 65535, the upper bound is truncated before\nthe comparison. For instance, with hlen == 65536, both nhoff and\nthoff are forced to zero, even if the program returned sane values.\n\nThis is the s", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.153", "modified": "2026-10-23T13:17:16.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98950"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98949", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Fix reference and vm_bo ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Fix reference and vm_bo handling in remap()\n\nWhen a map overlaps part of an existing mapping, pvr_vm_gpuva_remap()\nsplits the mapping into prev/next parts covering what the request did\nnot take, instead of creating something new. It gets two things wrong.\n\n- A GEM reference is taken for each part but it's never needed and never\n  dropped, so it leaks one referen", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:16.037", "modified": "2026-10-23T13:17:16.037", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98949"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98948", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_flower: Fix port range re", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_flower: Fix port range register leak in tmplt_create()\n\nmlxsw_sp_flower_tmplt_create() parses a flow_cls_offload template\ninto a stack-local struct mlxsw_sp_acl_rule_info purely to compute\nrulei.values.elusage. Parsing can acquire port range registers via\nmlxsw_sp_flower_parse_ports_range(), but since this rulei never goes\nthrough mlxsw_sp_acl_rulei_destroy(), th", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.893", "modified": "2026-10-23T13:17:15.893", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98948"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98947", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix memory leak in vmci_transport_", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix memory leak in vmci_transport_recv_dgram_cb()\n\nDuring the closure of a datagram socket, the vmci_transport_recv_dgram_cb()\nfunction may be called, which will add the packets\nto the socket's backlog; then, after the receive queue is cleared,\nthe __release_sock() function will move the packet back from the socket's\nbacklog to the receive queue, which will lead to a memo", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.760", "modified": "2026-10-23T13:17:15.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98947"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98946", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Disable the V3D interrupt across", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Disable the V3D interrupt across runtime suspend\n\nvc4_irq_disable() masks the V3D interrupt sources and then calls\nsynchronize_irq() before the V3D is powered down. However, by itself,\nthis is not enough to quiesce the interrupt handler.\n\nsynchronize_irq() waits for handlers that have already set\nIRQD_IRQ_INPROGRESS, and for irqchips reporting IRQCHIP_STATE_ACTIVE.\nA GI", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.650", "modified": "2026-10-23T13:17:15.650", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98946"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98945", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Rearrange teardown sequence\n\n", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Rearrange teardown sequence\n\nThis fixes a narrow window during the teardown sequence where callbacks\ncould still be scheduled during cleanup that would then have a dangling\npointer to the now-freed steam struct.\n\nThis also puts work canceling for rumble and mode switch in\nsteam_unregister, as that shouldn't persist while the client hdev is open.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.533", "modified": "2026-10-23T13:17:15.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98945"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98944", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Refactor registration\n\nThis r", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Refactor registration\n\nThis refactors and simplifies the registration/unregistration flow. Since\nwe now only perform registration when the client isn't opened anymore, the\nlogic for handling that can be removed, and the rest of the function\nstreamlined.\n\nWe also remove the previous assumption that we have a serial number to show\nwe're registered, replacing it with a ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.417", "modified": "2026-10-23T13:17:15.417", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98944"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98943", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Clean up locking\n\nThis cleans", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Clean up locking\n\nThis cleans up several issues with locking behavior, including RCU accesses\nnot being guarded behind a lock.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.303", "modified": "2026-10-23T13:17:15.303", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98943"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98942", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Build the cid tables privately", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Build the cid tables privately and publish them with RCU\n\nThe cid tables are visible to the cid kfuncs while being modified: the\nfirst enable publishes the global pointers before filling them,\nops.init_cids() overrides rewrite them in place, and re-enables rebuild\nthem in place. A racing TRACING or SYSCALL program can read unfilled\nentries, including uninitialized mem", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.193", "modified": "2026-10-23T13:17:15.193", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98942"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98941", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don't enable large folios on encryp", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don't enable large folios on encrypted inodes\n\nCommit 709f0f1f1bf5 (\"ext4: add checks for large folio\nincompatibilities when BS > PS\") disables large folios at mount time\nif the \"encrypt\" feature is set. However, enabling that feature on a\nmounted filesystem circumvents that check, and writing encrypted data\nresults in a crash:\n\n  BUG: kernel NULL pointer dereference, addr", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:15.087", "modified": "2026-10-23T13:17:15.087", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98941"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98940", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: lpass-cpu: use DAI table inde", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: lpass-cpu: use DAI table index for playback constraints\n\nThe DAI ID is a hardware port ID and is not necessarily the index of\nthe corresponding entry in variant->dai_driver.\n\nWhen configuring a DAI with LPAIF_I2SCTL_MODE_QUAD01, the probe code\ncurrently uses dai_id to index variant->dai_driver. This is incorrect\nfor platforms where DAI IDs are sparse. For example, th", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.960", "modified": "2026-10-23T13:17:14.960", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98940"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98939", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Drop unnecessary PMD page copy wh", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Drop unnecessary PMD page copy when freeing\n\nOn a box with a discrete GPU, lockdep reports a possible deadlock as\nsoon as kswapd shrinks the TTM page pool. The immediate cause is an\nx86 commit that added an mmap_read_lock() to kernel page protection\nmunging code.\n\nThe huge vmap code holds the same lock over a GFP_KERNEL allocation,\nwhich is a no-no now that reclaim can t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.843", "modified": "2026-10-23T13:17:14.843", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98939"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98938", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nrust: irq: pass RegistrationInner as cook", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nrust: irq: pass RegistrationInner as cookie to request_irq\n\nWith commit ba268514ea14 (\"rust: devres: fix race condition due to\nnesting\"), Devres::new() returns Result<Self> by value instead of\ninitializing in-place via PinInit. Because request_irq() is called\ninside Devres::new(), registration.inner is still uninitialized when the\nIRQ is enabled, so accessing registration.inner.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.720", "modified": "2026-10-23T13:17:14.720", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98938"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98937", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Check kernel access when kerne", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Check kernel access when kernel callchains are requested\n\nperf_event_open() currently gates perf_allow_kernel() only on\n!attr.exclude_kernel.\n\nHowever, users can still request kernel callchain collection with\nattr.exclude_callchain_kernel == 0 even when attr.exclude_kernel == 1.\nThat still requires kernel profiling privilege, but the existing check\ndoes not enforce it", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.613", "modified": "2026-10-23T13:17:14.613", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98937"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98936", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: reset ar->num_stations on h", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: reset ar->num_stations on hardware start\n\nWhen (multiple) hw restart occurs, we end up in a situation where we\ncannot accept new stations / mesh peers. This seems to be the\n'num_stations' in 'struct ath11k' that did not get reset properly in\nthis case. In ath11k_mac_op_start(), it was indeed the only accounting var\nthat did not get reset so let's clear it too.\n\nThi", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.490", "modified": "2026-10-23T13:17:14.490", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98936"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98935", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: dev: zero-initialize struct rtc_wkal", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak\n\nThe struct rtc_wkalrm has padding holes after the 'pending' member.\nWhen returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized\nkernel stack data residing in these holes may be leaked.\n\nZero-initialize the struct at declaration to eliminate this information\nleak risk.\n\nFixes smatch warnings:\n- dri", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.377", "modified": "2026-10-23T13:17:14.377", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98935"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98934", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: use skb_get_hash_net() in seg6_", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()\n\nSince commit d58e468b1112 (\"flow_dissector: implements flow dissector\nBPF hook\") __skb_flow_dissect() needs a net pointer, either from\nskb->dev, skb->sk, or since commit 3cbf4ffba5ee (\"net: plumb network\nnamespace into __skb_flow_dissect\") a caller provided pointer.\n\nsyzbot was able to reach seg6_make_flowlabel() with an", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.253", "modified": "2026-10-23T13:17:14.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98934"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98933", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: hub: use shorter 120ms post resume h", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: hub: use shorter 120ms post resume hold for SS root hubs\n\nHolding a USB3 hub PM runtime reference for 200ms at hub resume triggers\nan AMD platform issue.  Users running Android adb report crashes after\nadb has been polling and waking up the USB subsystem once a second for\nsome time.  Vendors are working on a solution.  Disabling USB runtime PM\nis one way to prevent this iss", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.120", "modified": "2026-10-23T13:17:14.120", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98933"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98932", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/altera: Fix use-after-free in error ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/altera: Fix use-after-free in error paths\n\nIn both altr_edac_a10_device_add() and altr_portb_setup(), the error path\nfreed the dci structure before releasing the devres group. Since the managed\nsingle and double bit IRQ handlers use altdev(dci->pvt_info) as their data, an\nIRQ firing between freeing dci and unregistering the IRQs could dereference\nthe freed memory.\n\nRelease ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:14.013", "modified": "2026-10-23T13:17:14.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98932"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98931", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: spinand: fix NULL pointer dereferenc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: spinand: fix NULL pointer dereference with no ECC engine\n\nWhen \"nand-no-ecc-engine\" is set in DT, nanddev_get_ecc_engine() takes\nthe NAND_ECC_ENGINE_TYPE_NONE path and returns success while leaving\nnand->ecc.engine NULL. The SPI-NAND code nevertheless dereferences it\nunconditionally to test for a pipelined engine, so probing such a\ndevice oopses immediately.\n\nRather than op", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.897", "modified": "2026-10-23T13:17:13.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98931"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98930", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix IRQ injection with SIGP St", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix IRQ injection with SIGP Stop and Store Status\n\nWhen __inject_sigp_stop() is called for a Stop and Store Status\noperation, if the vCPU is running, the interrupt is marked as pending\nand the status is stored by the thread performing the KVM_RUN IOCTL.\n\nIf the vCPU is already stopped, the status is stored immediately.\n\nStoring the status means writing into userspace,", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.783", "modified": "2026-10-23T13:17:13.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98930"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98929", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacsec: initialize SecY before registerin", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacsec: initialize SecY before registering the netdevice\n\nCreating a MACsec device with MAC offload over an LRO-capable lower\ndevice triggers a warning in rtmsg_ifinfo_build_skb() when IPv4\nforwarding is enabled by default.\n\nregister_netdevice() invokes inetdev_init(), which disables LRO and emits\na NETDEV_FEAT_CHANGE notification. This reaches macsec_fill_info() before\nmacsec_a", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.673", "modified": "2026-10-23T13:17:13.673", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98929"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98928", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Derive GUEST_HAS_SVE from the", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2\n\npkvm_init_features_from_host() takes KVM_ARCH_FLAG_GUEST_HAS_SVE and\nKVM_ARM_VCPU_SVE from the host separately, but pkvm_vcpu_init_sve()\ntests the bit while vcpu_has_sve() reads the flag. A host that sets the\nflag without the bit gets a vCPU with a NULL sve_state that the world\nswitch loads the guest's SVE state f", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.567", "modified": "2026-10-23T13:17:13.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98928"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98927", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Fix life cycle of the nes", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Fix life cycle of the nested_mmus array\n\nThe nested_mmus array holds the shadow page tables that are used when\na guest is running a nested context. These structures are allocated on\nVCPU_INIT for whole guest, which implies that they may have to be\nrelocated as the array grows.\n\nShould a VCPU_INIT occur whilst a vcpu is actively running an L2 and\nthat the allocati", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.450", "modified": "2026-10-23T13:17:13.450", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98927"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98926", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Remove sink usage from D", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Remove sink usage from DPMS\n\n[Why]\nstream->sink is optional and can be null, so should always be checked\nbefore dereference. Additionally, most of its usage in DPMS sequences\nis for stream->sink->link, which can be replaced with stream->link,\nas the two should always be the same.\n\n[How]\n* Replace stream->sink->link in DPMS on/off\n* Add assert to USB4 BW allocati", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.343", "modified": "2026-10-23T13:17:13.343", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98926"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98925", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix self-redirect copied_se", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix self-redirect copied_seq double-counting\n\nWhen a BPF stream_verdict program redirects an skb back to the same\nsocket (self-redirect with BPF_F_INGRESS), sk_psock_verdict_apply()\ncalls tcp_eat_skb() which advances tcp_sk->copied_seq. However, the\nskb is then delivered to the socket's psock ingress queue and later\nread by tcp_bpf_recvmsg_parser(), which also adva", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.210", "modified": "2026-10-23T13:17:13.210", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98925"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98924", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: avoid repeated scans in evict_inodes(", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: avoid repeated scans in evict_inodes()\n\nWe observed hung tasks when users attempted to unmount a filesystem\nafter its disk had been removed while still in use. During device\nremoval, fs_bdev_mark_dead() calls evict_inodes() while holding s_umount.\n\nEach time evict_inodes() drops s_inode_list_lock to reschedule, it\nrestarts the walk from the head of s_inodes. With many refere", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:13.083", "modified": "2026-10-23T13:17:13.083", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98924"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98923", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: io: Reject non-user protection in ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: io: Reject non-user protection in ioremap_prot()\n\nMapping a stack-top page via /dev/mem with PROT_NONE and then\nreading that process's /proc/<pid>/cmdline triggers a spurious WARN\nin ioremap_prot() through generic_access_phys():\n\n  WARNING: ./arch/arm64/include/asm/io.h:275 at generic_access_phys\n  Call trace:\n    generic_access_phys+0x1c8/0x228 (P)\n    __access_remote_vm", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.957", "modified": "2026-10-23T13:17:12.957", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98923"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98922", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: emac: move setting of netops to fix ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: emac: move setting of netops to fix crash\n\nfixes the following crash on driver initialization:\n\n|BUG: Kernel NULL pointer dereference on read at 0x00000158\n|Faulting instruction address: 0xc0566b40\n|Oops: Kernel access of bad area, sig: 11 [#1]\n|BE PAGE_SIZE=4K  PowerPC 44x Platform\n|Modules linked in:\n|CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Tainted: GW 7.3.0-rc3+ #1\n|Tainted", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.840", "modified": "2026-10-23T13:17:12.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98922"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98921", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: fix UAF in ovl_do_mkdir() debug prin", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: fix UAF in ovl_do_mkdir() debug print\n\novl_do_mkdir() prints the input dentry with %pd after vfs_mkdir().\nSince commit fe497f0759e0 (\"VFS: change vfs_mkdir() to unlock on\nfailure.\"), vfs_mkdir() calls end_creating() on the input dentry on\nfailure and may replace it on success, so the post-call %pd can\nuse-after-free the dentry when CONFIG_OVERLAY_FS_DEBUG is enabled.\n\nPrint", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.733", "modified": "2026-10-23T13:17:12.733", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98921"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98920", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix missing alloc tagging of direc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix missing alloc tagging of direct mempool allocations\n\nCommit 1d78d56c43ef (\"netfs: Fix folio_queue ENOMEM in writeback by\nadding a mempool\") added a mempool for the folio_queues and made the\nrequest, subrequest and folio_queue allocations distinguish between\nwriteback and everything else.  Writeback is part of memory reclaim\nand must not fail due to ENOMEM, so it alloc", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.617", "modified": "2026-10-23T13:17:12.617", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98920"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98919", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: harden adjust_idledly() against d", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: harden adjust_idledly() against divide-by-zero and overflow\n\nadjust_idledly() has several corner-case issues flagged during review:\n\n  1. If xe_gt_clock_init() failed to recognise the crystal clock,\n     gt->info.timestamp_base is 0, which makes idledly_units_ps also 0.\n     The subsequent DIV_ROUND_CLOSEST(..., idledly_units_ps) is then a\n     divide-by-zero and panics ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.487", "modified": "2026-10-23T13:17:12.487", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98919"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98918", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/ops-common: use a page-aligned a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()\n\n__damon_va_prepare_access_check() picks a random byte address within the\nregion and stores it in r->sampling_addr.  damon_va_mkold() passes it into\na page table walk, which hands it to damon_ptep_mkold() as the address of\nthe page to sample:\n\n  damon_va_mkold(mm, r->sampling_addr)\n    damon_va_walk_page_range", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.360", "modified": "2026-10-23T13:17:12.360", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98918"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98917", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Increase kernel stack size to 32k", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Increase kernel stack size to 32kb\n\nFor 64-bit Linux kernels, increase the default kernel stack size\n(THREAD_SIZE_ORDER) to 32 kB, in order to avoid kernel crashes which have been\ntriggered recently when building the debian vtk9 package with gcc 17:\n\nstackcheck: kworker/u128:0 will most likely overflow kernel stack (sp:179a83af0, stk bottom-top:179a80000-179a84000)\nKerne", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:12.247", "modified": "2026-10-23T13:17:12.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98917"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-57146", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint. The current CLI wrapper does not expose --api-key, does not install the common API-key middle", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.527", "modified": "2026-10-23T13:17:11.647", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57146"}], "cwe": ["CWE-200", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.61", "cmd": "pip install --upgrade \"praisonai>=4.6.61\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-jxcw-qp4h-6jfq", "note": "vulnerable: >= 4.5.115, < 4.6.61"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57144", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native() path lets callers configure allowed filesystem paths and network=False. On systems where the optional sandlock module imports but reports that Landlock is unavailable, SandlockSandbox.execute() and run_command() ", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.370", "modified": "2026-10-23T13:17:11.490", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57144"}], "cwe": ["CWE-266", "CWE-668", "CWE-693"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.61", "cmd": "pip install --upgrade \"praisonai>=4.6.61\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-6jcq-6546-qrrw", "note": "vulnerable: >= 4.5.110, < 4.6.61"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57142", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-denied tools unless the caller explicitly passes allow_dangerous_tools=True. That policy only checks tools declared in TEMPLATE.yaml requires.tools. For steps-based recipes, the actual execution path loads workflow.yaml with YAMLWorkflowParser. That parser resolves agent-le", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:11.210", "modified": "2026-10-23T13:17:11.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57142"}], "cwe": ["CWE-78", "CWE-94", "CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.61", "cmd": "pip install --upgrade \"praisonai>=4.6.61\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-7qw2-w5rc-37x2", "note": "vulnerable: >= 4.5.87, < 4.6.61"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57117", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_file when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then sends those strings to shell-backed compute providers. An attacker who can influence a file-tool path argument can break out of th", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.870", "modified": "2026-10-23T13:17:11.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57117"}], "cwe": ["CWE-78", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-w6h2-fr4q-xvxv", "note": "vulnerable: >= 4.6.10, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57116", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The chat route directly calls agent.chat(request.message). No-auth and wrong-bearer requests both execute the deployed agent. This is broader than passive metadata disclosure. In any ", "cvss": 9.8, "sev": "CRITICAL", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.690", "modified": "2026-10-23T13:17:10.827", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57116"}], "cwe": ["CWE-200", "CWE-306", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-892r-p3jq-jp24", "note": "vulnerable: >= 4.2.1, <= 4.6.57"}], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-57114", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation", "cvss": 7.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T13:17:10.533", "modified": "2026-10-23T13:17:10.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57114"}], "cwe": ["CWE-367", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-rjvw-7vvw-549v", "note": "vulnerable: >= 4.5.126, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-113022", "publisher": "Chrome", "title": "Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially e", "summary": "Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.0042, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:53.043", "modified": "2026-10-23T13:17:08.260", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113022"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.35224, "vendors": [{"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-112995", "publisher": "Chrome", "title": "Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbit", "summary": "Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:49.097", "modified": "2026-10-23T13:17:08.110", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112995"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/514447367"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31338, "vendors": [{"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-112994", "publisher": "Chrome", "title": "Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbi", "summary": "Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:18:48.973", "modified": "2026-10-23T13:17:07.957", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112994"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/562962437"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.40983, "vendors": [{"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2023-4548", "publisher": "VulDB", "title": "A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3", "summary": "A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.1.4 is sufficient to resolve this issue. You should upgrade the affected compo", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.32225, "kev": false, "added": "2023-08-26", "pub": "2023-08-26T10:15:11.277", "modified": "2026-10-23T13:07:14.120", "products": [{"name": "ecommerce cms", "vendor": "spa-cart", "type": "app", "affected": [">= 1.9.0.3 and < 1.9.1.4"], "fixed": "1.9.1.4", "safe": "before 1.9.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ecommerce-cms || rpm -q ecommerce-cms || ecommerce-cms --version"}, {"label": "2. UPGRADE to 1.9.1.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ecommerce-cms"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ecommerce-cms"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.9.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison ecommerce-cms\nsudo apt install ecommerce-cms=<VERSION_BEFORE_1.9.0.3>\nsudo apt-mark hold ecommerce-cms"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ecommerce-cms\nsudo dnf downgrade ecommerce-cms-<VERSION_BEFORE_1.9.0.3>\nsudo dnf versionlock add ecommerce-cms"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-4548"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P1", "why": ["EPSS top 2%: very likely to be exploited", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.98326, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "pocs": [{"kind": "writeup", "name": "vuldb.com/?id.238059", "url": "https://vuldb.com/?id.238059"}, {"kind": "edb", "name": "SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection", "url": "https://www.exploit-db.com/exploits/51714"}], "pinned": false, "ssvc": null}, {"id": "CVE-2026-98916", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: check link is beaconing fo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: check link is beaconing for color change\n\nWhen trying to do a color change, validate that the link is\nbeaconing first, to avoid calling the driver with an invalid\nlink.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.797", "modified": "2026-10-23T12:18:25.797", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98916"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98915", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: video-i2c: use vb2_video_unregiste", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: video-i2c: use vb2_video_unregister_device on driver removal\n\nThe driver uses vb2_fop_release() as its file release operation, so\nvb2_video_unregister_device() should be used instead of\nvideo_unregister_device() during driver removal.\n\nThis ensures that the vb2 queue is properly disconnected before the\nvideo device is unregistered.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.683", "modified": "2026-10-23T12:18:25.683", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98915"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "vendors": [], "vendors_checked": "2026-10-23T16:19:49.513894+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-98914", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: cap ATOM command table nestin", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: cap ATOM command table nesting depth\n\nCap nesting at 32 levels with execute_depth and\nreturn -ELOOP when exceeded.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.587", "modified": "2026-10-23T12:18:25.587", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98914"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98913", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderx: fix PTP device ref leak in", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderx: fix PTP device ref leak in nicvf_probe()\n\ncavium_ptp_get() acquires a reference to the PTP PCI device\nthrough pci_get_device(). If any initialization step fails\nafter cavium_ptp_get(), the PTP PCI device reference is leaked.\nAdd a common error path to release the PTP reference before\nreturning from probe failures.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.473", "modified": "2026-10-23T12:18:25.473", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98913"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98912", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Reject reads that cannot ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Reject reads that cannot fit the next event\n\nsnd_seq_oss_read() checks whether the next queued OSS sequencer event\nfits in the remaining userspace buffer before removing it from the read\nqueue.\n\nThe check is inverted. It currently stops when the event is smaller than\nthe remaining buffer, so a normal 4-byte event is not copied for an\n8-byte read buffer. Conversel", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.350", "modified": "2026-10-23T12:18:25.350", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98912"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98911", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: fix the error path in dpaa2", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: fix the error path in dpaa2_switch_rx()\n\nIn case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd()\nfunction is called in order to free the FD. This is incorrect since the\ndpaa2_switch_free_fd() is intended to be used on Tx frame descriptors,\nmeaning that it expects in the software annotation area of the FD data\nto find a valid skb pointer on which to cal", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.240", "modified": "2026-10-23T12:18:25.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98911"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98910", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Unwind debug trap enable on c", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Unwind debug trap enable on copy_to_user failure\n\nIf kfd_dbg_trap_enable() fails while copying runtime_info to userspace,\nit had already activated the trap, set debug_trap_enabled, taken an extra\nprocess reference, and opened the debug event file. Return -EFAULT without\nunwinding that state, leaving inconsistent trap state and a refcount\nimbalance that could break la", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.130", "modified": "2026-10-23T12:18:25.130", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98910"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98909", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: unregister devlink on port", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: unregister devlink on port registration failure\n\ncpsw_probe() registers devlink before registering the CPSW ports.\n\nIf cpsw_register_ports() fails, the error path only unregisters the\nnotifiers and then releases the lower level resources. It does not undo\nthe successful cpsw_register_devlink() call, leaving the devlink instance\nand its parameters registered after ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:25.013", "modified": "2026-10-23T12:18:25.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98909"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98908", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: microchip: sparx5: clean up PSFP res", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: microchip: sparx5: clean up PSFP resources on flower setup failure\n\nsparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter and\nstream filter resources before adding VCAP actions. If a later step\nfails, the resources allocated earlier in the function are not unwound.\n\nAdd error paths to release the stream filter, flow meter and stream gate\nwhen setup fails afte", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.907", "modified": "2026-10-23T12:18:24.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98908"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98907", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: protect sb_write_pointer() with in", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: protect sb_write_pointer() with invalidate lock\n\nsb_write_pointer() reads the super block from the block device page cache\nusing read_cache_page_gfp(). This has the same race with BLKBSZSET as the\none fixed by commit 3f29d661e568 (\"btrfs: sync read disk super and set\nblock size\").\n\nTake the mapping invalidate lock around read_cache_page_gfp() to\nserialize the read against", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.793", "modified": "2026-10-23T12:18:24.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98907"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98906", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lan966x: restore RX state on reload ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lan966x: restore RX state on reload failure\n\nlan966x_fdma_reload() backs up rx->page_pool and rx->fdma before\nreallocating the RX resources for the new MTU. If the allocation fails,\nthe restore path puts these fields back before restarting RX.\n\nHowever, the reload path also updates rx->page_order and rx->max_mtu\nbefore calling lan966x_fdma_rx_alloc(). These fields are not r", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.680", "modified": "2026-10-23T12:18:24.680", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98906"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98905", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Properly acquire queue buffer", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Properly acquire queue buffers in CRIU restore\n\nWhen kfd_queue_acquire_buffers() was split off from\nset_queue_properties_from_user(), set_queue_properties_from_criu()\nwas missed. Thus, set_queue_properties_from_criu() is not\nfilling out the buffer fields of queue_properties, which\ncan come up when subsequent code expects them to be non-null.\n\nAdd the proper call to k", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.580", "modified": "2026-10-23T12:18:24.580", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98905"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98904", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: imx: Use devm_pm_runtime_enable(", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: imx: Use devm_pm_runtime_enable()\n\nsashiko complained about early usage of the device while probe isn't\ncompleted. This can be mitigated by delaying the pm_runtime_enable()\ninto the removal path instead doing it early. This ensures that in an\nerror case the device is removed (and imx_mu_shutdown()) before\npm_runtime_disable() so we don't have to do this manually.\n\nFor t", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.477", "modified": "2026-10-23T12:18:24.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98904"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98903", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: imx: Add a channel shutdown fiel", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: imx: Add a channel shutdown field\n\nsashiko complained about possible teardown problem. The scenario\n\n CPU 0                              CPU 1\n  imx_mu_isr()                   imx_mu_shutdown()\n                                   imx_mu_xcr_rmw(priv, IMX_MU_RCR, 0, IMX_MU_xCR_RIEn(priv->dcfg->type, cp->idx));\n    imx_mu_specific_rx()\n      imx_mu_xcr_rmw(priv, IMX_MU_RCR", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.370", "modified": "2026-10-23T12:18:24.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98903"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98902", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: let stripe batch bm_seq compari", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: let stripe batch bm_seq comparison wrap-safe\n\nOnce the 32-bit seq wraps, a newer bm_seq can look smaller\nthan old, so .. covert to wrap-safe calculate way.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.253", "modified": "2026-10-23T12:18:24.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98902"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98901", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix lease break and ack state hand", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix lease break and ack state handling\n\nDo not skip valid lease states containing WRITE_CACHING when breaking\nlevel-II/read leases for writes and truncates.\n\nHandle lease break acknowledgments according to the SMB2 rule that the\nacknowledged state must be a subset of the server's break target. Apply\nthe acknowledged state directly and keep the break pending on failed ACKs", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.143", "modified": "2026-10-23T12:18:24.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98901"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98900", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/gntalloc: validate grant count before", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/gntalloc: validate grant count before allocation\n\ngntalloc_ioctl_alloc() allocates the grant-id array before checking\nwhether the requested count fits within the global grant limit. Counts\nabove that limit cannot succeed, so reject them before the\nuser-controlled allocation reaches kcalloc().\n\nUse a subtraction-based check while holding gref_mutex so adding the\nrequested cou", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:24.020", "modified": "2026-10-23T12:18:24.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98900"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98899", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: mark the rcu locked are", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: mark the rcu locked areas properly\n\nWhen we bump the uref counter, there's no need to keep\nthe rcu lock because the referred hash table can't\ndisappear. Also, from the same reason in mtype_gc we\nneed the rcu lock and not a spinlock.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.897", "modified": "2026-10-23T12:18:23.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98899"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98898", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm/si: Don't schedule thermal wor", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm/si: Don't schedule thermal work when queue isn't initialized\n\nWhen DPM is turned off with the amdgpu.dpm=0 module parameter,\nthe thermal work queue isn't initialized so we shouldn't\nschedule any work on it.\n\n(cherry picked from commit bd018d36171a695952c6d391471c279c9e05c8b2)", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.777", "modified": "2026-10-23T12:18:23.777", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98898"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98897", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: don't hold ci->m_lock while waitin", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: don't hold ci->m_lock while waiting for a lease break ack\n\nWhen a cifs.ko client caches a read-handle (RH) lease via deferred close\nand a conflicting open arrives, ksmbd breaks the lease and waits for the\nacknowledgment in wait_for_break_ack() for up to OPLOCK_WAIT_TIME (35s).\n__smb_break_all_levII_oplock() runs that wait while holding ci->m_lock\nfor read.\n\ncifs.ko reacts", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.670", "modified": "2026-10-23T12:18:23.670", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98897"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98896", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Keep the domain reference wh", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Keep the domain reference while processing hotplug\n\nWe process hotplug events in a workqueue that may run after the domain\nhas been removed by tb_domain_remove(). For example if user unloads the\ndriver while at the same time plugging  a device router we may have\nscheduled tb_handle_hotplug() to run. Avoid possible UAF in this case by\ntaking the domain reference befo", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.547", "modified": "2026-10-23T12:18:23.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98896"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98895", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Handle destroying table th", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Handle destroying table that has a miss table\n\nIf a table has a miss table that was created by\n'mlx5hws_table_set_default_miss' API function, its miss_tbl\nkeeps the table that points to it in a list.\nIf such table is deleted, we need to also remove it from the\nmiss_tbl list, otherwise the node in miss_tbl list will contain\ngarbage.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.433", "modified": "2026-10-23T12:18:23.433", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98895"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98894", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/ras: reset CPER ring on corrupt e", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/ras: reset CPER ring on corrupt entry size\n\nWhen CPER ring overflow handling advances the read pointer, it trusts the\nparsed entry size from the current ring contents. Corrupt CPER data can\nproduce an entry size that does not advance rptr after dword conversion\nand pointer masking.\n\nIn that case the recovery loop keeps testing the same location while\nholding the CPER rin", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.327", "modified": "2026-10-23T12:18:23.327", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98894"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98893", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Validate SENSOR_UPDAT", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Validate SENSOR_UPDATE payload size\n\nSENSOR_UPDATE carries one or more sensor readings after the fixed\nnotification header. The parser derives the expected reading count\nfrom the sensor description, but it did not verify that the received\npayload contains those entries before parsing them.\n\nReject truncated update notifications before reading the variable\narr", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.207", "modified": "2026-10-23T12:18:23.207", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98893"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98892", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Validate BASE_ERROR_E", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Validate BASE_ERROR_EVENT payload size\n\nBASE_ERROR_EVENT carries a variable number of message reports,\nwith the count encoded in error_status. The notification parser used\nthat count without checking whether the received payload contained all\nreported entries.\n\nReject truncated payloads before copying the report array.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:23.090", "modified": "2026-10-23T12:18:23.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98892"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98891", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: validate deauth frame len", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: validate deauth frame length before reason access\n\nieee80211_rx_mgmt_deauth() reads the deauth reason code before checking\nthat the fixed field is actually present in the received frame.\n\nValidate the deauth frame length first and only then read the reason\ncode.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.967", "modified": "2026-10-23T12:18:22.967", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98891"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98890", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: reject short monitor TX f", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: reject short monitor TX frames\n\nIn monitor mode, lbs_hard_start_xmit() casts skb->data to a\nradiotap TX header, skips that header, and then copies the 802.11\ndestination address from offset 4 in the remaining frame.  The\ngeneric length check only rejects zero-length and oversized skbs, so\na short monitor frame can be read past the end of the skb data.\n\nRequire en", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.840", "modified": "2026-10-23T12:18:22.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98890"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98889", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: fix sched scan IE siz", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: fix sched scan IE sizing\n\nScheduled scan built the probe request before iwl_mvm_scan_fits(),\nso oversized IEs could be copied into the fixed preq buffer before\nlength validation. Move iwl_mvm_build_scan_probe() after the fits\ncheck.\n\nAlso advertise max_sched_scan_ie_len using iwl_mvm_max_scan_ie_len()\nso userspace limits account for driver-inserted DS/TPC byt", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.717", "modified": "2026-10-23T12:18:22.717", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98889"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98888", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: kprobes: Allow reentering kprobes ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: kprobes: Allow reentering kprobes while single-stepping\n\nA kprobe can be hit while another kprobe is in KPROBE_HIT_SS state. This\ncan happen when tracing or perf code runs from the debug exception path\nwhile the first kprobe is preparing or executing its out-of-line\nsingle-step instruction.\n\nCurrently arm64 treats a kprobe hit in KPROBE_HIT_SS as unrecoverable,\nthe same a", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.583", "modified": "2026-10-23T12:18:22.583", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98888"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98887", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: reject undersized H", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO\n\nhwsim_tx_info_frame_received_nl() casts the HWSIM_ATTR_TX_INFO payload\nto a struct hwsim_tx_rate * and unconditionally reads\nIEEE80211_TX_MAX_RATES entries (8 bytes) from it. The policy only bounds\nthe attribute from above (NLA_BINARY .len is a maximum) and the op sets\nGENL_DONT_VALIDATE_STRICT, so a short or zero-lengt", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.460", "modified": "2026-10-23T12:18:22.460", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98887"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98886", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: return errors from Oaktrail H", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: return errors from Oaktrail HDMI I2C reads\n\nxfer_read() waits for the HDMI I2C transaction to reach\nI2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from\nwait_for_completion_interruptible_timeout().  If the interrupt never\nadvances the transaction state, the loop can wait forever.\n\nReturn -ETIMEDOUT when the completion wait expires, propagate inte", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.340", "modified": "2026-10-23T12:18:22.340", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98886"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98885", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: return error early if file xattr can", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: return error early if file xattr cannot be changed\n\nDuring early boot, the filesystem is read-only and any changes\nto xattrs are not allowed. This fails in case of ext4 because\nchanging xattr starts an ext4 transaction which fails with the\nfollowing warning.\n\nWARNING: fs/ext4/ext4_jbd2.c:75 at ext4_journal_check_start+0x63/0xa0 [ext4], CPU#1: systemd-sysroot/561\nCPU: 1 UID:", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.213", "modified": "2026-10-23T12:18:22.213", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98885"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98884", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: Add validation for host-provid", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: Add validation for host-provided max_segs\n\nThe max_segs field is of type unsigned short, and if a host driver\nsets an excessively large value, it may be truncated to zero. This\ncan cause mmc_alloc_sg() to call kmalloc_objs() with a zero size\nallocation request, which leads to undefined behavior.\n\nUnder the SLUB allocator, kmalloc(0) returns a special pointer\n(ZERO_SIZ", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:22.073", "modified": "2026-10-23T12:18:22.073", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98884"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98883", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_port: recognize UPIO_AU\n\nMy ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_port: recognize UPIO_AU\n\nMy MIPS Alchemy systems generate the following warning during\nprobe of the 8250 driver:\n\nWARNING: drivers/tty/serial/8250/8250_port.c:462 at set_io_from_upio+0xfc/0x124, CPU#0: swapper/0/1\nUnsupported UART type 4\n[...]\n[<80521d40>] set_io_from_upio+0xfc/0x124\n[<80521dfc>] serial8250_set_defaults+0x94/0xe0\n[<80520fb4>] serial8250_register_825", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.970", "modified": "2026-10-23T12:18:21.970", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98883"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98882", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: chips-media: wave5: Add range chec", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: chips-media: wave5: Add range checks for dec_output_info\n\nIf the driver's dec_output_info contains invalid data the driver can\nwrite in invalid memory. Add a range check for that.\n\nThis fixes this smatch error:\ndrivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.823", "modified": "2026-10-23T12:18:21.823", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98882"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98881", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: remove stale rcu_barrier() i", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: remove stale rcu_barrier() in br_multicast_dev_del()\n\nThis rcu_barrier() came from a time call_rcu() calls were used in\nnet/bridge/br_multicast.c.\n\nNow kfree_rcu() is there, we can remove this problematic rcu_barrier()\nwhich causes extreme RTNL pressure in many syzbot reports.\n\nINFO: task syz-executor:77945 is blocked on a mutex likely owned by task kworker/u1024:5:", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.670", "modified": "2026-10-23T12:18:21.670", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98881"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98880", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: handle set_blocksize failures\n\nntf", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: handle set_blocksize failures\n\nntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well.\nWithout this, mounting we will hit the\n\n        BUG_ON(offset >= folio_size(folio));\n\nin folio_set_bh on the first __bread_gfp call.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.560", "modified": "2026-10-23T12:18:21.560", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98880"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98879", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: handle set_blocksize failures\n\niso", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: handle set_blocksize failures\n\nisofs uses buffer_heads, which don't handle block size > PAGE_SIZE well.\nWithout this, mounting we will hit the\n\n        BUG_ON(offset >= folio_size(folio));\n\nin folio_set_bh on the first __bread_gfp call.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.440", "modified": "2026-10-23T12:18:21.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98879"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98878", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v5: Immediately exec priority", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v5: Immediately exec priority drop following activate\n\nWith GICv5 an interrupt of equal or lower priority cannot be signalled\nuntil there has been a priority drop. This is done via the GIC CDEOI\nsystem instruction. Once this has been executed, the hardware is able\nto signal the next interrupt if there is one.\n\nAs all interrupts are programmed to have the same priorit", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.330", "modified": "2026-10-23T12:18:21.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98878"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98877", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v4: Don't advertise VLPIs if ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v4: Don't advertise VLPIs if no ITS is probed\n\nWhen accidentally setting \u201ckvm-arm.vgic_v4_enable=1\u201d on a system that has\nno MSI controller device tree node and GICv4, it results a panic as\n\u201cgic_domain\u201d is NULL and the kernel attempts to access it.\n\n    Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n    Mem abort info:\n      ESR =", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.203", "modified": "2026-10-23T12:18:21.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98877"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98876", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nhost1x: bus: Fix missing ops null check i", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nhost1x: bus: Fix missing ops null check in error teardown\n\nIn host1x_device_init(), the error teardown paths do not check\nclient->ops before dereferencing it, unlike the forward init paths\nwhich correctly guard with 'client->ops &&'. This can result in a\nNULL pointer dereference if client->ops is NULL.\n\nFix by adding the missing client->ops check in both the teardown\nand teardow", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:21.090", "modified": "2026-10-23T12:18:21.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98876"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98875", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gsp: add SEC2 to GA100 chip t", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gsp: add SEC2 to GA100 chip table\n\nThe booter-load and booter-unload firmware run on the SEC2 falcon.\nDuring tu102_gsp_oneinit(), the booter constructor needs device->sec2\nto access the SEC2 falcon.\n\nWithout the .sec2 entry, device->sec2 is NULL and this dereference\ncrashes during GSP-RM boot.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.987", "modified": "2026-10-23T12:18:20.987", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98875"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98874", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mld: don't WARN on WoWLAN ", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect\n\nClearly, from a user perspective, it must be valid to configure\nWoWLAN and then suspend while not connected to a network. Since\nmac80211 doesn't distinguish these cases and simply calls the\ndriver to suspend whenever WoWLAN is configured, the driver has\nto cleanly handle the case where it's called for WoWLAN, it's\nn", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.880", "modified": "2026-10-23T12:18:20.880", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98874"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98873", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_expect: zero at a", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_expect: zero at allocation time\n\nThere are occasional LLM hints wrt. leaking uninitialized data to\nuserspace via ctnetlink.  Just zero at allocation time,\nexpectations are not frequently used these days.\n\nIntentionally keeps _init as-is because we could theoretically\nsupport re-init, so add the missing exp->dir there.", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.753", "modified": "2026-10-23T12:18:20.753", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98873"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98872", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nfreevxfs: don't BUG() on unknown typed-ex", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfreevxfs: don't BUG() on unknown typed-extent type\n\nvxfs_bmap_typed() handles four typed-extent types and calls BUG() in\nits default case, so an on-disk typed extent with any other type value\ncrashes the kernel. It is reachable from ioctl(FIBMAP) on a regular\nfile:\n\n  kernel BUG at fs/freevxfs/vxfs_bmap.c:230!\n  RIP: vxfs_bmap_typed fs/freevxfs/vxfs_bmap.c:230 [inline]\n       vx", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.623", "modified": "2026-10-23T12:18:20.623", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98872"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98871", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SE", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SEV init failure path\n\n__sev_platform_init_handle_init_ex_path() calls\nrmp_mark_pages_firmware() with locked=false while the parent\nfunction of init_ex_path already acquired the sev_cmd_mutex.\nIn the case of an RMPUPDATE failure for any page after the first, the cleanup\npath would invoke reclaim pages which would result in a deadlock in\nsev", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.510", "modified": "2026-10-23T12:18:20.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98871"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-98870", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: remove stale channels from all ses", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: remove stale channels from all sessions on teardown\n\nksmbd_sessions_deregister() removes a connection's channels from other\nsessions' channel lists only while conn->binding is still set:\n\n\tif (conn->binding) {\n\t\thash_for_each_safe(sessions_table, ...)\n\t\t\tksmbd_chann_del(conn, sess);\n\t}\n\nconn->binding is a transient flag: it is cleared once a binding\nSESSION_SETUP complete", "cvss": "n/a", "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:20.397", "modified": "2026-10-23T12:18:20.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98870"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "pinned": false}, {"id": "CVE-2026-94502", "publisher": "Silicon Labs", "title": "In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write ", "summary": "In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:51.640", "modified": "2026-10-23T12:18:19.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94502"}], "cwe": ["CWE-121"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14288, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-92559", "publisher": "IBM Corporation", "title": "IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive informa", "summary": "IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00633, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:21:07.190", "modified": "2026-10-23T12:18:18.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92559"}], "cwe": ["CWE-1327"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49723, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-92209", "publisher": "Zero Day Initiative", "title": "NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability", "summary": "NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the authentication mechanism controlling access to the Redis database. The issue results from us", "cvss": 7.8, "sev": "HIGH", "epss": 0.00243, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:31.597", "modified": "2026-10-23T12:18:18.777", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92209"}], "cwe": ["CWE-331"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14582, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-92208", "publisher": "Zero Day Initiative", "title": "NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability", "summary": "NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of mDNS resource records. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-", "cvss": 8.8, "sev": "HIGH", "epss": 0.00584, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:31.427", "modified": "2026-10-23T12:18:18.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92208"}], "cwe": ["CWE-122"], "vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.47208, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-92183", "publisher": "Zero Day Initiative", "title": "GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability", "summary": "GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of APNG files. The issue results from the lack of proper validation of the length", "cvss": 7.8, "sev": "HIGH", "epss": 0.00363, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:30.443", "modified": "2026-10-23T12:18:18.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92183"}], "cwe": ["CWE-121"], "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.28963, "vendors": [{"os": "Debian 12", "pkg": "gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "gimp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "gimp:2.8/gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "gimp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-91403", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00392, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T22:16:50.243", "modified": "2026-10-23T12:18:17.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91403"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.32169, "vendors": [{"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.8.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "java-1.8.0-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "java-17-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "HKCERT", "group": "gov", "title": "Oracle Java Security Restriction Bypass Vulnerability", "url": "https://www.hkcert.org/security-bulletin/oracle-java-security-restriction-bypass-vulnerability_20261022", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-91299", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orc", "summary": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).  Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator.  While the vulnerability is in JD Edwards EnterpriseOne Orchestrator, attacks may significantly impact additiona", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00393, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:31.557", "modified": "2026-10-23T12:18:17.050", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91299"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32318, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-89410", "publisher": "Silicon Labs", "title": "In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensiti", "summary": "In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00183, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:51.333", "modified": "2026-10-23T12:18:16.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89410"}], "cwe": ["CWE-1285"], "vector": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07507, "pinned": false}, {"id": "CVE-2026-87351", "publisher": "Oracle", "title": "Vulnerability in Oracle GoldenGate (component: Admin Server Executable)", "summary": "Vulnerability in Oracle GoldenGate (component: Admin Server Executable).  Supported versions that are affected are 19.1.0.0.0-19.32.0.0,   21.3-21.23 and   23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.  Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availa", "cvss": 8.8, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:20:12.817", "modified": "2026-10-23T12:18:16.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87351"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.37855, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-85080", "publisher": "Silicon Labs", "title": "In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write le", "summary": "In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was observed. These messages must come from a device that has already joined the network. Only devices supporting the Group Cluster are impacted.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00354, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:51.013", "modified": "2026-10-23T12:18:16.633", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85080"}], "cwe": ["CWE-121"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27896, "pinned": false}, {"id": "CVE-2026-82891", "publisher": "IBM Corporation", "title": "IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due ", "summary": "IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00453, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:52.050", "modified": "2026-10-23T12:18:16.493", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82891"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38369, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-76587", "publisher": "IBM Corporation", "title": "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u00a0bounds ", "summary": "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u00a0bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00596, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:19:50.103", "modified": "2026-10-23T12:18:16.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76587"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.47816, "vendors": [], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-76291", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the sch", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the scheduled search workflow. The user could then run risky Search Processing Language (SPL) commands that disclose or alter Splunk Enterprise data or disrupt Splunk Enterprise availability.\nThe vulnerability is possible because the Splunk Enterprise search scheduler does no", "cvss": 8.8, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T23:17:26.943", "modified": "2026-10-23T12:18:16.280", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76291"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.24226, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-66282", "publisher": "Silicon Labs", "title": "In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function ", "summary": "In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:44.133", "modified": "2026-10-23T12:18:15.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66282"}], "cwe": ["CWE-674"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12555, "pinned": false}, {"id": "CVE-2026-66281", "publisher": "Silicon Labs", "title": "In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable ", "summary": "In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These messages must come from a device that has already joined the network. Only devices supporting manufacturer-specific clusters are impacted.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00219, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:43.997", "modified": "2026-10-23T12:18:15.780", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66281"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11752, "pinned": false}, {"id": "CVE-2026-66279", "publisher": "Silicon Labs", "title": "In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may ", "summary": "In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00245, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T14:17:43.840", "modified": "2026-10-23T12:18:15.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66279"}], "cwe": ["CWE-940"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14898, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-56840", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled tool argument can inject JavaScript into that page. When a human opens the approval URL to inspect the risky tool request, the script runs in the dashboard origin and can POST to the same request's /approve/{request_id}/decide end", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:15.510", "modified": "2026-10-23T12:18:15.627", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56840"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-63v4-w882-g4x2", "note": "vulnerable: >= 4.5.2, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56838", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The normal recipe.run() path enforces this with _check_tool_policy(). The streaming path, recipe.run_stream(), loads the same recipe, checks dependencies, and then calls _execute_recipe() without running the dangerous-tool policy chec", "cvss": 7.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:15.357", "modified": "2026-10-23T12:18:15.473", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56838"}], "cwe": ["CWE-78", "CWE-693", "CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-v847-hxxw-3pxg", "note": "vulnerable: >= 4.5.87, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56836", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe serve dispatches to the deprecated Typer command in src/praisonai/praisonai/cli/commands/recipe.py. That Typer command can start the Recipe HTTP server on a non-localhost interface with no authentication. It print", "cvss": 8.2, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:15.050", "modified": "2026-10-23T12:18:15.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56836"}], "cwe": ["CWE-287", "CWE-306", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-5qw8-f2g9-ff29", "note": "vulnerable: >= 4.5.112, <= 4.6.58"}], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56835", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app_mention event handler. A Slack workspace user who can mention the bot in a channel where the Slack app is present can trigger the configured PraisonAI agent even when: the send", "cvss": 8.3, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:14.897", "modified": "2026-10-23T12:18:15.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56835"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-qvpf-j64c-jmhr", "note": "vulnerable: >= 3.11.0, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56834", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_tools(). The implemented artifact tools do not enforce that the supplied artifact_path is an artifact created by the configured store or that it lives under the configured artifact base directory. Instead, artifact_head, artifact_tail, artifact_grep, and artifact_chunk wr", "cvss": 7.5, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:14.750", "modified": "2026-10-23T12:18:14.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56834"}], "cwe": ["CWE-22", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-j7qx-p75m-wp7g", "note": "vulnerable: >= 3.8.1, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-56832", "publisher": "GitHub, Inc.", "title": "PraisonAI is a multi-agent teams system", "summary": "PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as yes. As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending yes after the approval message appears. the sam", "cvss": 8.8, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:14.437", "modified": "2026-10-23T12:18:14.560", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56832"}], "cwe": ["CWE-345", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "vendors": [{"os": "Python (pip)", "pkg": "praisonai", "status": "fixed", "fixed": "4.6.59", "cmd": "pip install --upgrade \"praisonai>=4.6.59\"\npip show praisonai", "url": "https://github.com/advisories/GHSA-8579-rgg5-ph2m", "note": "vulnerable: >= 4.5.2, <= 4.6.58"}], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": true, "pinned": false}, {"id": "CVE-2026-24330", "publisher": "Red Hat, Inc.", "title": "A flaw was found in wildfly-core", "summary": "A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the malicious archive. This could lead to further exploitation, such as arbitrary file read vulnerabilities.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00517, "kev": false, "added": "2026-08-11", "pub": "2026-08-11T03:17:36.463", "modified": "2026-10-23T12:18:14.093", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24330"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.4315, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15723", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T01:16:59.477", "modified": "2026-10-23T12:18:13.843", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15723"}], "cwe": ["CWE-90"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.25586, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false, "mentions": [{"src": "NCSC Netherlands", "group": "gov", "title": "NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-12664", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create work items, bypassing the token's restrictions, due to insufficient scope enforcement on a GraphQL field.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00249, "kev": false, "added": "2026-10-22", "pub": "2026-10-22T01:16:59.070", "modified": "2026-10-23T12:18:13.713", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12664"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15349, "pinned": false}, {"id": "CVE-2026-113461", "publisher": "Checkmk GmbH", "title": "Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client libr", "summary": "Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00092, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:59.903", "modified": "2026-10-23T12:18:11.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113461"}], "cwe": ["CWE-426", "CWE-829"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00474, "pinned": false}, {"id": "CVE-2026-112904", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and concatenate it directly to DIR_BACKUP without calling sanitizeFileName(). This allows an authenticated administrator to read arbitrary files on the server (via nextRestore) and write SQL dump content to arbitrary ", "cvss": 8.7, "sev": "HIGH", "epss": null, "kev": false, "added": "2026-10-23", "pub": "2026-10-23T12:18:11.050", "modified": "2026-10-23T12:18:11.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112904"}], "cwe": ["CWE-26"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-111815", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certific", "summary": "Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00172, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:23.330", "modified": "2026-10-23T12:18:09.333", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111815"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06245, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-111814", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated w", "summary": "Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present a different one.\n\n\n\nThis issue affects Apache Traffic Server: from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00172, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:23.190", "modified": "2026-10-23T12:18:09.207", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111814"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06245, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-111813", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert ", "summary": "Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.1 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00347, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:59.167", "modified": "2026-10-23T12:18:09.080", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111813"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 55, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27034, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:32:30.945377+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-111812", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request h", "summary": "Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00262, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:23.060", "modified": "2026-10-23T12:18:08.957", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111812"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.17053, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-111811", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletio", "summary": "Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00259, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T20:17:22.920", "modified": "2026-10-23T12:18:08.833", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111811"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.16599, "vendors": [{"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-111184", "publisher": "Zero Day Initiative", "title": "NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability", "summary": "NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the NoMachine Device Service. The issue results from incorrect permissions on a nam", "cvss": 7.8, "sev": "HIGH", "epss": 0.00142, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:23.620", "modified": "2026-10-23T12:18:08.437", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111184"}], "cwe": ["CWE-732"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03231, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-111183", "publisher": "Zero Day Initiative", "title": "GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability", "summary": "GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of proper validat", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00546, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T18:17:23.477", "modified": "2026-10-23T12:18:08.327", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111183"}], "cwe": ["CWE-122"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4504, "vendors": [{"os": "Fedora 46", "pkg": "python-openslide", "status": "fixed", "fixed": "1.4.7-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-336bea884e", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-336bea884e", "note": "FEDORA-2026-336bea884e"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "gst-plugins-good1.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "gst-plugins-good1.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T04:33:59.154760+00:00", "vendor_fixed": true, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-105949", "publisher": "Red Hat, Inc.", "title": "Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a ", "summary": "Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethods(true). The servlet routes requests using Path.of(pathInfo).getFileName(), which strips all leading segments and trailing slashes. Requests like POST /kafkacruisecontrol/x/rebalance bypass authentication entirely but still dispatch to admin endpoints. All 15 admi", "cvss": 8.8, "sev": "HIGH", "epss": 0.00296, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T12:17:28.847", "modified": "2026-10-23T12:18:06.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105949"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.21122, "vendors": [], "vendors_checked": "2026-10-23T15:58:45.374202+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-101500", "publisher": "Oracle", "title": "Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Manageme", "summary": "Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions).  Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management OPatchAuto executes to compromise Oracle Global Lifecycle Management OPatchAuto.  Successful atta", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00163, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:17:59.210", "modified": "2026-10-23T12:18:05.990", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101500"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05274, "pinned": false}, {"id": "CVE-2026-101482", "publisher": "Oracle", "title": "Vulnerability in Oracle Secure Backup (component: Device Management and Support)", "summary": "Vulnerability in Oracle Secure Backup (component: Device Management and Support).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 7.8 (Confidentiali", "cvss": 7.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:17:57.283", "modified": "2026-10-23T12:18:05.860", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101482"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05165, "vendors": [], "vendors_checked": "2026-10-23T16:03:38.207858+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-101481", "publisher": "Oracle", "title": "Vulnerability in Oracle Secure Backup (component: Device Management and Support)", "summary": "Vulnerability in Oracle Secure Backup (component: Device Management and Support).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup.  While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change).  Succe", "cvss": 8.8, "sev": "HIGH", "epss": 0.00162, "kev": false, "added": "2026-10-20", "pub": "2026-10-20T22:17:57.170", "modified": "2026-10-23T12:18:05.717", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101481"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05165, "vendors": [], "vendors_checked": "2026-10-23T16:02:19.453775+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-55702", "publisher": "Apache Software Foundation", "title": "When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Tr", "summary": "When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left on the client connection as the next request. An attacker behind a front-end proxy that shares connections to Traffic Server can use this to smuggle requests past the front end and desynchronize responses for other users.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00253, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:48.120", "modified": "2026-10-23T12:18:05.570", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-55702"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.15933, "vendors": [{"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:56:15.313695+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2025-31699", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on ", "summary": "Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including when the client used Expect: 100-continue. The origin then reads a later request on that connection as leftover body data, which lets an attacker smuggle requests past ATS access controls, disrupt other users' requests, or poison the cache.\n\n\n\nThis issue affects Apache Tra", "cvss": 8.9, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-10-21", "pub": "2026-10-21T19:16:47.390", "modified": "2026-10-23T12:18:04.473", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-31699"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.17513, "vendors": [{"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T15:53:30.516453+00:00", "vendor_fixed": false, "pinned": false}, {"id": "CVE-2026-96293", "publisher": "WatchGuard Technologies, Inc.", "title": "A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encrypt", "summary": "A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00051, "kev": false, "added": "2026-10-22", "modified": "2026-10-23T09:17:08.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96293"}], "cwe": ["CWE-312", "CWE-532", "CWE-732"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 1e-05, "pinned": false}, {"id": "CVE-2026-74534", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: fix refcounting of iso_co", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: fix refcounting of iso_conn\n\niso_conn_del() and iso_chan_del() have a race that results to double-put\nof iso_conn:\n\n    [Task hdev->workqueue]         [Task 2]\n    iso_conn_del                   iso_chan_del\n      iso_conn_hold_unless_zero      iso_conn_lock\n      iso_conn_lock                  conn->sk = NULL\n                                     iso_conn_unlock\n", "cvss": 8.8, "sev": "HIGH", "epss": 0.00241, "kev": false, "added": "2026-08-15", "modified": "2026-10-23T09:17:07.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74534"}], "cwe": [], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.14464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65529", "publisher": "Patchstack", "title": "Missing Authorization vulnerability in Iqonic Designs Graphina \u2013 Charts and Graphs For Elementor graphina-elem", "summary": "Missing Authorization vulnerability in Iqonic Designs Graphina \u2013 Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Graphina \u2013 Charts and Graphs For Elementor: from n/a through 3.1.12.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00313, "kev": false, "added": "2026-07-23", "modified": "2026-10-23T09:17:07.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65529"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22964, "pinned": false}, {"id": "CVE-2026-39769", "publisher": "Patchstack", "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina \u2013 Charts and", "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina \u2013 Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Password Recovery Exploitation.This issue affects Graphina \u2013 Charts and Graphs For Elementor: from n/a through 3.1.12.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00515, "kev": false, "added": "2026-10-06", "modified": "2026-10-23T09:17:07.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-39769"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42992, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-31514", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: set fileio bio failed in short rea", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: set fileio bio failed in short read case\n\nFor file-backed mount, IO requests are handled by vfs_iocb_iter_read().\nHowever, it can be interrupted by SIGKILL, returning the number of\nbytes actually copied. Unused folios in bio are unexpectedly marked\nas uptodate.\n\n  vfs_read\n    filemap_read\n      filemap_get_pages\n        filemap_readahead\n          erofs_fileio_readahead\n", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-04-22", "modified": "2026-10-23T09:17:07.097", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.12.75 and < 6.12.80", ">= 6.18.14 and < 6.18.21", ">= 6.19.4 and < 6.19.11"], "fixed": "6.12.80, 6.18.21, 6.19.11", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-31514"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5a5f23ef5431639db1ac3a0b274aef3a84cc413c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5cf3972c8221abdb1b464a14ccf8103d840b9085"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d1ba7d6b3cd1757b108d7b6856c92ae661d6c323"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/eade54040384f54b7fb330e4b0975c5734850b3c"}], "cwe": [], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.05032, "pinned": false}, {"id": "CVE-2026-93017", "publisher": "Red Hat, Inc.", "title": "The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the", "summary": "The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction \u2014 therefore, access to every secret in every namespace in the cluster.\n\nRef: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yaml#L368-L373\n```\n- apiGroups:\n  - \"\"\n  resources:\n  - secrets\n  verbs:\n  - get\n ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-10-08", "modified": "2026-10-23T06:17:07.863", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93017"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17236, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85518", "publisher": "Red Hat, Inc.", "title": "A flaw was found in OpenSCAP", "summary": "A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00292, "kev": false, "added": "2026-10-21", "modified": "2026-10-23T06:17:07.737", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85518"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2067, "pinned": false}, {"id": "CVE-2026-83589", "publisher": "Red Hat, Inc.", "title": "A flaw was found in oauth-proxy", "summary": "A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-01", "modified": "2026-10-23T06:17:07.570", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83589"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19699, "pinned": false}, {"id": "CVE-2026-75888", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the OpenShift console", "summary": "A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-10-12", "modified": "2026-10-23T06:17:07.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75888"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18791, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75887", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the OpenShift console", "summary": "A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensitive `*.json` files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00529, "kev": false, "added": "2026-09-23", "modified": "2026-10-23T06:17:07.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75887"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43932, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75885", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the OpenShift console", "summary": "A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can caus", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00733, "kev": false, "added": "2026-09-18", "modified": "2026-10-23T06:17:07.057", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75885"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53874, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-49329", "publisher": "Red Hat, Inc.", "title": "A flaw was found in openshift/oauth-server", "summary": "A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-' characters but the internal BCP 47 scanner aliases '_' to '-' after the guard check. An unauthenticated attacker can send a crafted Accept-Language header", "cvss": 7.5, "sev": "HIGH", "epss": 0.00705, "kev": false, "added": "2026-09-01", "modified": "2026-10-23T06:17:06.790", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49329"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52816, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-108334", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator", "summary": "A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can provide a crafted path, header, or query match value that causes the predicate to skip those che", "cvss": 7.4, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-10-15", "modified": "2026-10-23T05:17:13.103", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108334"}], "cwe": ["CWE-917"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26663, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96376", "publisher": "Drupal.org", "title": "Improper Neutralization of Special Elements used in an OS Command (\"OS Command Injection\") vulnerability in Dr", "summary": "Improper Neutralization of Special Elements used in an OS Command (\"OS Command Injection\") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00573, "kev": false, "added": "2026-10-22", "modified": "2026-10-23T04:18:24.073", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96376"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.46612, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96355", "publisher": "Drupal.org", "title": "Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows C", "summary": "Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00427, "kev": false, "added": "2026-10-22", "modified": "2026-10-23T04:18:23.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96355"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.35905, "pinned": false, "pocs": [], "ssvc": null, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-91478", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Str", "summary": "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise SCM Strategic Sourcing. CVSS 3", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:19.890", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91478"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3182, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76298", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the \"admin\" or \"power\" Splunk ", "summary": "In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the \"admin\" or \"power\" Splunk roles could derive the PostgreSQL sidecar database superuser password and run arbitrary operating system commands as the user account running Splunk Enterprise on search head cluster members.\nThe vulnerability is possible because the PostgreSQL sidecar service derives a privileged database password from the search head cluster identifier ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-10-21", "modified": "2026-10-23T04:18:17.853", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76298"}], "cwe": ["CWE-321"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16346, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76293", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edi", "summary": "In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by opening the affected configuration in the Splunk Web Manager page. \nThe vulnerability is possible because Splunk Web evaluates user-controlled expressions from Manager XML without sufficiently r", "cvss": 7.2, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-21", "modified": "2026-10-23T04:18:17.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76293"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115253", "publisher": "WatchGuard Technologies, Inc.", "title": "An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authe", "summary": "An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00096, "kev": false, "added": "2026-10-22", "modified": "2026-10-23T04:18:14.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115253"}], "cwe": ["CWE-276", "CWE-732"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.00661, "pinned": false}, {"id": "CVE-2026-101431", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise Pe", "cvss": 8.7, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:12.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101431"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24156, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101420", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change).  Successful attack", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:12.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101420"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.24472, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101416", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can r", "cvss": 7.5, "sev": "HIGH", "epss": 0.002, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:12.017", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101416"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.09291, "pinned": false}, {"id": "CVE-2026-101411", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Inter", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confide", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:11.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101411"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27175, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101410", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Inter", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Confiden", "cvss": 7.5, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:11.650", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101410"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26897, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101390", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Inter", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confide", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T04:18:07.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101390"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27176, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91398", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with netwo", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.787", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91398"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1312, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91397", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon ", "cvss": 3.6, "sev": "LOW", "epss": 0.00094, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91397"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00565, "pinned": false}, {"id": "CVE-2026-91394", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking)", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91394"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.252, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113727", "publisher": "GitHub, Inc.", "title": "OpenChoreo is a developer platform for Kubernetes", "summary": "OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openchoreo.dev/project and openchoreo.dev/component labels in the submitted body while selecting the stored WorkflowRun by the URL path. An authenticated caller with workflowrun:update for one project or component in the same namespace can name another run in the path, submit o", "cvss": 7.4, "sev": "HIGH", "epss": 0.00434, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113727"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.36671, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/openchoreo/openchoreo", "status": "fixed", "fixed": "1.0.6", "cmd": "go get github.com/openchoreo/openchoreo@v1.0.6\ngo list -m github.com/openchoreo/openchoreo", "url": "https://github.com/advisories/GHSA-46r4-q7wv-32fc", "note": "vulnerable: >= 1.0.0, < 1.0.6"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101404", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Siebel A", "cvss": 3.9, "sev": "LOW", "epss": 0.00112, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101404"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0133, "pinned": false}, {"id": "CVE-2026-101403", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized acce", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:31.100", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101403"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12768, "pinned": false}, {"id": "CVE-2026-101402", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CV", "cvss": 3.7, "sev": "LOW", "epss": 0.00307, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.970", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101402"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22348, "pinned": false}, {"id": "CVE-2026-101401", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partia", "cvss": 2.9, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.847", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101401"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02339, "pinned": false}, {"id": "CVE-2026-101400", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partia", "cvss": 2.9, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101400"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02339, "pinned": false}, {"id": "CVE-2026-101398", "publisher": "Oracle", "title": "Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Capacity.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Capacity accessible data as well as", "cvss": 7.6, "sev": "HIGH", "epss": 0.00297, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.503", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101398"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2121, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101397", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 2.2 (C", "cvss": 2.2, "sev": "LOW", "epss": 0.00247, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101397"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15097, "pinned": false}, {"id": "CVE-2016-20100", "publisher": "VulnCheck", "title": "Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allow", "summary": "Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:30.053", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-20100"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34415, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2014-125134", "publisher": "VulnCheck", "title": "ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated a", "summary": "ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitive files like wp-config.php or /etc/passwd, exposing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023", "cvss": 7.5, "sev": "HIGH", "epss": 0.00638, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:29.903", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2014-125134"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.49973, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2012-20004", "publisher": "VulnCheck", "title": "K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows u", "summary": "K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to /wp-content/plugins/knews/wysiwyg/fontpicker/index.php with malicious 'ff' values echoed into option tags to execute script and steal session cookies. Exploitation evidence was first observed by the Shad", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00215, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T03:16:29.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2012-20004"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11322, "pinned": false}, {"id": "CVE-2026-113722", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer than 127 bytes, distlib emits a /bin/sh wrapper whose double-quoted interpreter path still expands command substitutions and backticks. An attacker who in", "cvss": 7.8, "sev": "HIGH", "epss": 0.00167, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:57.087", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113722"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05685, "pinned": false}, {"id": "CVE-2026-113715", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include a line-boundary character such as U+2028 to inject keys including home and include-system-site-packages, causing path data to change configuration str", "cvss": 2.0, "sev": "LOW", "epss": 0.00142, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.967", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113715"}], "cwe": ["CWE-93"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03226, "pinned": false}, {"id": "CVE-2026-113712", "publisher": "GitHub, Inc.", "title": "Cachet is an open-source status page system", "summary": "Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover. Commits 57b44a8bac0b250b0d5751e93e0349070d14606e and 23adbb88ffa819f92be4a905ff1d812670d", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.837", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113712"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2806, "pinned": false}, {"id": "CVE-2026-113683", "publisher": "VulnCheck", "title": "VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability ", "summary": "VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs when a user holding mod/vpl:similarity opens it, performing actions or disclosing data under their session.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00293, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113683"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20826, "pinned": false}, {"id": "CVE-2026-113678", "publisher": "VulnCheck", "title": "Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that all", "summary": "Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00446, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113678"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.37809, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113669", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or cross-locale session migration places a single-use bearer session token in a redirect URL. A client that obtains and redeems a still-valid, unconsumed token before its first use can adopt the associated session, including through the passport-bridge cross-locale flow. This issue is fixed in ApostropheCMS ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00336, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.453", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113669"}], "cwe": ["CWE-598"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25811, "pinned": false}, {"id": "CVE-2026-113664", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path substring guard. Opening that directory as a write stream emits an unhandled filesystem error that can terminate the Node.js process; the source establishes this static primitive but not an end-to-end ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00414, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.330", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113664"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.34607, "pinned": false}, {"id": "CVE-2026-113658", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart upload to the system temporary directory before checking its extension and does not remove the staged file when that validation rejects it. Repeated large rejected uploads, using the normal public CSRF cookie, can persistently consume temporary-disk capacity and may disrupt ApostropheCMS and oth", "cvss": 7.5, "sev": "HIGH", "epss": 0.00538, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.200", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113658"}], "cwe": ["CWE-400", "CWE-459", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44539, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "apostrophe", "status": "fixed", "fixed": "4.33.0", "cmd": "npm install apostrophe@\">=4.33.0\"\nnpm ls apostrophe", "url": "https://github.com/advisories/GHSA-qhcq-9pm2-c9w9", "note": "vulnerable: < 4.33.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113649", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled content type but lacks its stronger publication role can cause import write helpers to create, replace, or remove published variants without the normal publish permission and lifecycle checks. This issue is fixed in import-export 3.7.1 and ApostropheCMS 4.34.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:56.080", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113649"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11935, "pinned": false}, {"id": "CVE-2026-113648", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export in @apostrophecms/import-export lacks authentication and authorization checks. Any client\u2014including unauthenticated anonymous users who have obtained the standard CSRF cookie from visiting the site\u2014can directly invoke this route and trigger the underlying self.cleanE", "cvss": 3.1, "sev": "LOW", "epss": 0.00328, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.923", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113648"}], "cwe": ["CWE-306", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24669, "pinned": false}, {"id": "CVE-2026-113611", "publisher": "VulnCheck", "title": "Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators t", "summary": "Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving document contents because UserDeletedProcessor never disables their WebhookSubscription rows. Former admins who registered webhooks before deletion continue receiving full document bodies, including Markdown and Yjs data, via DeliverWebhookTask for every matching workspace event.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00366, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.773", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113611"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29311, "pinned": false}, {"id": "CVE-2026-113606", "publisher": "VulnCheck", "title": "Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated user", "summary": "Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/<victimUserId>, list files, and run pipelines to read, modify, or destroy victims' files.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00298, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.600", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113606"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.2131, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113601", "publisher": "VulnCheck", "title": "Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and G", "summary": "Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity API methods that allows authenticated users to view all users' activity records. Low-privileged attackers can enumerate sequential activity IDs to obtain creator IDs, timestamps, and memo-comment references, including activity on other users' private memos.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.450", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113601"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15535, "pinned": false}, {"id": "CVE-2026-113596", "publisher": "VulnCheck", "title": "Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to rea", "summary": "Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.", "cvss": 3.1, "sev": "LOW", "epss": 0.00287, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113596"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20209, "pinned": false}, {"id": "CVE-2026-113507", "publisher": "VulDB", "title": "A vulnerability was found in aaPanel up to 8.25.0", "summary": "A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: \"The reported X-Real-Ip IP-bypass vulnerability has already been fixed\".", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00386, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.160", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113507"}], "cwe": ["CWE-266", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3153, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112954", "publisher": "GitHub, Inc.", "title": "ApostropheCMS is an open-source Node.js content management system", "summary": "ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the projection, so the issue permits targeted inference about hidden values rather than an unrestricted field dump. This issue is fixed in version 4.34.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:55.033", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112954"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22333, "pinned": false}, {"id": "CVE-2026-112949", "publisher": "GitHub, Inc.", "title": "Vitest is a Vite-native testing framework for JavaScript and TypeScript projects", "summary": "Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated non-browser WebSocket client that can reach a development server using interceptorPlugin can register a manual mock whose attacker-controlled url createManualModuleSource inserts unescaped into generated module source. When the developer browser loads the affected module, attacker-controlled JavaScript exe", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:54.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112949"}], "cwe": ["CWE-94", "CWE-116", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14472, "pinned": false}, {"id": "CVE-2026-111756", "publisher": "GitHub, Inc.", "title": "follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects", "summary": "follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers (Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders) before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's headers container wit", "cvss": 8.2, "sev": "HIGH", "epss": 0.00365, "kev": false, "added": "2026-10-20", "modified": "2026-10-23T02:16:54.423", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111756"}], "cwe": ["CWE-200", "CWE-212"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2922, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "follow-redirects", "status": "fixed", "fixed": "1.16.1", "cmd": "npm install follow-redirects@\">=1.16.1\"\nnpm ls follow-redirects", "url": "https://github.com/advisories/GHSA-q3jh-wrc6-jgq8", "note": "vulnerable: >= 1.16.0, < 1.16.1"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-23705", "publisher": "Fortinet, Inc.", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]", "summary": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.12, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00309, "kev": false, "added": "2026-10-13", "modified": "2026-10-23T01:16:54.263", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-23705"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22489, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2019-5645", "publisher": "Rapid7, Inc.", "title": "By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can", "summary": "By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.", "cvss": 7.5, "sev": "HIGH", "epss": 0.49181, "kev": false, "added": "2020-09-01", "modified": "2026-10-23T01:16:53.113", "products": [{"name": "metasploit", "vendor": "rapid7", "type": "app", "affected": ["<= 5.0.27"], "fixed": "newer than 5.0.27", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy metasploit || rpm -q metasploit || metasploit --version"}, {"label": "2. UPGRADE to newer than 5.0.27 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade metasploit"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade metasploit"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2019-5645"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/rapid7/metasploit-framework/pull/12433"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/rapid7/metasploit-framework/pull/12433"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98885, "pocs": [{"kind": "msf", "name": "Metasploit HTTP(S) handler DoS", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb"}], "pinned": false, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2026-96303", "publisher": "Microsoft Corporation", "title": "Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to ", "summary": "Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00593, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T23:20:41.513", "products": [{"name": "powershell", "vendor": "microsoft", "type": "app", "affected": [">= 7.4 and < 7.4.21", ">= 7.5 and < 7.5.12", ">= 7.6 and < 7.6.7"], "fixed": "7.4.21, 7.5.12, 7.6.7", "safe": "before 7.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy powershell || rpm -q powershell || powershell --version"}, {"label": "2. UPGRADE to 7.4.21 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade powershell"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade powershell"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.4 (Debian / Ubuntu)", "cmd": "apt-cache madison powershell\nsudo apt install powershell=<VERSION_BEFORE_7.4>\nsudo apt-mark hold powershell"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list powershell\nsudo dnf downgrade powershell-<VERSION_BEFORE_7.4>\nsudo dnf versionlock add powershell"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96303"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303"}], "cwe": ["CWE-358"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.47675, "pinned": false, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303", "date": "2026-10-22"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96251", "publisher": "Microsoft Corporation", "title": "Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to", "summary": "Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T23:20:40.317", "products": [{"name": "powershell", "vendor": "microsoft", "type": "app", "affected": [">= 7.4 and < 7.4.21", ">= 7.5 and < 7.5.12", ">= 7.6 and < 7.6.7"], "fixed": "7.4.21, 7.5.12, 7.6.7", "safe": "before 7.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy powershell || rpm -q powershell || powershell --version"}, {"label": "2. UPGRADE to 7.4.21 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade powershell"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade powershell"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.4 (Debian / Ubuntu)", "cmd": "apt-cache madison powershell\nsudo apt install powershell=<VERSION_BEFORE_7.4>\nsudo apt-mark hold powershell"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list powershell\nsudo dnf downgrade powershell-<VERSION_BEFORE_7.4>\nsudo dnf versionlock add powershell"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96251"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251"}], "cwe": ["CWE-807"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.43634, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-94300", "publisher": "Internet Systems Consortium (ISC)", "title": "Replaying GSS-TSIG signed UDP messages can result in memory corruption in \"`named`\"", "summary": "Replaying GSS-TSIG signed UDP messages can result in memory corruption in \"`named`\".  An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially achieve remote code execution.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 th", "cvss": 8.1, "sev": "HIGH", "epss": 0.00734, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:20:34.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94300"}], "cwe": ["CWE-362", "CWE-415"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53923, "pinned": false, "pocs": [{"kind": "poc", "name": "Ibonok/CVE-2026-94300 (0 stars)", "url": "https://github.com/Ibonok/CVE-2026-94300", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "bind9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "bind9", "status": "fixed", "fixed": "1:9.20.30-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.20.30-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind9.16", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}], "vendors_checked": "2026-10-24T07:49:43.859602+00:00", "vendor_fixed": true, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "ISC BIND security advisory (AV26-1072)", "url": "https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-93888", "publisher": "IBM Corporation", "title": "IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u00a0is v", "summary": "IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u00a0is vulnerable to a code injection due to insufficient validation of user input.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00171, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:20:33.967", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93888"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06154, "pinned": false}, {"id": "CVE-2026-91665", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Security)", "summary": "Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00412, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:20:33.240", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.3.0.0"], "fixed": null, "safe": "before 21.8.3.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.3.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.3.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91665"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpuoct2026.html"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34334, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91305", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Secu", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).  Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00377, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:20:33.117", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91305"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30494, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91265", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infras", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).  Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical d", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00377, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:20:32.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91265"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30494, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76496", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. &nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Comm", "cvss": 7.0, "sev": "HIGH", "epss": 0.00122, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:08.613", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76496"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01813, "pinned": false}, {"id": "CVE-2026-76495", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. &nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under t", "cvss": 7.8, "sev": "HIGH", "epss": 0.00106, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:08.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76495"}], "cwe": ["CWE-732"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01048, "pinned": false}, {"id": "CVE-2026-76494", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. &nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weaknes", "cvss": 7.8, "sev": "HIGH", "epss": 0.00152, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:08.333", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76494"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04037, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Expressway Series Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Expressway%20Series%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-76479", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 7.8, "sev": "HIGH", "epss": 0.0019, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:08.200", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76479"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08221, "pinned": false}, {"id": "CVE-2026-76478", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 8.8, "sev": "HIGH", "epss": 0.00113, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:08.063", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76478"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01374, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76477", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 8.8, "sev": "HIGH", "epss": 0.00365, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76477"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29169, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Unified Communications Products Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Communications%20Products%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76476", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 8.8, "sev": "HIGH", "epss": 0.00338, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.803", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76476"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25976, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Unified Communications Products Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Communications%20Products%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76474", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00357, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76474"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2825, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Unified Communications Products Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Communications%20Products%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-76473", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive inter", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00356, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.543", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76473"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28166, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Unified Communications Products Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Communications%20Products%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-76466", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, rem", "summary": "A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as&nbsp;root.\r\n\r\nThis vulnerability is due to the use of persistent cookies. Additionally, there is insufficient validation of client certificates when the TLS Verify Mode is set to Enabled for clustering, which means that client c", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00381, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76466"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30934, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Expressway Series Remote Code Execution Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Expressway%20Series%20Remote%20Code%20Execution%20Vulnerability%26vs_k=1", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-76462", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco", "summary": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker t", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:19:07.260", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76462"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03341, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Client%20Secure%20Firewall%20Posture%20Module%20Privilege%20Escalation%20Vulnerability%26vs_k=1", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-20291", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the", "cvss": 7.8, "sev": "HIGH", "epss": 0.00121, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:18:31.427", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20291"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0179, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Multiple Cisco Products Snort 3 Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Multiple%20Cisco%20Products%20Snort%203%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-22"}], "buzz": 1}, {"id": "CVE-2026-20043", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common W", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00264, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T23:18:31.190", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20043"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17364, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Multiple Cisco Products Snort 3 Security Hardening Release: October 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Multiple%20Cisco%20Products%20Snort%203%20Security%20Hardening%20Release:%20October%202026%26vs_k=1", "date": "2026-10-22"}, {"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Advance Notification for Publication of October 21, 2026, Security Advisories", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-QGwHnJ6k?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20October%2021,%202026,%20Security%20Advisories%26vs_k=1", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15561", "publisher": "Red Hat, Inc.", "title": "A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder", "summary": "A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00461, "kev": false, "added": "2026-08-11", "modified": "2026-10-22T23:18:30.343", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15561"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38997, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113342", "publisher": "Chrome", "title": "Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbi", "summary": "Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.913", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113342"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41544, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113336", "publisher": "Chrome", "title": "Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentia", "summary": "Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.763", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113336"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41546, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113331", "publisher": "Chrome", "title": "Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially", "summary": "Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.610", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113331"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.37478, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113328", "publisher": "Chrome", "title": "Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote", "summary": "Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.457", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113328"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41546, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113300", "publisher": "Chrome", "title": "Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially ", "summary": "Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.307", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113300"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41546, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113283", "publisher": "Chrome", "title": "Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote", "summary": "Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.157", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113283"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41545, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113270", "publisher": "Chrome", "title": "Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbit", "summary": "Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:29.003", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113270"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41545, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113263", "publisher": "Chrome", "title": "Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to pote", "summary": "Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00458, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.820", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113263"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/497026542"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.38788, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113261", "publisher": "Chrome", "title": "Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentia", "summary": "Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.663", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113261"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41543, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113252", "publisher": "Chrome", "title": "Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote atta", "summary": "Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.507", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113252"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41543, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "webkitgtk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "webkitgtk3", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113235", "publisher": "Chrome", "title": "Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po", "summary": "Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.350", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113235"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41544, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113222", "publisher": "Chrome", "title": "Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute ", "summary": "Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.197", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113222"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113211", "publisher": "Chrome", "title": "Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent", "summary": "Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.0045, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:28.050", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113211"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38148, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113189", "publisher": "Chrome", "title": "Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary ", "summary": "Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.893", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113189"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41545, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113186", "publisher": "Chrome", "title": "Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arb", "summary": "Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.743", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113186"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41544, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113171", "publisher": "Chrome", "title": "Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker t", "summary": "Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.573", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113171"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113169", "publisher": "Chrome", "title": "Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote att", "summary": "Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.417", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113169"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113147", "publisher": "Chrome", "title": "Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pot", "summary": "Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.260", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113147"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/501531546"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.40983, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113146", "publisher": "Chrome", "title": "Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote", "summary": "Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:27.113", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113146"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/511325076"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31338, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113141", "publisher": "Chrome", "title": "Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e", "summary": "Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.953", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113141"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/553128833"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31338, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113138", "publisher": "Chrome", "title": "Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to poten", "summary": "Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.800", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113138"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113126", "publisher": "Chrome", "title": "Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote", "summary": "Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.623", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113126"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113118", "publisher": "Chrome", "title": "Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute a", "summary": "Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.473", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113118"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/513184498"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.27489, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113116", "publisher": "Chrome", "title": "Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially ex", "summary": "Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.313", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113116"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113089", "publisher": "Chrome", "title": "Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to", "summary": "Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.167", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113089"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41545, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113084", "publisher": "Chrome", "title": "Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ", "summary": "Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00413, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:26.007", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113084"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.34445, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113078", "publisher": "Chrome", "title": "Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ", "summary": "Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00401, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:25.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113078"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.33191, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113072", "publisher": "Chrome", "title": "Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exec", "summary": "Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00486, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:25.677", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113072"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40947, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113056", "publisher": "Chrome", "title": "Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote", "summary": "Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:25.517", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113056"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113023", "publisher": "Chrome", "title": "Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to p", "summary": "Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:25.353", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113023"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41546, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113019", "publisher": "Chrome", "title": "Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitr", "summary": "Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:25.023", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113019"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3747, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113018", "publisher": "Chrome", "title": "Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exec", "summary": "Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:24.877", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113018"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.37474, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113014", "publisher": "Chrome", "title": "Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potenti", "summary": "Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:24.717", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113014"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41544, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113009", "publisher": "Chrome", "title": "Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e", "summary": "Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:24.557", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113009"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}, {"t": "Exploit, Issue Tracking", "u": "https://issues.chromium.org/issues/514066540"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.31338, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113007", "publisher": "Chrome", "title": "Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentia", "summary": "Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:24.397", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113007"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112992", "publisher": "Chrome", "title": "Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially e", "summary": "Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00453, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:18:23.933", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 156.0.8078.47"], "fixed": "156.0.8078.47", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 156.0.8078.47 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112992"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.38377, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "156.0.8078.47-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"156.0.8078.47-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-110264", "publisher": "GitLab Inc.", "title": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0", "summary": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00505, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T23:18:22.670", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "Covered by 4 security sources", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42271, "pinned": false, "pocs": [{"kind": "poc", "name": "TahuCryptsi/gitlab-onigmo-check (0 stars)", "url": "https://github.com/TahuCryptsi/gitlab-onigmo-check", "stars": 0}, {"kind": "poc", "name": "TahuCryptsi/poc-gitlab-onigmo-cve-2026-110264 (0 stars)", "url": "https://github.com/TahuCryptsi/poc-gitlab-onigmo-cve-2026-110264", "stars": 0}, {"kind": "poc", "name": "al4n4n/CVE-2026-110264 (0 stars)", "url": "https://github.com/al4n4n/CVE-2026-110264", "stars": 0}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "mentions": [{"src": "Ruby News", "group": "ecosystem", "title": "Ruby 3.3.13 Released", "url": "https://www.ruby-lang.org/en/news/2026/10/23/ruby-3-3-13-released/", "date": "2026-10-23"}, {"src": "Ruby News", "group": "ecosystem", "title": "Ruby 3.4.12 Released", "url": "https://www.ruby-lang.org/en/news/2026/10/23/ruby-3-4-12-released/", "date": "2026-10-23"}, {"src": "Ruby News", "group": "ecosystem", "title": "Ruby 4.0.9 Released", "url": "https://www.ruby-lang.org/en/news/2026/10/23/ruby-4-0-9-released/", "date": "2026-10-23"}, {"src": "Ruby News", "group": "ecosystem", "title": "Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264", "url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/", "date": "2026-10-23"}, {"src": "CERT-SE Sweden", "group": "gov", "title": "Kritisk s\u00e5rbarhet i GitLab CE och EE", "url": "https://www.cert.se/2026/10/Kritisk-s%C3%A5rbarhet-i-GitLab-CE-och-EE.html", "date": "2026-10-22"}, {"src": "NCSC Netherlands", "group": "gov", "title": "NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447", "date": "2026-10-22"}, {"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/", "date": "2026-10-21"}], "buzz": 4, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-101590", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).  Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well a", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00377, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:17:59.063", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101590"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30493, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101521", "publisher": "Oracle", "title": "Vulnerability in Oracle APEX (component: General)", "summary": "Vulnerability in Oracle APEX (component: General).  Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and  26.1.0-26.1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle APEX.  Successful attacks of this vulnerability can result in takeover of Oracle APEX. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00518, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:17:58.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101521"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43212, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-101484", "publisher": "Oracle", "title": "Vulnerability in Oracle Secure Backup (component: Backup and Restore)", "summary": "Vulnerability in Oracle Secure Backup (component: Backup and Restore).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vect", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00483, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T23:17:58.793", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101484"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40685, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96960", "publisher": "Microsoft Corporation", "title": "Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a", "summary": "Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01033, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:20:09.367", "products": [{"name": ".net", "vendor": "microsoft", "type": "app", "affected": [">= 8.0.0 and < 8.0.5", ">= 9.0.0 and < 9.0.21", ">= 10.0.0 and < 10.0.13", "11.0.0 preview1", "11.0.0 preview2", "11.0.0 preview3", "11.0.0 preview4", "11.0.0 preview5"], "fixed": "8.0.5, 9.0.21, 10.0.13", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net || rpm -q .net || .net --version"}, {"label": "2. UPGRADE to 8.0.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade .net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade .net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison .net\nsudo apt install .net=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold .net"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net\nsudo dnf downgrade .net-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add .net"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": ".net framework", "vendor": "microsoft", "type": "app", "affected": ["4.8.1", "4.8", "4.6.2", "4.7", "4.7.1", "4.7.2", "3.5"], "fixed": null, "safe": "before 3.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net-framework || rpm -q .net-framework || .net-framework --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.5 (Debian / Ubuntu)", "cmd": "apt-cache madison .net-framework\nsudo apt install .net-framework=<VERSION_BEFORE_3.5>\nsudo apt-mark hold .net-framework"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net-framework\nsudo dnf downgrade .net-framework-<VERSION_BEFORE_3.5>\nsudo dnf versionlock add .net-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96960"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960"}], "cwe": ["CWE-405"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.63539, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Xml", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package System.Security.Cryptography.Xml --version 10.0.13", "url": "https://github.com/advisories/GHSA-7hqp-7c5m-4vq6", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Microsoft .NET Framework 3.5 on Windows 11 version 26H1", "pkg": "KB5127696", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171", "cmd": "Install KB5127696 via Windows Update, then verify:\nGet-HotFix -Id KB5127696", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696", "note": "KB5127696"}, {"os": "Microsoft .NET Framework 3.5 on Windows Server 2012", "pkg": "KB5127660", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982", "cmd": "Install KB5127660 via Windows Update, then verify:\nGet-HotFix -Id KB5127660", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660", "note": "KB5127660"}, {"os": "Microsoft .NET Framework 3.5 on Windows Server 2012 R2", "pkg": "KB5127664", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982", "cmd": "Install KB5127664 via Windows Update, then verify:\nGet-HotFix -Id KB5127664", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664", "note": "KB5127664"}, {"os": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607", "pkg": "KB5126868", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016", "pkg": "KB5126868", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868", "note": "KB5126868"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-96959", "publisher": "Microsoft Corporation", "title": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o", "summary": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0075, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:20:09.200", "products": [{"name": ".net", "vendor": "microsoft", "type": "app", "affected": [">= 8.0.0 and < 8.0.5", ">= 9.0.0 and < 9.0.21", ">= 10.0.0 and < 10.0.13", "11.0.0 preview1", "11.0.0 preview2", "11.0.0 preview3", "11.0.0 preview4", "11.0.0 preview5"], "fixed": "8.0.5, 9.0.21, 10.0.13", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net || rpm -q .net || .net --version"}, {"label": "2. UPGRADE to 8.0.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade .net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade .net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison .net\nsudo apt install .net=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold .net"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net\nsudo dnf downgrade .net-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add .net"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": ".net framework", "vendor": "microsoft", "type": "app", "affected": ["4.8.1", "4.8", "4.6.2", "4.7", "4.7.1", "4.7.2", "3.5"], "fixed": null, "safe": "before 3.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net-framework || rpm -q .net-framework || .net-framework --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.5 (Debian / Ubuntu)", "cmd": "apt-cache madison .net-framework\nsudo apt install .net-framework=<VERSION_BEFORE_3.5>\nsudo apt-mark hold .net-framework"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net-framework\nsudo dnf downgrade .net-framework-<VERSION_BEFORE_3.5>\nsudo dnf versionlock add .net-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96959"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54463, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Xml", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package System.Security.Cryptography.Xml --version 10.0.13", "url": "https://github.com/advisories/GHSA-c399-9853-6jmj", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Microsoft .NET Framework 3.5 on Windows 11 version 26H1", "pkg": "KB5127696", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171", "cmd": "Install KB5127696 via Windows Update, then verify:\nGet-HotFix -Id KB5127696", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696", "note": "KB5127696"}, {"os": "Microsoft .NET Framework 3.5 on Windows Server 2012", "pkg": "KB5127660", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982", "cmd": "Install KB5127660 via Windows Update, then verify:\nGet-HotFix -Id KB5127660", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660", "note": "KB5127660"}, {"os": "Microsoft .NET Framework 3.5 on Windows Server 2012 R2", "pkg": "KB5127664", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982", "cmd": "Install KB5127664 via Windows Update, then verify:\nGet-HotFix -Id KB5127664", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664", "note": "KB5127664"}, {"os": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607", "pkg": "KB5126868", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016", "pkg": "KB5126868", "status": "fixed", "fixed": "2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868", "note": "KB5126868"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-96958", "publisher": "Microsoft Corporation", "title": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "summary": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01033, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:20:08.990", "products": [{"name": ".net", "vendor": "microsoft", "type": "app", "affected": [">= 8.0.0 and < 8.0.5", ">= 9.0.0 and < 9.0.21", ">= 10.0.0 and < 10.0.13", "11.0.0 preview1", "11.0.0 preview2", "11.0.0 preview3", "11.0.0 preview4", "11.0.0 preview5"], "fixed": "8.0.5, 9.0.21, 10.0.13", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net || rpm -q .net || .net --version"}, {"label": "2. UPGRADE to 8.0.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade .net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade .net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison .net\nsudo apt install .net=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold .net"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net\nsudo dnf downgrade .net-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add .net"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": ".net framework", "vendor": "microsoft", "type": "app", "affected": ["4.8.1", "4.8", "4.6.2", "4.7", "4.7.1", "4.7.2", "3.5"], "fixed": null, "safe": "before 3.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net-framework || rpm -q .net-framework || .net-framework --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.5 (Debian / Ubuntu)", "cmd": "apt-cache madison .net-framework\nsudo apt install .net-framework=<VERSION_BEFORE_3.5>\nsudo apt-mark hold .net-framework"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net-framework\nsudo dnf downgrade .net-framework-<VERSION_BEFORE_3.5>\nsudo dnf versionlock add .net-framework"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96958"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.63539, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Xml", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package System.Security.Cryptography.Xml --version 10.0.13", "url": "https://github.com/advisories/GHSA-r955-8q5j-3h83", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2", "pkg": "KB5127689", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0", "cmd": "Install KB5127689 via Windows Update, then verify:\nGet-HotFix -Id KB5127689", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689", "note": "KB5127689"}, {"os": "Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2", "pkg": "KB5127689", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0", "cmd": "Install KB5127689 via Windows Update, then verify:\nGet-HotFix -Id KB5127689", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689", "note": "KB5127689"}, {"os": "Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2", "pkg": "KB5127690", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0", "cmd": "Install KB5127690 via Windows Update, then verify:\nGet-HotFix -Id KB5127690", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690", "note": "KB5127690"}, {"os": "Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2", "pkg": "KB5127690", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0", "cmd": "Install KB5127690 via Windows Update, then verify:\nGet-HotFix -Id KB5127690", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690", "note": "KB5127690"}, {"os": "Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025", "pkg": "KB5127690", "status": "fixed", "fixed": "2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0", "cmd": "Install KB5127690 via Windows Update, then verify:\nGet-HotFix -Id KB5127690", "url": "https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690", "note": "KB5127690"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-96957", "publisher": "Microsoft Corporation", "title": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security ", "summary": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00449, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:20:08.840", "products": [{"name": ".net", "vendor": "microsoft", "type": "app", "affected": [">= 10.0.0 and < 10.0.13", "11.0.0 preview1", "11.0.0 preview2", "11.0.0 preview3", "11.0.0 preview4", "11.0.0 preview5", "11.0.0 preview6", "11.0.0 preview7"], "fixed": "10.0.13", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy .net || rpm -q .net || .net --version"}, {"label": "2. UPGRADE to 10.0.13 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade .net"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade .net"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison .net\nsudo apt install .net=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold .net"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list .net\nsudo dnf downgrade .net-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add .net"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2022", "vendor": "microsoft", "type": "app", "affected": [">= 17.14.0 and < 17.14.42"], "fixed": "17.14.42", "safe": "before 17.14.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2022 || rpm -q visual-studio-2022 || visual-studio-2022 --version"}, {"label": "2. UPGRADE to 17.14.42 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2022"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2022"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.14.0 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2022\nsudo apt install visual-studio-2022=<VERSION_BEFORE_17.14.0>\nsudo apt-mark hold visual-studio-2022"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2022\nsudo dnf downgrade visual-studio-2022-<VERSION_BEFORE_17.14.0>\nsudo dnf versionlock add visual-studio-2022"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "visual studio 2026", "vendor": "microsoft", "type": "app", "affected": [">= 18.10.0 and < 18.10.4"], "fixed": "18.10.4", "safe": "before 18.10.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy visual-studio-2026 || rpm -q visual-studio-2026 || visual-studio-2026 --version"}, {"label": "2. UPGRADE to 18.10.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade visual-studio-2026"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade visual-studio-2026"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 18.10.0 (Debian / Ubuntu)", "cmd": "apt-cache madison visual-studio-2026\nsudo apt install visual-studio-2026=<VERSION_BEFORE_18.10.0>\nsudo apt-mark hold visual-studio-2026"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list visual-studio-2026\nsudo dnf downgrade visual-studio-2026-<VERSION_BEFORE_18.10.0>\nsudo dnf versionlock add visual-studio-2026"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96957"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38061, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86192\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86193\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": ".NET 10.0 runtime installed on Windows", "pkg": "KB5130036", "status": "fixed", "fixed": "10.0.402", "cmd": "Install KB5130036 via Windows Update, then verify:\nGet-HotFix -Id KB5130036", "url": "https://dotnet.microsoft.com/download/dotnet/10.0", "note": "KB5130036"}, {"os": ".NET 10.0 runtime installed on Mac OS", "pkg": "KB5130036", "status": "fixed", "fixed": "10.0.402", "cmd": "Install KB5130036 via Windows Update, then verify:\nGet-HotFix -Id KB5130036", "url": "https://dotnet.microsoft.com/download/dotnet/10.0", "note": "KB5130036"}, {"os": ".NET 10.0 runtime installed on Linux", "pkg": "KB5130036", "status": "fixed", "fixed": "10.0.402", "cmd": "Install KB5130036 via Windows Update, then verify:\nGet-HotFix -Id KB5130036", "url": "https://dotnet.microsoft.com/download/dotnet/10.0", "note": "KB5130036"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96238", "publisher": "Microsoft Corporation", "title": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.", "summary": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.740", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.13641, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96237", "publisher": "Microsoft Corporation", "title": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute co", "summary": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00548, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45129, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96235", "publisher": "Microsoft Corporation", "title": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "summary": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00738, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.437", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96235"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54044, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-g44w-h65v-4cw9", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-g44w-h65v-4cw9", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 8.0.32", "url": "https://github.com/advisories/GHSA-g44w-h65v-4cw9", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:51:48.383773+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96234", "publisher": "Microsoft Corporation", "title": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.", "summary": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.313", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96234"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.19656, "pinned": false}, {"id": "CVE-2026-96233", "publisher": "Microsoft Corporation", "title": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "summary": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00766, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55039, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-87vj-4hqv-22p9", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-96232", "publisher": "Microsoft Corporation", "title": "Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.", "summary": "Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00693, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:56.053", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96232"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52361, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-f8qh-mqg4-9939", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-f8qh-mqg4-9939", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-f8qh-mqg4-9939", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:51:48.383773+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96231", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat", "summary": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.937", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26383, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-2j93-m82w-73j2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96230", "publisher": "Microsoft Corporation", "title": "Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00778, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.823", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96230"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55394, "pinned": false, "pocs": [{"kind": "poc", "name": "codevalai/microsoft-security-advisory-cv (0 stars)", "url": "https://github.com/codevalai/microsoft-security-advisory-cv", "stars": 0}], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.AspNetCore.Components.WebAssembly.Server", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.AspNetCore.Components.WebAssembly.Server --version 10.0.13", "url": "https://github.com/advisories/GHSA-qjpx-jqm5-h2c4", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-96229", "publisher": "Microsoft Corporation", "title": "Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a netwo", "summary": "Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00815, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.700", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96229"}], "cwe": ["CWE-183"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.56656, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-5qr9-xxm9-6cmq", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-5qr9-xxm9-6cmq", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 9.0.21", "url": "https://github.com/advisories/GHSA-5qr9-xxm9-6cmq", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96225", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat", "summary": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.583", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26383, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-w6wh-p4g7-mpj2", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96224", "publisher": "Microsoft Corporation", "title": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "summary": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00738, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96224"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54044, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-xq57-crx4-g373", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-xq57-crx4-g373", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 10.0.13", "url": "https://github.com/advisories/GHSA-xq57-crx4-g373", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:51:48.383773+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96222", "publisher": "Microsoft Corporation", "title": "Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke", "summary": "Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.", "cvss": 7.4, "sev": "HIGH", "epss": 0.0057, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:55.133", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2012", "vendor": "microsoft", "type": "os", "affected": ["all versions", "r2"], "fixed": null, "safe": "before r2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2016", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2019", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2022", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.20348.5761"], "fixed": "10.0.20348.5761", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96222"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.46487, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Xml", "status": "fixed", "fixed": "8.0.5", "cmd": "dotnet add package System.Security.Cryptography.Xml --version 8.0.5", "url": "https://github.com/advisories/GHSA-vrv5-2jg9-4mmr", "note": "vulnerable: >= 8.0.0, <= 8.0.4"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-2.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86594\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86169\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 9.4 Update Services for SAP Solutions", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el9_4", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88425\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5126651", "status": "fixed", "fixed": "10.0.17763.9376", "cmd": "Install KB5126651 via Windows Update, then verify:\nGet-HotFix -Id KB5126651", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651", "note": "KB5126651"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87697", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "summary": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00842, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:39.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87697"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.57533, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-c27m-942f-rcfh", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-c27m-942f-rcfh", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 9.0.21", "url": "https://github.com/advisories/GHSA-c27m-942f-rcfh", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:45:31.465547+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85790", "publisher": "Microsoft Corporation", "title": "Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.", "summary": "Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0069, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:25.830", "products": [{"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.3231"], "fixed": "10.0.28000.3231", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26300.9711"], "fixed": "10.0.26300.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2022", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.20348.5761"], "fixed": "10.0.20348.5761", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85790"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52254, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.Native.Quic.MsQuic.Schannel", "status": "fixed", "fixed": "2.5.12", "cmd": "dotnet add package Microsoft.Native.Quic.MsQuic.Schannel --version 2.5.12", "url": "https://github.com/advisories/GHSA-2mxg-prvg-9jfg", "note": "vulnerable: >= 1.9.0, < 2.5.12"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows Server 2022", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}, {"os": "Windows Server 2022 (Server Core installation)", "pkg": "KB5126655", "status": "fixed", "fixed": "10.0.20348.5761", "cmd": "Install KB5126655 via Windows Update, then verify:\nGet-HotFix -Id KB5126655", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655", "note": "KB5126655"}, {"os": "Windows Server 2025 (Server Core installation)", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85363", "publisher": "Microsoft Corporation", "title": "Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a ", "summary": "Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00738, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:24.017", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85363"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54043, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f63g-mx39-3r38", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f63g-mx39-3r38", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f63g-mx39-3r38", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:51:48.383773+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84008", "publisher": "Microsoft Corporation", "title": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "summary": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00766, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:19:18.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84008"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55038, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Pkcs", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package System.Security.Cryptography.Pkcs --version 10.0.13", "url": "https://github.com/advisories/GHSA-846f-f764-76mx", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet10.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-83681", "publisher": "Microsoft Corporation", "title": "Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.", "summary": "Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00297, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:55.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83681"}], "cwe": ["CWE-1390"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.2122, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-83520", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "summary": "Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01266, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:48.310", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83520"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.69548, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-4w5f-7jp2-w48g", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-4w5f-7jp2-w48g", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-4w5f-7jp2-w48g", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:40:36.324765+00:00", "vendor_fixed": true}, {"id": "CVE-2026-77930", "publisher": "VulnCheck", "title": "EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host sh", "summary": "EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:45.743", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-77930"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4612, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-70197", "publisher": "Microsoft Corporation", "title": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "summary": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00695, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:35.603", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70197"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52458, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.win-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-4mpw-cpwj-hxxj", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.win-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-4mpw-cpwj-hxxj", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.win-x86", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 8.0.32", "url": "https://github.com/advisories/GHSA-4mpw-cpwj-hxxj", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:45:31.465547+00:00", "vendor_fixed": true, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-70197 .NET Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197", "date": "2026-10-19"}], "buzz": 1}, {"id": "CVE-2026-70194", "publisher": "Microsoft Corporation", "title": "Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature", "summary": "Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00429, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:35.283", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70194"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.36088, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "11.0.0-rc.2", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 11.0.0-rc.2", "url": "https://github.com/advisories/GHSA-fqpq-cx42-9jmm", "note": "vulnerable: >= 11.0.0-preview.1, <= 11.0.0-rc.1"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70190", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat", "summary": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:35.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70190"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39075, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70179", "publisher": "Microsoft Corporation", "title": "Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a n", "summary": "Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00555, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:34.377", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70179"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.45576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.AspNetCore.Authentication.Negotiate", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.AspNetCore.Authentication.Negotiate --version 10.0.13", "url": "https://github.com/advisories/GHSA-vrrp-6v32-2p8g", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70174", "publisher": "Microsoft Corporation", "title": "Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code ove", "summary": "Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:33.917", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70174"}], "cwe": ["CWE-358"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5634, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f749-vhgx-39h6", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f749-vhgx-39h6", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "8.0.32", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 8.0.32", "url": "https://github.com/advisories/GHSA-f749-vhgx-39h6", "note": "vulnerable: >= 8.0.0, <= 8.0.31"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:46:31.448601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70165", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat", "summary": "Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:33.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70165"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27765, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70162", "publisher": "Microsoft Corporation", "title": "A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web r", "summary": "A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web applicati", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00768, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:32.663", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70162"}], "cwe": ["CWE-405"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5512, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "System.Security.Cryptography.Pkcs", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package System.Security.Cryptography.Pkcs --version 10.0.13", "url": "https://github.com/advisories/GHSA-2fmv-rv2c-59x7", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70161", "publisher": "Microsoft Corporation", "title": "Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized at", "summary": "Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:32.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70161"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39075, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70159", "publisher": "Microsoft Corporation", "title": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s", "summary": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01056, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:32.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.64163, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.AspNetCore.SignalR.Common", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.AspNetCore.SignalR.Common --version 10.0.13", "url": "https://github.com/advisories/GHSA-334f-vvp4-7g6p", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-70035", "publisher": "Microsoft Corporation", "title": "Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a net", "summary": "Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01266, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:22.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70035"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.69548, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-4j9v-h7pp-725h", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 10.0.13", "url": "https://github.com/advisories/GHSA-4j9v-h7pp-725h", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 10.0.13", "url": "https://github.com/advisories/GHSA-4j9v-h7pp-725h", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:40:36.324765+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70007", "publisher": "Microsoft Corporation", "title": "Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.", "summary": "Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00639, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:20.337", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70007"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.49989, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-pfwj-2f93-rf42", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-pfwj-2f93-rf42", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.WindowsDesktop.App.Runtime.win-x86", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x86 --version 9.0.21", "url": "https://github.com/advisories/GHSA-pfwj-2f93-rf42", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69651", "publisher": "Microsoft Corporation", "title": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "summary": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01103, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:10.747", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.65469, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-3rxq-g8rj-r2cf", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-66822", "publisher": "Microsoft Corporation", "title": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose informat", "summary": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00674, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:07.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-wxxw-5cvc-53j7", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58280", "publisher": "Microsoft Corporation", "title": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.", "summary": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.01103, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:18:07.270", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.65468, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "NuGet (.NET)", "pkg": "Microsoft.NETCore.App.Runtime.linux-x64", "status": "fixed", "fixed": "9.0.21", "cmd": "dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 9.0.21", "url": "https://github.com/advisories/GHSA-mc4q-93x5-f6hj", "note": "vulnerable: >= 9.0.0, <= 9.0.20"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "fixed", "fixed": "8.0.132-8.0.32-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet8)\" ge \"8.0.132-8.0.32-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86168\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86172\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet9.0", "status": "fixed", "fixed": "dotnet9.0-9.0.122-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88424\nrpm -q dotnet9.0", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.132-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:88474\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-4633", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Keycloak", "summary": "A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.", "cvss": 3.7, "sev": "LOW", "epss": 0.00468, "kev": false, "added": "2026-03-23", "modified": "2026-10-22T22:18:07.123", "products": [{"name": "build of keycloak", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy build-of-keycloak || rpm -q build-of-keycloak || build-of-keycloak --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4633"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-4633"}, {"t": "Exploit, Issue Tracking", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2450247"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.39603, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.keycloak:keycloak-services", "status": "fixed", "fixed": "26.6.1", "cmd": "Set org.keycloak:keycloak-services to 26.6.1 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-rhgq-f8x5-j2jc", "note": "vulnerable: >= 26.5.0, < 26.6.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-12080", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the QEMU Guest Agent (qga)", "summary": "A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access", "cvss": 7.3, "sev": "HIGH", "epss": 0.00139, "kev": false, "added": "2026-07-20", "modified": "2026-10-22T22:18:06.797", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12080"}], "cwe": ["CWE-61"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03014, "pinned": false}, {"id": "CVE-2026-113583", "publisher": "VulnCheck", "title": "Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote ", "summary": "Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOW_EXTERNAL_IMAGE_SOURCES is enabled. Attackers can send a specially crafted email so that when the victim opens it, the externalResources.js code builds the blocked-image notice using innerHTML with decoded", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:04.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113583"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20136, "pinned": false}, {"id": "CVE-2026-113411", "publisher": "VulDB", "title": "A vulnerability was found in Nerimity Desktop up to 2.2.2", "summary": "A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The attack can be executed remotely. The exploit has been made public and could be used. Upgrading to version 2.3.3 can resolve this issue. The patch is identif", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00229, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.933", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113411"}], "cwe": ["CWE-285", "CWE-939"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12973, "pinned": false}, {"id": "CVE-2026-113394", "publisher": "VulDB", "title": "A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218", "summary": "A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument setSWMProfile leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor explains: \"2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issu", "cvss": 7.4, "sev": "HIGH", "epss": 0.00318, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113394"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.23491, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113390", "publisher": "VulDB", "title": "A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218", "summary": "A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/option causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor explains: \"2960 1.5.1.7 has corrected many security issues. And 2960 is", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.02136, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.607", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113390"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.81881, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-113386", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the _uid parameter of the mail/headers and mail/viewsource actions to execute arbitrary IMAP commands.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00972, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113386"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.61642, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113384", "publisher": "VulDB", "title": "A flaw has been found in Optimal IdM OptimalCloud 5.0", "summary": "A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can lead to open redirect. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.277", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113384"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15373, "pinned": false}, {"id": "CVE-2026-113354", "publisher": "VulnCheck", "title": "Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:e", "summary": "Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:03.123", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113354"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14085, "pinned": false}, {"id": "CVE-2026-113349", "publisher": "VulnCheck", "title": "OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDelet", "summary": "OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() that allows authenticated users to modify or delete other users' calendar events. Attackers with EDIT or DELETE access can supply arbitrary eventID values to alter or remove any user's events, including non-public ones restricted to their owner.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00208, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:02.977", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113349"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10418, "pinned": false}, {"id": "CVE-2026-112940", "publisher": "GitHub, Inc.", "title": "filelock is a platform-independent file lock for Python", "summary": "filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrite or unlink operations, while a writable adjacent hot journal is additionally required for attacker-chosen content overwrites. This issue is fixed in version 4.2.1.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00116, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:02.827", "products": [{"name": "filelock", "vendor": "tox-dev", "type": "app", "affected": [">= 3.20.4 and < 4.2.1"], "fixed": "4.2.1", "safe": "before 3.20.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show filelock"}, {"label": "2. UPGRADE to 4.2.1", "cmd": "pip install --upgrade \"filelock>=4.2.1\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.20.4", "cmd": "pip index versions filelock\npip install \"filelock<3.20.4\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112940"}, {"t": "Patch", "u": "https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d"}, {"t": "Patch", "u": "https://github.com/tox-dev/filelock/pull/834"}, {"t": "Exploit, Mitigation", "u": "https://github.com/tox-dev/filelock/security/advisories/GHSA-v4x8-3wr5-3wq8"}, {"t": "Exploit, Mitigation", "u": "https://github.com/tox-dev/filelock/security/advisories/GHSA-v4x8-3wr5-3wq8"}], "cwe": ["CWE-363", "CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.01549, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "python-filelock", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-filelock", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112934", "publisher": "GitHub, Inc.", "title": "filelock is a platform-independent file lock for Python", "summary": "filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user with rename access to the lock directory to replace a record with a named pipe and stall the lock, or under a permissive hard-link policy to link a reachable target file and cause the lock user to write through it. This issue is fixed in version 4.2.1.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00142, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:02.680", "products": [{"name": "filelock", "vendor": "tox-dev", "type": "app", "affected": [">= 4.0.0 and < 4.2.1"], "fixed": "4.2.1", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show filelock"}, {"label": "2. UPGRADE to 4.2.1", "cmd": "pip install --upgrade \"filelock>=4.2.1\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0", "cmd": "pip index versions filelock\npip install \"filelock<4.0.0\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112934"}, {"t": "Patch", "u": "https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03"}, {"t": "Patch", "u": "https://github.com/tox-dev/filelock/pull/842"}, {"t": "Exploit, Mitigation", "u": "https://github.com/tox-dev/filelock/security/advisories/GHSA-fj95-fr6c-h845"}, {"t": "Exploit, Mitigation", "u": "https://github.com/tox-dev/filelock/security/advisories/GHSA-fj95-fr6c-h845"}], "cwe": ["CWE-62"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.03224, "pinned": false}, {"id": "CVE-2026-112909", "publisher": "GitHub, Inc.", "title": "filelock is a platform-independent file lock for Python", "summary": "filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected versions from 3.10.2 can also change that file's mode. This issue is fixed in version 4.2.1.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:02.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112909"}], "cwe": ["CWE-706"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01649, "pinned": false}, {"id": "CVE-2026-112897", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T22:18:02.267", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112897"}], "cwe": ["CWE-908"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20604, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-q45j-58j2-45rg", "note": "vulnerable: >= 5.3.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112892", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an application that loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the decompression-bomb check. This", "cvss": 8.7, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T22:18:02.063", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112892"}], "cwe": ["CWE-409"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20606, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"pillow>=13.0.0\"\npip show pillow", "url": "https://github.com/advisories/GHSA-gg2r-wvfm-q9rx", "note": "vulnerable: >= 4.1.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112783", "publisher": "VulnCheck", "title": "OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/edit", "summary": "OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.php that allows READ-level users to edit and delete activity entries. Authenticated attackers can supply an arbitrary activityID via GET or POST to modify or delete activity and pipeline history for candidates, contacts and companies.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:01.907", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112783"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09838, "pinned": false}, {"id": "CVE-2026-112403", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application tha", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00321, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T22:18:01.700", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112403"}], "cwe": ["CWE-122"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23908, "pinned": false, "pocs": [{"kind": "poc", "name": "al4n4n/CVE-2026-112403 (0 stars)", "url": "https://github.com/al4n4n/CVE-2026-112403", "stars": 0}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-8g5g-8vmr-9782", "note": "vulnerable: <= 12.3.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112370", "publisher": "VulDB", "title": "A vulnerability was found in H3C Magic NX15 100R017", "summary": "A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.01686, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T22:18:01.537", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112370"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.76853, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-111765", "publisher": "GitHub, Inc.", "title": "A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol", "summary": "A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpClient synchronous POST path overrides the disabled-redirect setting in AndroidA2AHttpClient.createConnection() with the PostBuilder default followRedirects value of true, leaving a residual of the earlier credential-redirect fix. JSONRPCTransport and RestTransport add interceptor-produced a", "cvss": 7.5, "sev": "HIGH", "epss": 0.00675, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:01.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111765"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51616, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.a2aproject.sdk:a2a-java-sdk-http-client-android", "status": "fixed", "fixed": "1.3.2.Final", "cmd": "Set org.a2aproject.sdk:a2a-java-sdk-http-client-android to 1.3.2.Final or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-4fpj-g9jf-9rgg", "note": "vulnerable: >= 1.3.0.Final, <= 1.3.1.Final"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-111761", "publisher": "GitHub, Inc.", "title": "A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol", "summary": "A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects. InMemoryPushNotificationConfigStore.setInfo stores the URL verbatim, and onCreateTaskPushNotificationConfig does not validate the destination. In the default deployment with pu", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00512, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:01.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111761"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4285, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.a2aproject.sdk:a2a-java-sdk-server-common", "status": "fixed", "fixed": "1.3.0.Final", "cmd": "Set org.a2aproject.sdk:a2a-java-sdk-server-common to 1.3.0.Final or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-q78c-5jjq-57g8", "note": "vulnerable: < 1.3.0.Final"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-109468", "publisher": "Microsoft Corporation", "title": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s", "summary": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00645, "kev": false, "added": "2026-10-15", "modified": "2026-10-22T22:18:00.613", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109468"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5032, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-109444", "publisher": "VulnCheck", "title": "OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute", "summary": "OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00576, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:00.267", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109444"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46784, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-109440", "publisher": "VulnCheck", "title": "LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers ", "summary": "LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00492, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T22:18:00.100", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109440"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.41366, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105016", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.", "summary": "Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00986, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:17:52.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105016"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.62066, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.Native.Quic.MsQuic.Schannel", "status": "fixed", "fixed": "2.5.11-ci.159417053", "cmd": "dotnet add package Microsoft.Native.Quic.MsQuic.Schannel --version 2.5.11-ci.159417053", "url": "https://github.com/advisories/GHSA-5gjq-3f94-rcf7", "note": "vulnerable: = 2.5.11-ci.156755675"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "dotnet9-runtime", "status": "fixed", "fixed": "dotnet9-runtime-9.0.21-r0", "cmd": "apk add --upgrade dotnet9-runtime\napk info -v dotnet9-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet8-runtime", "status": "fixed", "fixed": "dotnet8-runtime-8.0.32-r0", "cmd": "apk add --upgrade dotnet8-runtime\napk info -v dotnet8-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:40:36.324765+00:00", "vendor_fixed": true}, {"id": "CVE-2026-102870", "publisher": "Microsoft Corporation", "title": "Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to e", "summary": "Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00778, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T22:17:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102870"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55395, "pinned": false, "pocs": [], "vendors": [{"os": "NuGet (.NET)", "pkg": "Microsoft.AspNetCore.Components.WebAssembly.Server", "status": "fixed", "fixed": "10.0.13", "cmd": "dotnet add package Microsoft.AspNetCore.Components.WebAssembly.Server --version 10.0.13", "url": "https://github.com/advisories/GHSA-g27p-qf6j-c96c", "note": "vulnerable: >= 10.0.0, <= 10.0.12"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "dotnet6", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "dotnet10", "status": "fixed", "fixed": "10.0.113-10.0.13-0ubuntu1~24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade dotnet10\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' dotnet10)\" ge \"10.0.113-10.0.13-0ubuntu1~24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86195\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86192\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet10.0", "status": "fixed", "fixed": "dotnet10.0-10.0.113-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:86193\nrpm -q dotnet10.0", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "dotnet10-runtime", "status": "fixed", "fixed": "dotnet10-runtime-10.0.13-r0", "cmd": "apk add --upgrade dotnet10-runtime\napk info -v dotnet10-runtime", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-0976", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Keycloak", "summary": "A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A remote attacker can craft requests to mask path segments, potentially bypassing proxy-level path filtering. This could expose administrative or sensitive endpoints that operators believe are not externally reachable", "cvss": 3.7, "sev": "LOW", "epss": 0.00453, "kev": false, "added": "2026-01-15", "modified": "2026-10-22T22:17:41.857", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0976"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.38396, "pinned": false}, {"id": "CVE-2025-36252", "publisher": "IBM Corporation", "title": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not ", "summary": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T22:17:41.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-36252"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04151, "pinned": false}, {"id": "CVE-2024-28835", "publisher": "Red Hat, Inc.", "title": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a spe", "summary": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00389, "kev": false, "added": "2024-03-21", "modified": "2026-10-22T22:17:41.483", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-28835"}], "cwe": ["CWE-248"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31839, "pinned": false}, {"id": "CVE-2024-28834", "publisher": "Red Hat, Inc.", "title": "A flaw was found in GnuTLS", "summary": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00724, "kev": false, "added": "2024-03-21", "modified": "2026-10-22T22:17:41.217", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-28834"}], "cwe": ["CWE-327"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.53543, "pinned": false, "pocs": [{"kind": "writeup", "name": "minerva.crocs.fi.muni.cz/", "url": "https://minerva.crocs.fi.muni.cz/"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "gnutls28", "status": "fixed", "fixed": "3.7.9-2+deb12u3", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.7.9-2+deb12u3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.4-2", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.4-2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.16-8.el8_9.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:1784\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.6 Extended Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.16-5.el8_6.4", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:2044\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.8 Extended Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.16-7.el8_8.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:1997\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.7.6-23.el9_3.4", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:1879\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 9.2 Extended Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.7.6-21.el9_2.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:2889\nrpm -q gnutls", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.5-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.5-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.5-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.5-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2024-591", "url": "https://alas.aws.amazon.com/cve/html/CVE-2024-28834.html", "note": "ALAS2023-2024-591"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2024-12243", "publisher": "Red Hat, Inc.", "title": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing", "summary": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.01292, "kev": false, "added": "2025-02-10", "modified": "2026-10-22T22:17:40.980", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-12243"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.70054, "pinned": false, "pocs": [{"kind": "writeup", "name": "cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.6.13-2ubuntu1.12", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.6.13-2ubuntu1.12\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.7.3-4ubuntu1.6", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.7.3-4ubuntu1.6\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.3-1.1ubuntu3.3", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.3-1.1ubuntu3.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.6-2ubuntu1.1", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.6-2ubuntu1.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.9-2ubuntu1", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.9-2ubuntu1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "gnutls28", "status": "fixed", "fixed": "3.7.9-2+deb12u4", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.7.9-2+deb12u4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.9-2", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.9-2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.16-8.el8_10.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:4051\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.3-6.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:7076\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 9.2 Update Services for SAP Solutions", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.7.6-21.el9_2.4", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:17361\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 9.4 Extended Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.3-4.el9_4.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:8020\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "gnutls", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.12-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.12-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.12-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.11-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-958", "url": "https://alas.aws.amazon.com/cve/html/CVE-2024-12243.html", "note": "ALAS2023-2025-958"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2025-2885", "url": "https://alas.aws.amazon.com/cve/html/CVE-2024-12243.html", "note": "ALAS2-2025-2885"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2024-12133", "publisher": "Red Hat, Inc.", "title": "A flaw in libtasn1 causes inefficient handling of specific certificate data", "summary": "A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0111, "kev": false, "added": "2025-02-10", "modified": "2026-10-22T22:17:40.200", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-12133"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65666, "pinned": false, "pocs": [{"kind": "writeup", "name": "cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.16.0-2ubuntu0.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.16.0-2ubuntu0.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.19.0-3ubuntu0.24.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.19.0-3ubuntu0.24.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.18.0-4ubuntu0.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.18.0-4ubuntu0.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.19.0-3ubuntu0.24.10.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.19.0-3ubuntu0.24.10.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "libtasn1-6", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.19.0-2+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.19.0-2+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "libtasn1-6", "status": "fixed", "fixed": "4.20.0-1", "cmd": "sudo apt update && sudo apt install --only-upgrade libtasn1-6\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libtasn1-6)\" ge \"4.20.0-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.13-5.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:4049\nrpm -q libtasn1", "url": null, "note": null}, {"os": "RHEL 8.4 Advanced Mission Critical Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.14-10.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.4 Advanced Mission Critical Update Support", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.13-3.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q libtasn1", "url": null, "note": null}, {"os": "RHEL 8.4 Extended Update Support Long-Life Add-On", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.14-10.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.4 Extended Update Support Long-Life Add-On", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.13-3.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q libtasn1", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.20.0-r0", "cmd": "apk add --upgrade libtasn1\napk info -v libtasn1", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.20.0-r0", "cmd": "apk add --upgrade libtasn1\napk info -v libtasn1", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.20.0-r0", "cmd": "apk add --upgrade libtasn1\napk info -v libtasn1", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.20.0-r0", "cmd": "apk add --upgrade libtasn1\napk info -v libtasn1", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-989", "url": "https://alas.aws.amazon.com/cve/html/CVE-2024-12133.html", "note": "ALAS2023-2025-989"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2025-2886", "url": "https://alas.aws.amazon.com/cve/html/CVE-2024-12133.html", "note": "ALAS2-2025-2886"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15748", "publisher": "Wordfence", "title": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and in", "summary": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configu", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.06138, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15748"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 66, "tier": "P1", "why": ["Critical severity", "EPSS top 7%: very likely to be exploited", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.93441, "pinned": false, "pocs": [{"kind": "poc", "name": "yora1928/cve-2026-15748 (3 stars)", "url": "https://github.com/yora1928/cve-2026-15748", "stars": 3}, {"kind": "poc", "name": "ubaydev/CVE-2026-15748 (0 stars)", "url": "https://github.com/ubaydev/CVE-2026-15748", "stars": 0}, {"kind": "poc", "name": "0x4cr/CVE-2026-15748 (0 stars)", "url": "https://github.com/0x4cr/CVE-2026-15748", "stars": 0}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-75784", "publisher": "VulDB", "title": "A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01", "summary": "A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01096, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75784"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 62, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.65304, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow", "url": "https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow.py"}, {"kind": "writeup", "name": "github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx", "url": "https://github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx"}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-47627", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00734, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.05"], "fixed": "newer than 26.05", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.05 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47627"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5865"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53888, "pinned": false, "pocs": [{"kind": "poc", "name": "AneKazek/cve-2026-47627 (3 stars)", "url": "https://github.com/AneKazek/cve-2026-47627", "stars": 3}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-38165", "publisher": "MITRE", "title": "A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocrep", "summary": "A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00866, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-38165"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58312, "pinned": false, "pocs": [{"kind": "poc", "name": "AT190510-Cuong/CVE-2026-38165-SSTI- (1 stars)", "url": "https://github.com/AT190510-Cuong/CVE-2026-38165-SSTI-", "stars": 1}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-67919", "publisher": "MITRE", "title": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, instal", "summary": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00926, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67919"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60123, "pinned": false, "pocs": [{"kind": "poc", "name": "k0nnect/halo-cve-2026-67919 (1 stars)", "url": "https://github.com/k0nnect/halo-cve-2026-67919", "stars": 1}, {"kind": "poc", "name": "unpredictable21/halo-2.25.4-CVE-2026-67919 (0 stars)", "url": "https://github.com/unpredictable21/halo-2.25.4-CVE-2026-67919", "stars": 0}, {"kind": "writeup", "name": "gist.github.com/unpredictable21/d392c26986e81a95676f2a370ecb272b", "url": "https://gist.github.com/unpredictable21/d392c26986e81a95676f2a370ecb272b"}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-75627", "publisher": "VulnCheck", "title": "Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated", "summary": "Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager accounts, and register managed systems, gaining control over SSH access to the managed fleet.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00844, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75627"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57586, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-75854", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plug", "summary": "ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without providing credentials, bypassing all security gates.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00887, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75854"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 60, "tier": "P1", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58926, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-m46c-jh3x-xwrp", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-m46c-jh3x-xwrp"}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-24301", "publisher": "Microsoft Corporation", "title": "Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allow", "summary": "Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.04094, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "copilot", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy copilot || rpm -q copilot || copilot --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24301"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["High severity", "EPSS top 9%: very likely to be exploited", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.90698, "pinned": false, "pocs": [{"kind": "poc", "name": "CSOAI-ORG/memory-poisoning-axis (0 stars)", "url": "https://github.com/CSOAI-ORG/memory-poisoning-axis", "stars": 0}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}}, {"id": "CVE-2026-34884", "publisher": "Apache Software Foundation", "title": "SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP.\n\n\n\n\n", "summary": "SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP.\n\n\n\n\n\nThis issue affects Apache SkyWalking MCP: 0.1.0.\n\nUsers are recommended to upgrade to version 0.2.0, which fixes this issue.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0069, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "skywalking mcp", "vendor": "apache", "type": "app", "affected": [">= 0.1.0 and < 0.2.0"], "fixed": "0.2.0", "safe": "before 0.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy skywalking-mcp || rpm -q skywalking-mcp || skywalking-mcp --version"}, {"label": "2. UPGRADE to 0.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade skywalking-mcp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade skywalking-mcp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison skywalking-mcp\nsudo apt install skywalking-mcp=<VERSION_BEFORE_0.1.0>\nsudo apt-mark hold skywalking-mcp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list skywalking-mcp\nsudo dnf downgrade skywalking-mcp-<VERSION_BEFORE_0.1.0>\nsudo dnf versionlock add skywalking-mcp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-34884"}, {"t": "Mailing List, Vendor Advisory", "u": "https://lists.apache.org/thread/s447p6h5dfr02lx17v27phoksgb8mkkp"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.5225, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2026-75094", "publisher": "VulDB", "title": "A flaw has been found in COMFAST CF-N1-S 2.6.0.1", "summary": "A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.03178, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75094"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 57, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.87975, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-67960", "publisher": "MITRE", "title": "An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserC", "summary": "An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00726, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67960"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53596, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-73341", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.", "summary": "Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73341"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46139, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-73366", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.", "summary": "Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73366"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46138, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-73380", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.", "summary": "Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73380"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46132, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-73397", "publisher": "Patchstack", "title": "Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions.", "summary": "Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73397"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46132, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-59940", "publisher": "GitHub, Inc.", "title": "Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities", "summary": "Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON() allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine internal Promise resolver records, causing deserialization side effects with plugins enabled and potentially unintended server-side invocation or remote c", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00812, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59940"}], "cwe": ["CWE-502", "CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.56573, "pinned": false, "pocs": [], "vendors": [{"os": "npm", "pkg": "seroval", "status": "fixed", "fixed": "1.5.3", "cmd": "npm install seroval@\">=1.5.3\"\nnpm ls seroval", "url": "https://github.com/advisories/GHSA-mv8w-475r-vwqw", "note": "vulnerable: <= 1.5.2"}], "vendors_checked": "2026-10-23T16:40:36.324765+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73996", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.", "summary": "Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00522, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73996"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43476, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-75852", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-proto", "summary": "ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00663, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75852"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51117, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278"}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2026-75783", "publisher": "VulDB", "title": "A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01", "summary": "A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00598, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75783"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact"], "fix": true, "watched": false, "epss_pct": 0.47988, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overf", "url": "https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py"}, {"kind": "writeup", "name": "github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd", "url": "https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73373", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The defau", "summary": "Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00649, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 1.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73373"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1077-20260810-core-unrestricted-uploads-of-shtml-files.html"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50463, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-71878", "publisher": "Mandiant Inc.", "title": "Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF In", "summary": "Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00858, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71878"}], "cwe": ["CWE-306"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58075, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-75877", "publisher": "VulDB", "title": "A flaw has been found in TRENDnet TV-IP751WIC 11.03.03", "summary": "A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00854, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75877"}], "cwe": ["CWE-119", "CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.57908, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/meishigana/CVE/blob/main/team15_20260702/09_751wic-apd-password-overflow/poc/po", "url": "https://github.com/meishigana/CVE/blob/main/team15_20260702/09_751wic-apd-password-overflow/poc/poc-password-overflow.py"}, {"kind": "writeup", "name": "github.com/meishigana/CVE/tree/main/team15_20260702/09_751wic-apd-password-overflow", "url": "https://github.com/meishigana/CVE/tree/main/team15_20260702/09_751wic-apd-password-overflow"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32470", "publisher": "Patchstack", "title": "Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.", "summary": "Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00564, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32470"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46137, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-71879", "publisher": "Mandiant Inc.", "title": "Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publi", "summary": "Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00858, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71879"}], "cwe": ["CWE-288"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.58075, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-11801", "publisher": "Wordfence", "title": "The WPAdverts \u2013 Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions ", "summary": "The WPAdverts \u2013 Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve internal site configuration data exposed by the classifieds-types REST endpoint, including registered post types, labels, associated taxonomies, form", "cvss": 7.5, "sev": "HIGH", "epss": 0.01642, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11801"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.76237, "pocs": [{"kind": "nuclei", "name": "WPAdverts <= 2.3.2 - Information Disclosure", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11801.yaml"}], "pinned": false, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-66046", "publisher": "VulnCheck", "title": "Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in t", "summary": "Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType->defaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause e", "cvss": 7.5, "sev": "HIGH", "epss": 0.00742, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "libexpat", "vendor": "libexpat project", "type": "app", "affected": ["<= 2.8.3"], "fixed": "newer than 2.8.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libexpat || rpm -q libexpat || libexpat --version"}, {"label": "2. UPGRADE to newer than 2.8.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libexpat"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libexpat"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66046"}, {"t": "Exploit, Patch", "u": "https://github.com/libexpat/libexpat/pull/1321"}, {"t": "Exploit, Patch", "u": "https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5419, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/libexpat/libexpat/pull/1321", "url": "https://github.com/libexpat/libexpat/pull/1321"}], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "expat", "status": "fixed", "fixed": "2.2.9-1ubuntu0.8+esm3", "cmd": "sudo apt update && sudo apt install --only-upgrade expat\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' expat)\" ge \"2.2.9-1ubuntu0.8+esm3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "expat", "status": "fixed", "fixed": "2.4.7-1ubuntu0.9", "cmd": "sudo apt update && sudo apt install --only-upgrade expat\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' expat)\" ge \"2.4.7-1ubuntu0.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "expat", "status": "fixed", "fixed": "2.6.1-2ubuntu0.6", "cmd": "sudo apt update && sudo apt install --only-upgrade expat\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' expat)\" ge \"2.6.1-2ubuntu0.6\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "apache2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "apache2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "expat", "status": "fixed", "fixed": "2.5.0-1+deb12u4", "cmd": "sudo apt update && sudo apt install --only-upgrade expat\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' expat)\" ge \"2.5.0-1+deb12u4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "expat", "status": "fixed", "fixed": "2.9.0-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade expat\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' expat)\" ge \"2.9.0-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "expat", "status": "fixed", "fixed": "expat-2.7.3-1.el10_2.5", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74001\nrpm -q expat", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "expat", "status": "fixed", "fixed": "expat-2.5.0-4.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:72448\nrpm -q expat", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "expat", "status": "fixed", "fixed": "expat-2.5.0-6.el9_8.5", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:72663\nrpm -q expat", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "expat", "status": "fixed", "fixed": "expat-2.8.4-r0", "cmd": "apk add --upgrade expat\napk info -v expat", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "expat", "status": "fixed", "fixed": "expat-2.8.4-r0", "cmd": "apk add --upgrade expat\napk info -v expat", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "expat", "status": "fixed", "fixed": "expat-2.8.4-r0", "cmd": "apk add --upgrade expat\napk info -v expat", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "expat", "status": "fixed", "fixed": "expat-2.8.4-r0", "cmd": "apk add --upgrade expat\napk info -v expat", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2157", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-66046.html", "note": "ALAS2023-2026-2157"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3965", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-66046.html", "note": "ALAS2-2026-3965"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3965 (important): expat", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3965.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3880 (important): thunderbird", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3880.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2FIREFOX-2026-064 (important): firefox", "url": "https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-064.html", "date": "2026-08-31"}], "buzz": 1, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-62357", "publisher": "GitHub, Inc.", "title": "Dragonfly is an in-memory data store built for modern application workloads", "summary": "Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeof(int64_t) overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the unbounded dimensions, which allows an unauthenticated remote client to corrupt or disclose adjacent heap memory and crash the server. This issue is fi", "cvss": 8.8, "sev": "HIGH", "epss": 0.00524, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62357"}], "cwe": ["CWE-190"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43605, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/dragonflydb/dragonfly/pull/7647", "url": "https://github.com/dragonflydb/dragonfly/pull/7647"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true}, {"id": "CVE-2026-57580", "publisher": "GitHub, Inc.", "title": "authentik is an open-source identity provider", "summary": "authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound SAML Source configured with the non-default USERNAME_LINK or EMAIL_LINK user-matching mode interprets an XML comment in a NameID differently from the identity provider's signed assertion. An attacker with an account on the source identity provider who can set the account's NameID can inject an XML comment that truncates the value used by authentik to the tex", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.0059, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-57580"}], "cwe": ["CWE-436"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47514, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-67443", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is true, and nodeRedAuthMode is secure, a remote unauthenticated attacker can obtain a signed guest token from POST /api/heartbeat and use it to access the R", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00686, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67443"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52088, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-32444", "publisher": "Patchstack", "title": "Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.", "summary": "Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00789, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32444"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.55793, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69219", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX_VALUE and allocate a byte array before checking the bytes available in the frame. A malicious AMQP peer can send a LongString or byte-array field with type tag S and a decl", "cvss": 8.7, "sev": "HIGH", "epss": 0.00725, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69219"}], "cwe": ["CWE-789"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "com.rabbitmq:amqp-client", "status": "fixed", "fixed": "5.33.1", "cmd": "Set com.rabbitmq:amqp-client to 5.33.1 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-68mj-5wr7-6fgg", "note": "vulnerable: <= 5.33.0"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69220", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively for AMQP table type F and AMQP array type A values without a nesting-depth limit. A malicious AMQP server or network intermediary can send approximately 5", "cvss": 8.7, "sev": "HIGH", "epss": 0.00725, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69220"}], "cwe": ["CWE-674"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53576, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Maven", "pkg": "com.rabbitmq:amqp-client", "status": "fixed", "fixed": "5.33.1", "cmd": "Set com.rabbitmq:amqp-client to 5.33.1 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-93j5-89vc-pph4", "note": "vulnerable: <= 5.33.0"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47628", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation ", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00672, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.05"], "fixed": "newer than 26.05", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.05 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47628"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5865"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51528, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47629", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00672, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.05"], "fixed": "newer than 26.05", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.05 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47629"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5865"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.51528, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47719", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY Socket.IO handlers in server/runtime/index.js omit isSocketWriteAuthorized and accept attacker-controlled property.address or endpoint connection data. A remote unauthenticated attacker can make server/runtime/devices/httprequest/index.js call axios.get against arbitrary HTTP or HTTPS destinations, connect to rea", "cvss": 8.2, "sev": "HIGH", "epss": 0.00592, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47719"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4762, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "fuxa-server", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-w86f-rf9w-h3x6", "note": "vulnerable: <= 1.1.14-1243"}, {"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75827", "publisher": "VulnCheck", "title": "Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function ", "summary": "Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error_log function through a data directive to append PHP payloads to web-accessible files, achieving remote code execution.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00859, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75827"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.58079, "pinned": false, "pocs": [{"kind": "poc", "name": "abraxas/CVE-2026-75827 (0 stars)", "url": "https://github.com/abraxas/CVE-2026-75827", "stars": 0}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "fixed", "fixed": "2.0.15", "cmd": "composer require \"getgrav/grav:>=2.0.15\"", "url": "https://github.com/advisories/GHSA-f8wv-xp27-6gq7", "note": "vulnerable: <= 2.0.14"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63639", "publisher": "GitHub, Inc.", "title": "Valkey is a distributed key-value database", "summary": "Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when one consumer is deleted while another still references the shared NACK and potentially allowing remote code execution. This issue is fixed in versions 7.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0117, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63639"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.67173, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Ubuntu 24.04", "pkg": "valkey", "status": "fixed", "fixed": "7.2.13+dfsg1-0ubuntu0.1+esm1", "cmd": "sudo apt update && sudo apt install --only-upgrade valkey\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' valkey)\" ge \"7.2.13+dfsg1-0ubuntu0.1+esm1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "valkey", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.11-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:64796\nrpm -q valkey", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.11-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:68601\nrpm -q valkey", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.10-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:64807\nrpm -q valkey", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2011", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63639.html", "note": "ALAS2023-2026-2011"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73381", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.", "summary": "Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00549, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73381"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45179, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:30:15.391481+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75856", "publisher": "VulnCheck", "title": "CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that ", "summary": "CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00495, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75856"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41576, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-6v2g-fpxh-pmmh", "note": "vulnerable: >= 0.8.5, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-6v2g-fpxh-pmmh", "note": "vulnerable: >= 0.8.5, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-6v2g-fpxh-pmmh", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-6v2g-fpxh-pmmh", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52723", "publisher": "GitHub, Inc.", "title": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's ", "summary": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signed_vau_server_pub_keys and AUT_VAU_CertData certificate path to independent trusted material. A network-positioned attacker between the DiGA backend and the ePA system can intercept", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52723"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31215, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50161", "publisher": "GitHub, Inc.", "title": "libre is a generic library for real-time communications with asynchronous input and output support", "summary": "libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expression 4 + hdr->len can wrap when hdr->len is close to UINT64_MAX, causing the mbuf_get_left() bounds check to pass. The subsequent XOR unmasking loop the", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00524, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50161"}], "cwe": ["CWE-190", "CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43603, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}, {"os": "Debian 12", "pkg": "libre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libre", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52735", "publisher": "GitHub, Inc.", "title": "ZEBRA is a Zcash node written entirely in Rust", "summary": "ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2sh_input_sigop_count used the pure-Rust script::Code::sig_op_count path, whose try_fold parser stops at disabled opcodes such as OP_CODESEPARATOR and returns only the partial coun", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00507, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52735"}], "cwe": ["CWE-684"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42371, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "zebra-script", "status": "fixed", "fixed": "7.0.0", "cmd": "Set zebra-script >= 7.0.0 in Cargo.toml, then run: cargo update -p zebra-script", "url": "https://github.com/advisories/GHSA-gf9r-m956-97qx", "note": "vulnerable: <= 6.0.1"}, {"os": "Rust (Cargo)", "pkg": "zebrad", "status": "fixed", "fixed": "4.5.0", "cmd": "Set zebrad >= 4.5.0 in Cargo.toml, then run: cargo update -p zebrad", "url": "https://github.com/advisories/GHSA-gf9r-m956-97qx", "note": "vulnerable: <= 4.4.1"}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52736", "publisher": "GitHub, Inc.", "title": "ZEBRA is a Zcash node written entirely in Rust", "summary": "ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canonical body for the same block header hash. ZIP-244 permits the attacker to mutate coinbase scriptSig authentication data while retaining the transaction identifiers, merkle root, and block header hash, so the poisoned body fails later commitment validation but shares the can", "cvss": 8.7, "sev": "HIGH", "epss": 0.0061, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52736"}], "cwe": ["CWE-459"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4857, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "zebra-state", "status": "fixed", "fixed": "7.0.0", "cmd": "Set zebra-state >= 7.0.0 in Cargo.toml, then run: cargo update -p zebra-state", "url": "https://github.com/advisories/GHSA-4m69-67m6-prqp", "note": "vulnerable: <= 6.0.0"}, {"os": "Rust (Cargo)", "pkg": "zebrad", "status": "fixed", "fixed": "4.5.0", "cmd": "Set zebrad >= 4.5.0 in Cargo.toml, then run: cargo update -p zebrad", "url": "https://github.com/advisories/GHSA-4m69-67m6-prqp", "note": "vulnerable: <= 4.4.1"}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75935", "publisher": "AMZN", "title": "Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow re", "summary": "Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation.\n\n\n\nTo remediate this issue, users should upgrade to version 1.12.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75935"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48531, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75936", "publisher": "AMZN", "title": "Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1", "summary": "Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression.\n\n\n\nTo remediate this issue, users should upgrade to version 1.12.0 and configure withGzipDecompressionEnabled(false) and/or set an explicit withMaximumBufferSize() when parsing un", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75936"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.48518, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75915", "publisher": "VulnCheck", "title": "CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_execution to", "summary": "CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_execution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API keys, cloud credentials, and authentication tokens back to the model context.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00678, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75915"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51791, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-h539-c7r8-3xq4", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-h539-c7r8-3xq4"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-h539-c7r8-3xq4", "note": "vulnerable: >= 0.8.32, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-h539-c7r8-3xq4", "note": "vulnerable: >= 0.8.32, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-h539-c7r8-3xq4", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-h539-c7r8-3xq4", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73187", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.", "summary": "Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73187"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33129, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-73355", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.", "summary": "Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73355"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33137, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-73365", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.", "summary": "Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.004, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73365"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.33136, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-67920", "publisher": "MITRE", "title": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl", "summary": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir(), and org.springframework.util.FileSystemUtils.copyRecursively() components", "cvss": 8.8, "sev": "HIGH", "epss": 0.00941, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67920"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.60633, "pinned": false, "pocs": [{"kind": "poc", "name": "unpredictable21/halo-2.25.4-backup-write-CVE-2026-67920 (0 stars)", "url": "https://github.com/unpredictable21/halo-2.25.4-backup-write-CVE-2026-67920", "stars": 0}], "ssvc": null, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-47606", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute pa", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00739, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.05"], "fixed": "newer than 26.05", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.05 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47606"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5865"}], "cwe": ["CWE-36"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.54092, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-75851", "publisher": "VulnCheck", "title": "ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authentic", "summary": "ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP command is submitted with awaitResponse:false, it executes on an async worker whose DatabaseContext has no bound user, causing the scripting authorization gate to become a no-op. A user with only read access to a single database can submit an asynchronous JavaScript (lang", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00391, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75851"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.32071, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-5j4x-3jfw-8xv3", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-5j4x-3jfw-8xv3"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75853", "publisher": "VulnCheck", "title": "ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authent", "summary": "ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authentication (SASL PLAIN) but performs no authorization: it never checks database access permissions (canAccessToDatabase) and never binds the authenticated principal into the engine. As a result, any valid server credential \u2014 even one provisioned for zero or one unrelated database \u2014 can read, write, and drop data in any database on the server", "cvss": 8.8, "sev": "HIGH", "epss": 0.00589, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75853"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.47474, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-c287-v325-j5jx", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-c287-v325-j5jx"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75913", "publisher": "VulnCheck", "title": "CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerabil", "summary": "CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output= is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with p", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00477, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75913"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.40267, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-7j5w-7r7x-9v27", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-7j5w-7r7x-9v27"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-7j5w-7r7x-9v27", "note": "vulnerable: >= 0.3.27, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-7j5w-7r7x-9v27", "note": "vulnerable: >= 0.3.27, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-7j5w-7r7x-9v27", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-7j5w-7r7x-9v27", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32463", "publisher": "Patchstack", "title": "Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.", "summary": "Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00479, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32463"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.4043, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32474", "publisher": "Patchstack", "title": "Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.", "summary": "Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00479, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32474"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40431, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66627", "publisher": "Patchstack", "title": "Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd", "summary": "Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion.\n\nThis issue affects GP Premium: from n/a through 2.5.5.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00479, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66627"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40427, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75837", "publisher": "VulnCheck", "title": "Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: ad", "summary": "Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a group with access[admin][super]=true to escalate to super-admin, gaining scheduler and Twig evaluation capabilities.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75837"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.41559, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx", "url": "https://github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "fixed", "fixed": "2.0.14", "cmd": "composer require \"getgrav/grav:>=2.0.14\"", "url": "https://github.com/advisories/GHSA-xhfv-7758-r9hx", "note": "vulnerable: < 2.0.14"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75855", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create d", "summary": "ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names containing ../ sequences to create databases at arbitrary filesystem paths or recursively delete directories the server process can access.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00548, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75855"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45137, "pinned": false, "pocs": [{"kind": "poc", "name": "pervinzahidli/CVE-2026-75855 (0 stars)", "url": "https://github.com/pervinzahidli/CVE-2026-75855", "stars": 0}, {"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-qwgr-2c45-63xx", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-qwgr-2c45-63xx"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49221", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend digital asset operations allow a low-privileged Vendor to access digital assets linked to another Vendor's products. The admin/controller/product/digital-asset.php and admin/controller/product/digital-assets.php controllers and the admin/sql/sqlite/digital_asset.sql data queries use a caller-controlled digital_as", "cvss": 8.8, "sev": "HIGH", "epss": 0.00551, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49221"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45302, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/givanz/Vvveb/security/advisories/GHSA-chpc-xj4m-9g3j", "url": "https://github.com/givanz/Vvveb/security/advisories/GHSA-chpc-xj4m-9g3j"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49228", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Vendor to access products owned by another Vendor. The admin/controller/product/products.php controller accepts a caller-controlled product_id for duplicate and delete actions, and admin/sql/sqlite/product.sql loads and mutates products without consistently applying the c", "cvss": 8.8, "sev": "HIGH", "epss": 0.00551, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49228"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45302, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/givanz/Vvveb/security/advisories/GHSA-j5jv-wvpg-gfh9", "url": "https://github.com/givanz/Vvveb/security/advisories/GHSA-j5jv-wvpg-gfh9"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52481", "publisher": "MITRE", "title": "An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive informa", "summary": "An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function", "cvss": 7.5, "sev": "HIGH", "epss": 0.00515, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52481"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43008, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/AshtonKopelevich/SJ-GPS-PRO-F11-Vulnerability", "url": "https://github.com/AshtonKopelevich/SJ-GPS-PRO-F11-Vulnerability"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71424", "publisher": "GitHub, Inc.", "title": "Onyx is an open-source AI platform", "summary": "Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through au", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00488, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71424"}], "cwe": ["CWE-200", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.4113, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822", "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74904", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/bloc", "summary": "SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/block.go (including getRefText, checkBlockExist, and getBlockBreadcrumb). These handlers are gated only by basic authentication (model.CheckAuth) and lack publish-access filtering, allowing anonymous publish-mode readers to disclose private block content-derived text, structural metadata, and existence information for arbitrary block IDs acro", "cvss": 7.5, "sev": "HIGH", "epss": 0.00449, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74904"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38062, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/siyuan-note/siyuan/kernel", "status": "fixed", "fixed": "0.0.0-20260804015139-bd067a4fe9b2", "cmd": "go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260804015139-bd067a4fe9b2\ngo list -m github.com/siyuan-note/siyuan/kernel", "url": "https://github.com/advisories/GHSA-4vpg-gwqq-w44c", "note": "vulnerable: < 0.0.0-20260804015139-bd067a4fe9b2"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75836", "publisher": "VulnCheck", "title": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to", "summary": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the authorize requirement in MenubarController::executeAction(). While the GET /menubar/items listing endpoint correctly filters menubar items via userPassesAuthorize(), the POST /api/v1/menubar/actions/{plugin}/{action} endpoint only checks the baseline api.access permission and never evaluates the authorize field a plugin regis", "cvss": 8.8, "sev": "HIGH", "epss": 0.00469, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75836"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.39676, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28192", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.", "summary": "Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00427, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28192"}], "cwe": ["CWE-434"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.35945, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28570", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.", "summary": "Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28570"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39489, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32464", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.", "summary": "Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32464"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39487, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73400", "publisher": "Patchstack", "title": "Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.", "summary": "Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00467, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73400"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39489, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75872", "publisher": "Secur0", "title": "HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote ", "summary": "HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the first_name field of the subscription request, which is interpolated unescaped into the double opt-in verification email.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00741, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75872"}], "cwe": ["CWE-80"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.5414, "pinned": false, "pocs": [{"kind": "writeup", "name": "secur0.com/en/cna/cve-list/cve-2026-75872-html-injection-in-mailerup-double-optin-verifica", "url": "https://secur0.com/en/cna/cve-list/cve-2026-75872-html-injection-in-mailerup-double-optin-verification-email"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-54730", "publisher": "GitHub, Inc.", "title": "authentik is an open-source identity provider", "summary": "authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google Chrome device-trust stages advance the flow without confirming that the out-of-band device attestation actually ran. Affected enterprise deployments place either a Google Chrome Endpoint stage with mode set to REQUIRED or the deprecated Google Chrome Device Trust Connector stage in an authentication flow. The device attestation occurs in a verific", "cvss": 8.6, "sev": "HIGH", "epss": 0.0068, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54730"}], "cwe": ["CWE-284", "CWE-807"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.51857, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61574", "publisher": "GitHub, Inc.", "title": "authentik is an open-source identity provider", "summary": "authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the Remote Access Control endpoint list returns every configured endpoint to any authenticated user regardless of which applications the user may access, and the response includes connection settings that can contain stored credentials. The endpoint listing does not apply the access controls governing the endpoints, and the connection flow does not confirm that an endp", "cvss": 8.8, "sev": "HIGH", "epss": 0.00624, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61574"}], "cwe": ["CWE-639", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.49265, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52829", "publisher": "GitHub, Inc.", "title": "ZEBRA is a Zcash node written entirely in Rust", "summary": "ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-stack listener configuration. The handshake path canonicalized an IPv4-mapped IPv6 PeerSocketAddr such as ::ffff:127.0.0.1 to plain IPv4 before storing it through MetaAddr::new_connected, but the mempool misbehavior path forwarded the raw transient address to MetaAddrChange::", "cvss": 7.5, "sev": "HIGH", "epss": 0.00609, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52829"}], "cwe": ["CWE-617", "CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.48534, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "zebra-network", "status": "fixed", "fixed": "7.0.0", "cmd": "Set zebra-network >= 7.0.0 in Cargo.toml, then run: cargo update -p zebra-network", "url": "https://github.com/advisories/GHSA-63wg-wjjj-7cp8", "note": "vulnerable: <= 6.0.0"}, {"os": "Rust (Cargo)", "pkg": "zebrad", "status": "fixed", "fixed": "4.5.0", "cmd": "Set zebrad >= 4.5.0 in Cargo.toml, then run: cargo update -p zebrad", "url": "https://github.com/advisories/GHSA-63wg-wjjj-7cp8", "note": "vulnerable: <= 4.4.1"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75079", "publisher": "VulDB", "title": "A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0", "summary": "A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_subject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75079"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36286, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/i-QvQ-i/first-OvO/issues/6", "url": "https://github.com/i-QvQ-i/first-OvO/issues/6"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75080", "publisher": "VulDB", "title": "A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0", "summary": "A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_subject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75080"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36279, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/i-QvQ-i/first-OvO/issues/7", "url": "https://github.com/i-QvQ-i/first-OvO/issues/7"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75089", "publisher": "VulDB", "title": "A weakness has been identified in PHPGurukul Complaint Management System 1.0", "summary": "A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75089"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36295, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/niaoniaollll/cve/issues/3", "url": "https://github.com/niaoniaollll/cve/issues/3"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75840", "publisher": "VulnCheck", "title": "ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowli", "summary": "ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile classes and read arbitrary files on the host system as the ArcadeDB server process.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75840"}], "cwe": ["CWE-1025"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3648, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75625", "publisher": "VulnCheck", "title": "Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before commi", "summary": "Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with forged CRC32 corrections that passes per-piece checks, poisoning the cache with attacker-chosen container image layers or manifests that are re-seeded and", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00241, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75625"}], "cwe": ["CWE-354"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14442, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/uber/kraken/issues/638", "url": "https://github.com/uber/kraken/issues/638"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63642", "publisher": "GitHub, Inc.", "title": "MagicMirror\u00b2 is an open source modular smart mirror platform", "summary": "MagicMirror\u00b2 is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification through the unauthenticated Socket.IO namespace /newsfeed and performs fetch(url, { method: \"HEAD\" }) without validating the attacker-controlled URL. The helper returns ARTICLE_URL_STATUS containing the URL and framing result, providing a response and timing oracle that", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00496, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63642"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41686, "pinned": false, "pocs": [{"kind": "poc", "name": "hakaioffsec/CVE-2026-63642 (1 stars)", "url": "https://github.com/hakaioffsec/CVE-2026-63642", "stars": 1}, {"kind": "writeup", "name": "github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-998g-7v5w-cr7g", "url": "https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-998g-7v5w-cr7g"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "magicmirror", "status": "fixed", "fixed": "2.37.0", "cmd": "npm install magicmirror@\">=2.37.0\"\nnpm ls magicmirror", "url": "https://github.com/advisories/GHSA-998g-7v5w-cr7g", "note": "vulnerable: < 2.37.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15585", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software ", "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal.\n\nThis issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00503, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15585"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42134, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75843", "publisher": "VulnCheck", "title": "ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in be", "summary": "ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in beginTransaction, allowing authenticated readers to execute JavaScript commands without scripting authorization checks. Attackers can execute executeCommand with a transaction ID to run unrestricted JavaScript that creates server-wide administrator accounts.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75843"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.31193, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-p29f-345w-4qwf", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-p29f-345w-4qwf"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32465", "publisher": "Patchstack", "title": "Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.", "summary": "Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32465"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43194, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73350", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.", "summary": "Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73350"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3449, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74012", "publisher": "Patchstack", "title": "Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection.\n\nThis issue affects Taxo", "summary": "Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection.\n\nThis issue affects TaxoPress: from n/a through 3.51.0.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00518, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74012"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43193, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75859", "publisher": "VulnCheck", "title": "CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowin", "summary": "CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75859"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43993, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95"}], "ssvc": null, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-62f5-cp2p-vq95", "note": "vulnerable: >= 0.8.8, < 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-62f5-cp2p-vq95", "note": "vulnerable: >= 0.8.8, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-62f5-cp2p-vq95", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-62f5-cp2p-vq95", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75914", "publisher": "VulnCheck", "title": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails t", "summary": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75914"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43992, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w"}], "ssvc": null, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-w7wx-5q49-r59w", "note": "vulnerable: >= 0.8.32, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-w7wx-5q49-r59w", "note": "vulnerable: >= 0.8.32, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-w7wx-5q49-r59w", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-w7wx-5q49-r59w", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50577", "publisher": "GitHub, Inc.", "title": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's ", "summary": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves request_counter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request counter causes the server side to reuse AES-GCM nonce and key combinations across responses. A network attacker who collects repeated ciphertexts can recover ", "cvss": 7.4, "sev": "HIGH", "epss": 0.00513, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50577"}], "cwe": ["CWE-323"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42916, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75130", "publisher": "VulnCheck", "title": "Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious in", "summary": "Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the Custom AI Instructions feature served via the MCP server. Attackers can poison the custom instructions to exfiltrate credentials from environment files to an attacker-controlled service and perform destructive file deletion on the victim's machine when t", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.0049, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75130"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.41217, "pinned": false, "pocs": [{"kind": "writeup", "name": "noma.security/blog/contextcrush-context7-the-mcp-server-vulnerability/", "url": "https://noma.security/blog/contextcrush-context7-the-mcp-server-vulnerability/"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75626", "publisher": "VulnCheck", "title": "SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server bann", "summary": "SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is opened, potentially stealing API keys.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75626"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.25009, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/smicallef/spiderfoot/issues/2012", "url": "https://github.com/smicallef/spiderfoot/issues/2012"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74906", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing end", "summary": "SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list instead of the disabled list. Anonymous visitors can discover and read content from documents explicitly marked as forbidden from publishing by accessing search, backlink, asset content, saved criteria, recent documents, graph, and tag endpoints.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74906"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30457, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49226", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filter[admin_id] to replace the server-selected admin_id restriction and accepts a caller-controlled post_id for duplicate and delete actions, while admin/sql/sqlite/pos", "cvss": 8.3, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49226"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.40477, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/givanz/Vvveb/security/advisories/GHSA-xxx7-8f3v-g9p6", "url": "https://github.com/givanz/Vvveb/security/advisories/GHSA-xxx7-8f3v-g9p6"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49224", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controller and admin/sql/sqlite/post_content_revision.sql queries trust caller-controlled post_id, language_id, and created_at values without consistently applyi", "cvss": 8.3, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49224"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.40452, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/givanz/Vvveb/security/advisories/GHSA-88w5-4x93-48rf", "url": "https://github.com/givanz/Vvveb/security/advisories/GHSA-88w5-4x93-48rf"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50143", "publisher": "GitHub, Inc.", "title": "The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and ", "summary": "The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to", "cvss": 8.1, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50143"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.4115, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/apify/apify-mcp-server/commit/ef686d77da3d3c86c30b2ae24218d756aa38e09c", "url": "https://github.com/apify/apify-mcp-server/commit/ef686d77da3d3c86c30b2ae24218d756aa38e09c"}, {"kind": "writeup", "name": "github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm", "url": "https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "@apify/actors-mcp-server", "status": "fixed", "fixed": "0.10.11", "cmd": "npm install @apify/actors-mcp-server@\">=0.10.11\"\nnpm ls @apify/actors-mcp-server", "url": "https://github.com/advisories/GHSA-6gr2-qh89-hxwm", "note": "vulnerable: < 0.10.11"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-56684", "publisher": "GitHub, Inc.", "title": "Valkey is a distributed key-value database", "summary": "Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00888, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56684"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.58945, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 24.04", "pkg": "valkey", "status": "fixed", "fixed": "7.2.13+dfsg1-0ubuntu0.1+esm1", "cmd": "sudo apt update && sudo apt install --only-upgrade valkey\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' valkey)\" ge \"7.2.13+dfsg1-0ubuntu0.1+esm1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "valkey", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.11-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:64796\nrpm -q valkey", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.11-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:68601\nrpm -q valkey", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "valkey", "status": "fixed", "fixed": "valkey-8.0.10-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:64807\nrpm -q valkey", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2011", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-56684.html", "note": "ALAS2023-2026-2011"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73356", "publisher": "Patchstack", "title": "Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.", "summary": "Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73356"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29845, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73997", "publisher": "Patchstack", "title": "Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions.", "summary": "Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73997"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38914, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73337", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient sta", "summary": "Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00464, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73337"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1074-20260807-core-mfa-authentication-bypass.html"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39276, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71573", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper i", "summary": "Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests.", "cvss": 8.3, "sev": "HIGH", "epss": 0.00342, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71573"}, {"t": "Vendor Advisory, Broken Link", "u": "https://developer.joomla.org/security-centre/20260802-core-improper-cors-origin-validation.html"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2652, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74038", "publisher": "VulnCheck", "title": "Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers", "summary": "Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as \"..\" through the enrollment port. Attackers exploit insufficient validation in OS_IsValidName() and unsafe path concatenation in delete_diff() to resolve the traversal to the parent queue directory, causing its subdirectories to be removed and stopping all ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00546, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "wazuh", "vendor": "wazuh", "type": "app", "affected": [">= 4.0.0 and < 4.14.6"], "fixed": "4.14.6", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wazuh || rpm -q wazuh || wazuh --version"}, {"label": "2. UPGRADE to 4.14.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wazuh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wazuh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wazuh\nsudo apt install wazuh=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold wazuh"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wazuh\nsudo dnf downgrade wazuh-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add wazuh"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74038"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/wazuh/wazuh/pull/35833"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-573w-mqw4-jvmr"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-573w-mqw4-jvmr"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.45021, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/wazuh/wazuh/security/advisories/GHSA-573w-mqw4-jvmr", "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-573w-mqw4-jvmr"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53455", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_components/blueprint_studio/backend/git_manager.py by interpolating the configured Git username and token directly into executable helper script content without validating credential values. An attacker able to set Git credentials could include newline characters or shell s", "cvss": 8.6, "sev": "HIGH", "epss": 0.00501, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53455"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42015, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75828", "publisher": "VulnCheck", "title": "Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the detectXss() function where unpa", "summary": "Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the detectXss() function where unpaired quotes in unquoted attribute values bypass event-handler detection. Authenticated editors can inject event handlers like onerror= that pass validation and execute in visitor browsers when page content is rendered.", "cvss": 8.7, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75828"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.31832, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "fixed", "fixed": "2.0.15", "cmd": "composer require \"getgrav/grav:>=2.0.15\"", "url": "https://github.com/advisories/GHSA-vfmf-q6x9-cw96", "note": "vulnerable: <= 2.0.14"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-45733", "publisher": "GitHub, Inc.", "title": "Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal kno", "summary": "Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.103.0, the #iconClass label value is returned raw by getNoteIcon() and inserted without HTML attribute encoding into class attributes in apps/client/src/widgets/quick_search.ts and apps/client/src/services/note_autocomplete.ts, allowing a stored payload to execute automatically when a victim opens a new tab or use", "cvss": 8.3, "sev": "HIGH", "epss": 0.00433, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-45733"}], "cwe": ["CWE-79", "CWE-83", "CWE-693"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.36581, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/TriliumNext/Trilium/security/advisories/GHSA-h45q-4qc4-8hhg", "url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-h45q-4qc4-8hhg"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75898", "publisher": "VulnCheck", "title": "RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow \"Invoke\" comp", "summary": "RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow \"Invoke\" component (agent/component/invoke.py). The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or requests.put without calling the shared assert_url_is_safe validator or pinning the resolved address, unlike the crawler, SearXNG, file-upload, and RSS fe", "cvss": 8.5, "sev": "HIGH", "epss": 0.00393, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75898"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.32291, "pinned": false, "pocs": [{"kind": "poc", "name": "t3bik/CVE-2026-75898 (0 stars)", "url": "https://github.com/t3bik/CVE-2026-75898", "stars": 0}, {"kind": "writeup", "name": "github.com/infiniflow/ragflow/issues/15425", "url": "https://github.com/infiniflow/ragflow/issues/15425"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63337", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill, setJavaReturnType, and computeReturnTypeAsJavaClass to Class.forName(javaReturnType) with initialization enabled. An attacker able to answer the JsonRpc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00557, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63337"}], "cwe": ["CWE-470"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.45681, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Maven", "pkg": "com.rabbitmq:amqp-client", "status": "fixed", "fixed": "5.33.0", "cmd": "Set com.rabbitmq:amqp-client to 5.33.0 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-6g32-pxv4-2wfj", "note": "vulnerable: < 5.33.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75778", "publisher": "VulDB", "title": "A vulnerability was identified in code-projects Task Management System 1.0", "summary": "A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00431, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75778"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36284, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/niaoniaollll/cve/issues/5", "url": "https://github.com/niaoniaollll/cve/issues/5"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28191", "publisher": "Patchstack", "title": "Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation.\n\nThis issue aff", "summary": "Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation.\n\nThis issue affects The Grid: from n/a through 2.8.0.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00417, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28191"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34976, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32468", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.", "summary": "Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32468"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34802, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-12564", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the AAP Controller's HashiCorp Vault credential plugin", "summary": "A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00348, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12564"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.27264, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55839", "publisher": "GitHub, Inc.", "title": "Kestra is an open-source, event-driven orchestration platform", "summary": "Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, Kestra's custom Markdown parser in ui/src/utils/markdown_plugins/link.ts allows a user with permission to create or update a Flow description to inject JavaScript event-handler attributes through the custom [[link]] syntax, causing stored cross-site scripting when another user opens the description or information panel in the Flow list. This issue is fixed in version ", "cvss": 8.7, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55839"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Maven", "pkg": "io.kestra:kestra", "status": "fixed", "fixed": "1.3.24", "cmd": "Set io.kestra:kestra to 1.3.24 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-34pm-923j-7wf8", "note": "vulnerable: < 1.3.24"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75926", "publisher": "VulnCheck", "title": "Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through ", "summary": "Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in config/security/securityConfig.go, which makes nodePermissionArgs in common/hexec/exec.go append --allow-child-process whenever the tool being launched is named tailwindcss. Tailw", "cvss": 8.6, "sev": "HIGH", "epss": 0.00281, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "hugo", "vendor": "gohugo", "type": "app", "affected": [">= 0.162.0 and < 0.165.0"], "fixed": "0.165.0", "safe": "before 0.162.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hugo || rpm -q hugo || hugo --version"}, {"label": "2. UPGRADE to 0.165.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade hugo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade hugo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.162.0 (Debian / Ubuntu)", "cmd": "apt-cache madison hugo\nsudo apt install hugo=<VERSION_BEFORE_0.162.0>\nsudo apt-mark hold hugo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hugo\nsudo dnf downgrade hugo-<VERSION_BEFORE_0.162.0>\nsudo dnf versionlock add hugo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75926"}, {"t": "Patch", "u": "https://github.com/gohugoio/hugo/commit/8a55df7af2e6da31297245cc54fa2e3b521d93e8"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/gohugoio/hugo/issues/15178"}, {"t": "Exploit, Patch", "u": "https://www.vulncheck.com/advisories/hugo-to-x-node-permission-model-bypass-via-default-tailwindcss-child-process-grant"}], "cwe": ["CWE-1188"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.19532, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "hugo", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "hugo", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53533", "publisher": "GitHub, Inc.", "title": "aiosmtplib is an asynchronous SMTP client for use with asyncio", "summary": "aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an attacker who influences an envelope sender or recipient to inject commands such as MAIL FROM, RCPT TO, RSET, DATA, or AUTH. SMTP.sendmail() and SMTP", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00525, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53533"}], "cwe": ["CWE-77", "CWE-93"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43717, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "aiosmtplib", "status": "fixed", "fixed": "5.1.1", "cmd": "pip install --upgrade \"aiosmtplib>=5.1.1\"\npip show aiosmtplib", "url": "https://github.com/advisories/GHSA-v3q9-hj7j-63hq", "note": "vulnerable: <= 5.1.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "aiosmtplib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "aiosmtplib", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63643", "publisher": "GitHub, Inc.", "title": "MagicMirror\u00b2 is an open source modular smart mirror platform", "summary": "MagicMirror\u00b2 is an open source modular smart mirror platform. Prior to 2.37.0, the ADD_CALENDAR handler in defaultmodules/calendar/node_helper.js accepts an attacker-controlled URL, authentication data, and selfSignedCert setting through the unauthenticated Socket.IO namespace /calendar. The handler passes these fields to CalendarFetcher, causing a server-side request without SSRF validation and optionally disabling TLS verification. When the res", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00665, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63643"}], "cwe": ["CWE-441", "CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.51195, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-w6x9-28jw-hq7j", "url": "https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-w6x9-28jw-hq7j"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "magicmirror", "status": "fixed", "fixed": "2.37.0", "cmd": "npm install magicmirror@\">=2.37.0\"\nnpm ls magicmirror", "url": "https://github.com/advisories/GHSA-w6x9-28jw-hq7j", "note": "vulnerable: < 2.37.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74044", "publisher": "VulnCheck", "title": "Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to d", "summary": "Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a malicious node name and disconnect, triggering the master's peer cleanup routine to remove the contents of arbitrary directories within the Wazuh installatio", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00603, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "wazuh", "vendor": "wazuh", "type": "app", "affected": [">= 4.0.0 and < 4.14.6"], "fixed": "4.14.6", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wazuh || rpm -q wazuh || wazuh --version"}, {"label": "2. UPGRADE to 4.14.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wazuh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wazuh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wazuh\nsudo apt install wazuh=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold wazuh"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wazuh\nsudo dnf downgrade wazuh-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add wazuh"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74044"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/wazuh/wazuh/pull/36460"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-f34r-fcjf-qx6j"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.48177, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/wazuh/wazuh/security/advisories/GHSA-f34r-fcjf-qx6j", "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-f34r-fcjf-qx6j"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67440", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the DEVICE_BROWSE, DEVICE_NODE_ATTRIBUTE, HOST_INTERFACES, and DEVICE_TAGS_REQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata without isSocketAdminAuthorized when secureEnabled is true. A remote unauthenticated or guest user can invoke these metadata-oriented Socket.IO ev", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.0054, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67440"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44641, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53453", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce the panel's admin-only authorization boundary. Affected surfaces included the backend API, upload API, stream routes, terminal WebSocket, Blueprint Studio WebSocket subscriptions, call_serv", "cvss": 8.7, "sev": "HIGH", "epss": 0.0045, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53453"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38114, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75842", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM c", "summary": "ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM clause that allows authenticated users to read local files. Attackers with read query privileges can use the file:// protocol in LOAD CSV statements to access arbitrary files with server process privileges, exfiltrating sensitive data directly in query responses.", "cvss": 7.7, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75842"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.38901, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-hfp5-6gcp-8c75", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-hfp5-6gcp-8c75"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28567", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "summary": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28567"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32403, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-28571", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.", "summary": "Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28571"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32403, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32472", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.", "summary": "Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32472"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32398, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32549", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.", "summary": "Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32549"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32395, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49225", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-privileged Vendor to access revisions for products owned by another Vendor. The admin/controller/product/revisions.php route reuses admin/controller/content/revisions.php, while admin/sql/sqlite/product_content_revision.sql trusts caller-controlled product_id, language_id, ", "cvss": 8.3, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49225"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40452, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74039", "publisher": "VulnCheck", "title": "Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated ", "summary": "Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by submitting arbitrarily deeply nested JSON structures to the POST /security/user/authenticate/run_as endpoint. Attackers can repeatedly submit malformed auth_context bodies with unlimited nesting depth to cause the API framework to consume excessive CPU, denying service to all", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00555, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "wazuh", "vendor": "wazuh", "type": "app", "affected": [">= 4.0.0 and < 4.14.7", "5.0.0 beta1", "5.0.0 beta2"], "fixed": "4.14.7", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wazuh || rpm -q wazuh || wazuh --version"}, {"label": "2. UPGRADE to 4.14.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wazuh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wazuh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wazuh\nsudo apt install wazuh=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold wazuh"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wazuh\nsudo dnf downgrade wazuh-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add wazuh"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74039"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/wazuh/wazuh/pull/37034"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-5vh8-34r8-q74q"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-5vh8-34r8-q74q"}], "cwe": ["CWE-770", "CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.45558, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/wazuh/wazuh/security/advisories/GHSA-5vh8-34r8-q74q", "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-5vh8-34r8-q74q"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50138", "publisher": "GitHub, Inc.", "title": "goshs is a SimpleHTTPServer written in Go", "summary": "goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`, and `--no-delete` are enforced only on the primary HTTP port. The WebDAV port is wired straight to `golang.org/x/net/webdav.Handler` with no equivalent guard, so an authenticated WebDAV client can `PUT`, `DELETE`, `MKCOL`, `MOVE`, and `COPY` despite the operator's stated", "cvss": 8.1, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50138"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.3083, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/goshs-labs/goshs/security/advisories/GHSA-3whc-qvhv-xqjp", "url": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-3whc-qvhv-xqjp"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "goshs.de/goshs/v2", "status": "fixed", "fixed": "2.1.0", "cmd": "go get goshs.de/goshs/v2@v2.1.0\ngo list -m goshs.de/goshs/v2", "url": "https://github.com/advisories/GHSA-3whc-qvhv-xqjp", "note": "vulnerable: <= 2.0.9"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-43971", "publisher": "EEF", "title": "Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggli", "summary": "Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cow_link:link/1.\n\ncow_link:do_link/1 in cowlib interpolates the target URI, rel value, and attribute keys directly into the serialized Link: header value without escaping or token-grammar validation. A > byte in target prematurely closes the URI slot, allowing an attacker to append additional link en", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00524, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43971"}], "cwe": ["CWE-116"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.43618, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "erlang-cowlib", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "erlang-cowlib", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-59949", "publisher": "GitHub, Inc.", "title": "yawkat LZ4 Java provides LZ4 compression for Java", "summary": "yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64().hash(), XXHashFactory.nativeInstance().newStreamingHash32().update(), and XXHashFactory.nativeInstance().newStreamingHash64().update(), allowing null arrays or oversized ranges to reach na", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59949"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39407, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Maven", "pkg": "at.yawk.lz4:lz4-java", "status": "fixed", "fixed": "1.11.1", "cmd": "Set at.yawk.lz4:lz4-java to 1.11.1 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-xx22-p4ch-683r", "note": "vulnerable: <= 1.11.0"}, {"os": "Maven", "pkg": "org.lz4:lz4-java", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-xx22-p4ch-683r", "note": "vulnerable: <= 1.8.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "lz4-java", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "lz4-java", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "jmc:rhel8/lz4-java", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "lz4-java", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "jmc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73994", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions.", "summary": "Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73994"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27011, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50575", "publisher": "GitHub, Inc.", "title": "BetterDesk is a remote desktop management solution", "summary": "BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50575"}], "cwe": ["CWE-294", "CWE-345", "CWE-672"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.11961, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75858", "publisher": "VulnCheck", "title": "CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution", "summary": "CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vulnerability in the rlm_eval tool. The tool's approval_requirement() returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to run in a python3 interpreter without consulting the user's configured --approval-policy and without any approval prompt or audit step. An attac", "cvss": 7.8, "sev": "HIGH", "epss": 0.00364, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75858"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.29117, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "note": "vulnerable: >= 0.8.33, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "note": "vulnerable: >= 0.8.33, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75912", "publisher": "VulnCheck", "title": "CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_blame tool that allows", "summary": "CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_blame tool that allows attackers to read arbitrary files by injecting git options into the unvalidated rev parameter. Attackers can supply rev values like --contents=/path/to/file to exfiltrate sensitive files such as SSH keys and credentials through the tool output returned to the model.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00446, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75912"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.37821, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-c6mw-8xh8-gpq6", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-c6mw-8xh8-gpq6"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-c6mw-8xh8-gpq6", "note": "vulnerable: >= 0.3.27, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-c6mw-8xh8-gpq6", "note": "vulnerable: >= 0.3.27, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-c6mw-8xh8-gpq6", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-c6mw-8xh8-gpq6", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49223", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/product_review.sql queries accept a caller-controlled product_review_id and do not verify product_review.product_id against product.admin_id for the current admin_id. An attacker can rea", "cvss": 7.6, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49223"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.35059, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/givanz/Vvveb/security/advisories/GHSA-cj37-c5m2-3jmc", "url": "https://github.com/givanz/Vvveb/security/advisories/GHSA-cj37-c5m2-3jmc"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49452", "publisher": "GitHub, Inc.", "title": "WeasyPrint helps web developers to create PDF documents", "summary": "WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a background-image:url() declaration and parsed by tinycss2.parse_blocks_contents(), allowing untrusted HTML to inject additional CSS declarations. Applications that render untrusted HTML with pr", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00372, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49452"}], "cwe": ["CWE-74"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30005, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "weasyprint", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-jhhc-3hcp-qhm5", "note": "vulnerable: <= 68.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "weasyprint", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "weasyprint", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75829", "publisher": "VulnCheck", "title": "grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing att", "summary": "grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled. Attackers can submit crafted header and content parameters to execute server-side template injection payloads that are evaluated at render time.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75829"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33902, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32466", "publisher": "Patchstack", "title": "Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.", "summary": "Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.", "cvss": 8.5, "sev": "HIGH", "epss": 0.00357, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32466"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.283, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66622", "publisher": "Patchstack", "title": "Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.", "summary": "Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0032, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66622"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23768, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71539", "publisher": "GitHub, Inc.", "title": "n8n is an open source workflow automation platform", "summary": "n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a custom JavaScript node after restart and executes arbitrary code on the server. This issue is fixed in versions 1.123.64, 2.29.8, and 2.30.1.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00305, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71539"}], "cwe": ["CWE-367"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22058, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19869", "publisher": "Neo4j", "title": "@neo4j/graphql\u00a0from\u00a05.2.0\u00a0until the patched versions fails to enforce field-level\u00a0@authentication\u00a0rules on roo", "summary": "@neo4j/graphql\u00a0from\u00a05.2.0\u00a0until the patched versions fails to enforce field-level\u00a0@authentication\u00a0rules on root custom-resolver fields when a type-level\u00a0@authentication\u00a0rule is also present on the same operation type. When both a type-level\u00a0@authentication\u00a0(on\u00a0Query/Mutation) and a field-level\u00a0@authentication\u00a0(on a root custom-resolver field within that type) are declared, only the type-level rule is evaluated and the field-level rule is silently", "cvss": 7.6, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19869"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.41123, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50578", "publisher": "GitHub, Inc.", "title": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's ", "summary": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in app/konnektor/Konnektor.py. A network-positioned attacker can present an arbitrary certificate, terminate the TLS connection, and intercept ePA traffic. The V", "cvss": 7.5, "sev": "HIGH", "epss": 0.0031, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50578"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22638, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48508", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flask_principal.Permission.__init__() with zero Need objects when ADMIN_ONLY_AUTHORITY_CREATION and LEMUR_STRICT_ROLE_ENFORCEMENT are unset because both flags default to False. Flask-Principal Permission.allows() returns True when self.needs is empty, so the .can() authorization gate permits every authentic", "cvss": 8.8, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48508"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24806, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "lemur", "status": "fixed", "fixed": "1.9.1", "cmd": "pip install --upgrade \"lemur>=1.9.1\"\npip show lemur", "url": "https://github.com/advisories/GHSA-qcqw-jwxc-2hqg", "note": "vulnerable: <= 1.9.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71880", "publisher": "Mandiant Inc.", "title": "Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3", "summary": "Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection", "cvss": 7.6, "sev": "HIGH", "epss": 0.0048, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71880"}], "cwe": ["CWE-1336"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40486, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65984", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, POST /api/refresh in server/api/auth/index.js falls back from current user data to decoded.groups, including when the user is deleted or groups is zero, and POST /api/heartbeat in server/api/index.js re-signs inbound JWT claims without validating the current database record. An attacker who possesses a previously issued privileged refresh cookie or acc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00515, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65984"}], "cwe": ["CWE-613"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.42995, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73502", "publisher": "GitHub, Inc.", "title": "kin-openapi is a Go project for handling OpenAPI files", "summary": "kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial of service when an operation declares a content parameter whose application/json media type has no schema. In openapi3filter/req_resp_decoder.go, the default defaultContentParameterDecoder dereferences mt.Schema.Value without checking whether mt.Schema is nil, even though doc.Validate() a", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73502"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42373, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/getkin/kin-openapi", "status": "fixed", "fixed": "0.144.0", "cmd": "go get github.com/getkin/kin-openapi@v0.144.0\ngo list -m github.com/getkin/kin-openapi", "url": "https://github.com/advisories/GHSA-jpcw-4wr7-c3vq", "note": "vulnerable: <= 0.143.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "golang-github-getkin-kin-openapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "golang-github-getkin-kin-openapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "go-fdo-server", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana-pcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "osbuild-composer", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rhel10/grafana", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52732", "publisher": "GitHub, Inc.", "title": "ZEBRA is a Zcash node written entirely in Rust", "summary": "ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAX_INBOUND_CONCURRENCY slots in Zebra's inbound mempool download and verification pipeline. In zebrad/src/components/mempool/downloads.rs, the bounded queue was shared globally without per-peer accounting, while peer identity was not carried through Gossip and FullQueue responses were mapped to Response::Nil instead of reaching over", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52732"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42377, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "zebrad", "status": "fixed", "fixed": "4.5.0", "cmd": "Set zebrad >= 4.5.0 in Cargo.toml, then run: cargo update -p zebrad", "url": "https://github.com/advisories/GHSA-4fc2-h7jh-287c", "note": "vulnerable: <= 4.4.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71308", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. From 0.5.0 until 1.9.3, certificate create, upload, and edit requests accepted replaces[] or replacements identifiers that AssociatedCertificateSchema resolved with fetch_objects without a CertificatePermission check. Assigning those objects to Certificate.replaces invoked an append listener that disabled the victim certificate notifications and marked it as replaced. The victim was then excluded from get_a", "cvss": 8.1, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71308"}], "cwe": ["CWE-639", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.23423, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "lemur", "status": "fixed", "fixed": "1.9.3", "cmd": "pip install --upgrade \"lemur>=1.9.3\"\npip show lemur", "url": "https://github.com/advisories/GHSA-cfh6-pv5c-38jv", "note": "vulnerable: >= 0.5.0, <= 1.9.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75091", "publisher": "Wordfence", "title": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Sto", "summary": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00318, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75091"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23523, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15371", "publisher": "Rapid7, Inc.", "title": "Velociraptor's web GUI allows specifying a custom type for columns in tables", "summary": "Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00368, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15371"}], "cwe": ["CWE-177"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29447, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66620", "publisher": "Patchstack", "title": "Editor PHP Object Injection in OptionTree <= 2.7.3 versions.", "summary": "Editor PHP Object Injection in OptionTree <= 2.7.3 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00539, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66620"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44621, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73398", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions.", "summary": "Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00417, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73398"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34941, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73399", "publisher": "Patchstack", "title": "Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.", "summary": "Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00417, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73399"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34941, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74905", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains a server-side request forgery (SSRF) vulnerability in the isPrivateIP function i", "summary": "SiYuan before v3.7.4 contains a server-side request forgery (SSRF) vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does not recognize IPv6 transition addresses (NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001::/32) that embed private IPv4 destinations. When SafeMode is en", "cvss": 7.1, "sev": "HIGH", "epss": 0.00391, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74905"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.32049, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/siyuan-note/siyuan/security/advisories/GHSA-qq8m-8p8v-x4xg", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-qq8m-8p8v-x4xg"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75830", "publisher": "VulnCheck", "title": "grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vul", "summary": "grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy() method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter (via POST /api/v1/pages/batch) unvalidated. An authenticated user with the api.pages.write permission (editor-level, not super-admin) can supply path traversal sequences (e.g. /../../../) in the suff", "cvss": 7.1, "sev": "HIGH", "epss": 0.00394, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75830"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.3246, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/getgrav/grav/security/advisories/GHSA-g6j3-8jv9-ch5f", "url": "https://github.com/getgrav/grav/security/advisories/GHSA-g6j3-8jv9-ch5f"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75831", "publisher": "VulnCheck", "title": "Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering", "summary": "Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is concatenated unescaped into rawHtml source elements, allowing attackers to inject arbitrary HTML and JavaScript that executes in viewers' sessions.", "cvss": 7.6, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75831"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.27462, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/getgrav/grav/commit/aba291a59cab29ddce491175791888d8d0b65e20", "url": "https://github.com/getgrav/grav/commit/aba291a59cab29ddce491175791888d8d0b65e20"}, {"kind": "writeup", "name": "github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97", "url": "https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "fixed", "fixed": "2.0.15", "cmd": "composer require \"getgrav/grav:>=2.0.15\"", "url": "https://github.com/advisories/GHSA-6qw9-4vv5-jr97", "note": "vulnerable: <= 2.0.14"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63335", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose remainingBodyBytes value is smaller than a following AMQP.FRAME_BODY payload. CommandAssembler.consumeBodyFrame subtracts the peer-controlled payload length before val", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00515, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63335"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.43043, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr", "url": "https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "com.rabbitmq:amqp-client", "status": "fixed", "fixed": "5.31.0", "cmd": "Set com.rabbitmq:amqp-client to 5.31.0 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-qx7j-jv8m-fppr", "note": "vulnerable: <= 5.30.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rabbitmq-java-client", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71307", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /api/1/destinations/ relied only on authentication while sibling write handlers required admin_permission. DestinationOutputSchema returned raw options and copied them into pluginOptions without redacting sensitive values. The sftp-destination plugin stored password and privateKeyPass values in plaintext, allowing even a read-only user to retrieve credentials ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00314, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71307"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.23128, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Netflix/lemur/security/advisories/GHSA-6c8m-q6g9-vrw3", "url": "https://github.com/Netflix/lemur/security/advisories/GHSA-6c8m-q6g9-vrw3"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "lemur", "status": "fixed", "fixed": "1.9.3", "cmd": "pip install --upgrade \"lemur>=1.9.3\"\npip show lemur", "url": "https://github.com/advisories/GHSA-6c8m-q6g9-vrw3", "note": "vulnerable: < 1.9.3"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74907", "publisher": "VulnCheck", "title": "Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that us", "summary": "Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that uses string prefix matching instead of directory-boundary validation. Unauthenticated attackers can access files in sibling directories by exploiting directory names that extend the base path string, such as requesting assets-secret when assets is the configured base.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74907"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36487, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/getgrav/grav/security/advisories/GHSA-4v9q-p283-qc2m", "url": "https://github.com/getgrav/grav/security/advisories/GHSA-4v9q-p283-qc2m"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Composer (PHP)", "pkg": "getgrav/grav", "status": "fixed", "fixed": "2.0.15", "cmd": "composer require \"getgrav/grav:>=2.0.15\"", "url": "https://github.com/advisories/GHSA-4v9q-p283-qc2m", "note": "vulnerable: <= 2.0.14"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32473", "publisher": "Patchstack", "title": "Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.", "summary": "Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32473"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17577, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-32553", "publisher": "Patchstack", "title": "Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.", "summary": "Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00266, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32553"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17579, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-66679", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.", "summary": "Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00351, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66679"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27531, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49227", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and admin/controller/content/comments.php controllers and the admin/sql/sqlite/comment.sql queries accept a caller-controlled comment_id without verifying comment.post_id agai", "cvss": 7.6, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49227"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35059, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49222", "publisher": "GitHub, Inc.", "title": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores", "summary": "Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/product_question.sql queries accept a caller-controlled product_question_id and do not verify product_question.product_id against product.admin_id for the current admin_id. An attack", "cvss": 7.6, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49222"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35058, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15806", "publisher": "Python Software Foundation", "title": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRe", "summary": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP red", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00528, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15806"}], "cwe": ["CWE-319", "CWE-522"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.43918, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/python/cpython/issues/155694", "url": "https://github.com/python/cpython/issues/155694"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "pypy3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypy3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "python3.11", "status": "fixed", "fixed": "3.11.2-6+deb12u9", "cmd": "sudo apt update && sudo apt install --only-upgrade python3.11\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' python3.11)\" ge \"3.11.2-6+deb12u9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "python3.13", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "python3", "status": "fixed", "fixed": "python3-3.14.8-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71303", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_acme_url enforced ACME_DIRECTORY_HOST_ALLOWLIST when an authority was created, but PUT /api/1/authorities/ passed options to lemur/authorities/service.py without applying the same check. A user holding an authority role could replace the stored acme_url with an internal service or instance-metadata URL such as 169.254.169.254. The next issuance operation loaded that value and passe", "cvss": 7.7, "sev": "HIGH", "epss": 0.00277, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71303"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.19108, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Netflix/lemur/security/advisories/GHSA-v5rc-cpwc-cfpr", "url": "https://github.com/Netflix/lemur/security/advisories/GHSA-v5rc-cpwc-cfpr"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "lemur", "status": "fixed", "fixed": "1.9.3", "cmd": "pip install --upgrade \"lemur>=1.9.3\"\npip show lemur", "url": "https://github.com/advisories/GHSA-v5rc-cpwc-cfpr", "note": "vulnerable: <= 1.9.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-17084", "publisher": "Python Software Foundation", "title": "The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unico", "summary": "The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00734, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-17084"}], "cwe": ["CWE-436"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.5391, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "pypy3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypy3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "python3.11", "status": "fixed", "fixed": "3.11.2-6+deb12u9", "cmd": "sudo apt update && sudo apt install --only-upgrade python3.11\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' python3.11)\" ge \"3.11.2-6+deb12u9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "python3.13", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "python3", "status": "fixed", "fixed": "python3-3.12.15-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "python3", "status": "fixed", "fixed": "python3-3.14.8-r0", "cmd": "apk add --upgrade python3\napk info -v python3", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48798", "publisher": "GitHub, Inc.", "title": "SSH.NET is a Secure Shell (SSH) library for .NET", "summary": "SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names returned by a remote SCP server and combines them with the requested local directory without containment validation, allowing a malicious, compromised, or man-in-the-middle server to use ../ sequences or absolute paths to create or overwrite files anywhere writable by the ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48798"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35364, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "SSH.NET", "status": "fixed", "fixed": "2026.0.0", "cmd": "dotnet add package SSH.NET --version 2026.0.0", "url": "https://github.com/advisories/GHSA-q939-rpr3-3284", "note": "vulnerable: <= 2025.1.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73395", "publisher": "Patchstack", "title": "Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.", "summary": "Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73395"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25215, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50576", "publisher": "GitHub, Inc.", "title": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's ", "summary": "ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration does not neutralize CRLF characters in values used by app/vau/VAUProtokoll.py to construct VAU inner HTTP requests. The build_inner_header function interpolates the uri, host, accept_type, content_type, content_length, USER_AGENT, and insurant_id values into request lines and ", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00493, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50576"}], "cwe": ["CWE-113"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.41474, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74046", "publisher": "VulnCheck", "title": "Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function withi", "summary": "Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster peers to exhaust memory by supplying a malicious synchronization archive without decompressed size limits. Attackers holding a valid cluster Fernet key can upload a small, highly compressed zip bomb archive that forces wazuh-clusterd on the master node to decompress the full payload into memo", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00581, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "wazuh", "vendor": "wazuh", "type": "app", "affected": [">= 4.4.0 and < 4.14.7"], "fixed": "4.14.7", "safe": "before 4.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wazuh || rpm -q wazuh || wazuh --version"}, {"label": "2. UPGRADE to 4.14.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wazuh"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wazuh"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison wazuh\nsudo apt install wazuh=<VERSION_BEFORE_4.4.0>\nsudo apt-mark hold wazuh"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wazuh\nsudo dnf downgrade wazuh-<VERSION_BEFORE_4.4.0>\nsudo dnf versionlock add wazuh"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74046"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/wazuh/wazuh/pull/37119"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-mr7j-w2m4-vw5j"}, {"t": "Exploit, Mitigation", "u": "https://github.com/wazuh/wazuh/security/advisories/GHSA-mr7j-w2m4-vw5j"}], "cwe": ["CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.4707, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/wazuh/wazuh/security/advisories/GHSA-mr7j-w2m4-vw5j", "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-mr7j-w2m4-vw5j"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52734", "publisher": "GitHub, Inc.", "title": "ZEBRA is a Zcash node written entirely in Rust", "summary": "ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATE_LIMIT_DELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::poll_next removed cancel_handles entries after success and ordinary verification errors, but tokio::time::error::Elapsed did not carry the UnminedTxId needed to remove the ti", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00507, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52734"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42379, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "zebrad", "status": "fixed", "fixed": "4.5.0", "cmd": "Set zebrad >= 4.5.0 in Cargo.toml, then run: cargo update -p zebrad", "url": "https://github.com/advisories/GHSA-65jj-fmw8-468q", "note": "vulnerable: <= 4.4.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53454", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials file for the user running Home Assistant. Tokens could remain outside Blueprint Studio's intended Home Assistant storage and be read by other users or proc", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53454"}], "cwe": ["CWE-522"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.38738, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75911", "publisher": "VulnCheck", "title": "CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from projec", "summary": "CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim's machine", "cvss": 7.8, "sev": "HIGH", "epss": 0.00246, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75911"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.14997, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Rust (Cargo)", "pkg": "deepseek-tui", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-gx45-xrj5-g6c4", "note": "vulnerable: >= 0.8.6, <= 0.8.41"}, {"os": "npm", "pkg": "deepseek-tui", "status": "fixed", "fixed": "0.8.41", "cmd": "npm install deepseek-tui@\">=0.8.41\"\nnpm ls deepseek-tui", "url": "https://github.com/advisories/GHSA-gx45-xrj5-g6c4", "note": "vulnerable: >= 0.8.6, < 0.8.41"}, {"os": "Rust (Cargo)", "pkg": "codewhale-tui", "status": "fixed", "fixed": "0.8.64", "cmd": "Set codewhale-tui >= 0.8.64 in Cargo.toml, then run: cargo update -p codewhale-tui", "url": "https://github.com/advisories/GHSA-gx45-xrj5-g6c4", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "npm", "pkg": "codewhale", "status": "fixed", "fixed": "0.8.64", "cmd": "npm install codewhale@\">=0.8.64\"\nnpm ls codewhale", "url": "https://github.com/advisories/GHSA-gx45-xrj5-g6c4", "note": "vulnerable: >= 0.8.41, < 0.8.64"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-69160", "publisher": "GitHub, Inc.", "title": "OpenList a file list program that supports multiple storage", "summary": "OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasPrefix(requested_path, user.BasePath) without enforcing a directory separator boundary. An authenticated user with CanShare permission and a BasePath such as /base can submit a sibling path such as /base2/secret.txt, create a share for the out-of-scope file, and use the public share download", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-69160"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.33272, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/OpenListTeam/OpenList/security/advisories/GHSA-86cx-wwf4-phq4", "url": "https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-86cx-wwf4-phq4"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/OpenListTeam/OpenList/v4", "status": "fixed", "fixed": "4.2.4", "cmd": "go get github.com/OpenListTeam/OpenList/v4@v4.2.4\ngo list -m github.com/OpenListTeam/OpenList/v4", "url": "https://github.com/advisories/GHSA-86cx-wwf4-phq4", "note": "vulnerable: <= 4.2.3"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52817", "publisher": "GitHub, Inc.", "title": "Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems", "summary": "Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who already controls that monitoring account can supply the APT::Update::Pre-Invoke option to execute an arbitrary command while apt-get runs with root privi", "cvss": 7.0, "sev": "HIGH", "epss": 0.0018, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52817"}], "cwe": ["CWE-88"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.0716, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-8w6w-23mq-h8rg", "url": "https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-8w6w-23mq-h8rg"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "linuxfabrik-lib", "status": "fixed", "fixed": "5.1.0", "cmd": "pip install --upgrade \"linuxfabrik-lib>=5.1.0\"\npip show linuxfabrik-lib", "url": "https://github.com/advisories/GHSA-8w6w-23mq-h8rg", "note": "vulnerable: <= 5.0.0"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73396", "publisher": "Patchstack", "title": "Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.", "summary": "Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00402, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73396"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33369, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55106", "publisher": "GitHub, Inc.", "title": "authentik is an open-source identity provider", "summary": "authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the diagnostic action against a configured LDAP Source. The server then connects to the upstream directory using the source's configured bind credentials and ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00437, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55106"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36997, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-24183", "publisher": "NVIDIA Corporation", "title": "NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user cou", "summary": "NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "cumulus linux", "vendor": "nvidia", "type": "os", "affected": ["5.15.0"], "fixed": null, "safe": "before 5.15.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24183"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5817"}], "cwe": ["CWE-250"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.0235, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75774", "publisher": "VulDB", "title": "A vulnerability was determined in karakeep-app karakeep up to 0.32.0", "summary": "A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. The project was info", "cvss": 3.7, "sev": "LOW", "epss": 0.00579, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75774"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46955, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/karakeep-app/karakeep/issues/2920", "url": "https://github.com/karakeep-app/karakeep/issues/2920"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74902", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fai", "summary": "SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access when a user drags, drops, or pastes the file into the editor.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00198, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74902"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09073, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75846", "publisher": "VulnCheck", "title": "ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authorization vulnerability in the DEL", "summary": "ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase (UPDATE_SCHEMA) check. Any user with database access can execute DELETE FUNCTION via the command API (POST /api/v1/command/{db}) to permanently remove any registered server-si", "cvss": 7.1, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75846"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2763, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-18534", "publisher": "BCNY", "title": "ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, al", "summary": "ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18534"}], "cwe": ["CWE-1021"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26137, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61407", "publisher": "Dell", "title": "Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control", "summary": "Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61407"}], "cwe": ["CWE-698"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04163, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73352", "publisher": "Patchstack", "title": "Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.", "summary": "Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73352"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17579, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73529", "publisher": "VulnCheck", "title": "Plainpad through 1.1.1, fixed in commit d3823fc, contains a missing rate limiting vulnerability that allows un", "summary": "Plainpad through 1.1.1, fixed in commit d3823fc, contains a missing rate limiting vulnerability that allows unauthenticated attackers to send unbounded login requests to the POST /v1/sessions endpoint due to dead code in App\\Http\\Kernel.php that is never instantiated under the Laravel 11+ skeleton, leaving the API throttle configuration unattached to any route. Attackers can exploit this by sending unlimited credential attempts with no lockout or", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00409, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73529"}], "cwe": ["CWE-307"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34043, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75773", "publisher": "VulDB", "title": "A vulnerability was found in karakeep-app karakeep up to 0.32.0", "summary": "A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the file apps/web/server/auth.ts of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is described as difficult. The exploit has been made public and could be ", "cvss": 3.7, "sev": "LOW", "epss": 0.00653, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75773"}], "cwe": ["CWE-307", "CWE-799"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50677, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/karakeep-app/karakeep/issues/2919", "url": "https://github.com/karakeep-app/karakeep/issues/2919"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75844", "publisher": "VulnCheck", "title": "ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT DATABASE com", "summary": "ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT DATABASE command where the security validator resolves and checks hostnames but the subsequent connection re-resolves the raw URL and follows redirects. Authenticated attackers can bypass the validator using DNS rebinding or HTTP redirects to access cloud metadata endpoints, internal services, or read arbitrary local files on default installations.", "cvss": 7.1, "sev": "HIGH", "epss": 0.0032, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75844"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23757, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/ArcadeData/arcadedb/security/advisories/GHSA-4w2m-77c8-83mw", "url": "https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-4w2m-77c8-83mw"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-47721", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not consistently enforce authJwt.haveAdminPermission for scheduler settings. An authenticated non-admin operator can create or alter deviceActions that invoke onSetValue or onRunScript, or delete schedules, gaining access to device-value changes and server-side project script e", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00434, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47721"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.367, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "fuxa-server", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-8ghr-w65f-j3qr", "note": "vulnerable: <= 1.1.14-1243"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-65985", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or HTTPS request and return the response body to the requesting socket. The attacker can use the server as a read SSRF oracle against reachable internal ser", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00465, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65985"}], "cwe": ["CWE-918"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39315, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50139", "publisher": "GitHub, Inc.", "title": "goshs is a SimpleHTTPServer written in Go", "summary": "goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, serves the file, then re-acquires the lock to increment the counter. Concurrent requests all read the same `Downloaded`/`DownloadLimit` snapshot, all pass the check, and all are served \u2014 exceeding the operator's intended cap. Version 2.1.0 patches the issue.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50139"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1638, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/goshs-labs/goshs/security/advisories/GHSA-j48m-h7xq-2xpj", "url": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-j48m-h7xq-2xpj"}], "ssvc": null, "vendors": [{"os": "Go", "pkg": "goshs.de/goshs/v2", "status": "fixed", "fixed": "2.1.0", "cmd": "go get goshs.de/goshs/v2@v2.1.0\ngo list -m goshs.de/goshs/v2", "url": "https://github.com/advisories/GHSA-j48m-h7xq-2xpj", "note": "vulnerable: <= 2.0.9"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73345", "publisher": "Patchstack", "title": "Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.", "summary": "Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73345"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20011, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-74007", "publisher": "Patchstack", "title": "Unauthenticated Sensitive Data Exposure in 3D FlipBook \u2013 PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.2", "summary": "Unauthenticated Sensitive Data Exposure in 3D FlipBook \u2013 PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74007"}], "cwe": ["CWE-497"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24905, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-24185", "publisher": "NVIDIA Corporation", "title": "NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration compo", "summary": "NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-24185"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21892, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-16094", "publisher": "Wordfence", "title": "The Invisible Anti-Spam & CAPTCHA \u2014 reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to ", "summary": "The Invisible Anti-Spam & CAPTCHA \u2014 reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into alre", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00581, "kev": false, "added": "2026-08-15", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16094"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.47071, "pinned": false}, {"id": "CVE-2026-67961", "publisher": "MITRE", "title": "An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of t", "summary": "An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00191, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67961"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08333, "pinned": false}, {"id": "CVE-2026-28568", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28568"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15621, "pinned": false}, {"id": "CVE-2026-28569", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-28569"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15621, "pinned": false}, {"id": "CVE-2026-32333", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32333"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15622, "pinned": false}, {"id": "CVE-2026-32547", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32547"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15623, "pinned": false}, {"id": "CVE-2026-66629", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66629"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15671, "pinned": false}, {"id": "CVE-2026-66667", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66667"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1562, "pinned": false}, {"id": "CVE-2026-68567", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68567"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15603, "pinned": false}, {"id": "CVE-2026-73190", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden ", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM \u2013 Premium Packages wpdm-premium-packages allows DOM-Based XSS.This issue affects WPDM \u2013 Premium Packages: from n/a through 7.0.5.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73190"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15649, "pinned": false}, {"id": "CVE-2026-73338", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73338"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15686, "pinned": false}, {"id": "CVE-2026-73342", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73342"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15685, "pinned": false}, {"id": "CVE-2026-73351", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73351"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15602, "pinned": false}, {"id": "CVE-2026-73358", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73358"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15616, "pinned": false}, {"id": "CVE-2026-73360", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73360"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15672, "pinned": false}, {"id": "CVE-2026-73361", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73361"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.156, "pinned": false}, {"id": "CVE-2026-73362", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73362"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15599, "pinned": false}, {"id": "CVE-2026-73393", "publisher": "Patchstack", "title": "Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.", "summary": "Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73393"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15606, "pinned": false}, {"id": "CVE-2026-73404", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions.", "summary": "Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73404"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26292, "pinned": false}, {"id": "CVE-2026-74009", "publisher": "Patchstack", "title": "Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions.", "summary": "Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74009"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20898, "pinned": false}, {"id": "CVE-2026-71574", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6", "summary": "Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform mutation actions in webservice endpoints, where the same mutation was restricted in the backend UI.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00343, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71574"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1070-20260803-core-inconsistent-acl-checks-for-mutating-webservice-endpoints.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.26676, "pinned": false}, {"id": "CVE-2026-54552", "publisher": "GitHub, Inc.", "title": "sh provides Python process launching", "summary": "sh provides Python process launching. Prior to 2.2.4, the _uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with _uid set to an unprivileged user, the child changes its UID but can retain the parent process's supplementary groups because the privilege-drop sequence does not fully establish the target user's UID, primary GID, and supplementary gro", "cvss": 7.9, "sev": "HIGH", "epss": 0.00169, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54552"}], "cwe": ["CWE-273"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.06, "pinned": false}, {"id": "CVE-2026-68922", "publisher": "GitHub, Inc.", "title": "MobSF is a mobile application security testing tool used", "summary": "MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_analysis.py uses the Android manifest android:icon value to construct paths under the scan resource directory without rejecting traversal or verifying containment, allowing an authenticated user to upload a crafted ZIP or APK that reads a server file with an ALLOWED_EXTENSIONS suffix, copies it to DWD_DIR as the ", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00458, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68922"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38725, "pinned": false}, {"id": "CVE-2026-68924", "publisher": "GitHub, Inc.", "title": "MobSF is a mobile application security testing tool used", "summary": "MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_func.py logs that an archive member exceeding ZIP_MAX_UNCOMPRESSED_FILE_SIZE is being skipped but does not continue to the next member, so an authenticated user can upload a crafted ZIP or APK whose oversized member is extracted to disk when the aggregate ZIP_MAX_UNCOMPRESSED_TOTAL_SIZE limit has not yet been re", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00587, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68924"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.47397, "pinned": false}, {"id": "CVE-2026-52480", "publisher": "MITRE", "title": "An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive informa", "summary": "An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00327, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52480"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24525, "pinned": false}, {"id": "CVE-2026-70666", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acme_url through PUT /api/1/authorities/ without revalidation and direct setup_acme_client_no_retry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder, authorizations, and finalize URLs chosen by that server. The Lemur ClientV2 followed those URLs without requiring their host to match the configured direc", "cvss": 7.4, "sev": "HIGH", "epss": 0.00216, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70666"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11432, "pinned": false}, {"id": "CVE-2026-75086", "publisher": "VulDB", "title": "A vulnerability has been found in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75086"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2532, "pinned": false}, {"id": "CVE-2026-75087", "publisher": "VulDB", "title": "A vulnerability was found in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75087"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2532, "pinned": false}, {"id": "CVE-2026-75088", "publisher": "VulDB", "title": "A vulnerability was determined in itsourcecode Hospital Management System 1.0", "summary": "A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75088"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25321, "pinned": false}, {"id": "CVE-2026-75090", "publisher": "VulDB", "title": "A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22", "summary": "A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolv", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00688, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75090"}], "cwe": ["CWE-119", "CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.52192, "pinned": false}, {"id": "CVE-2026-50167", "publisher": "GitHub, Inc.", "title": "Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage", "summary": "Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resources did not enforce ownership checks for authenticated API requests. An attacker with a valid API key could use another account's identifiers to read and enumerate webhook and identity resources belonging to that account through apps/worker/server/routes/api/kurrier/webh", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00465, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50167"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39314, "pinned": false}, {"id": "CVE-2026-75876", "publisher": "VulDB", "title": "A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta", "summary": "A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75876"}], "cwe": ["CWE-74", "CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25342, "pinned": false}, {"id": "CVE-2026-12632", "publisher": "Zephyr Project", "title": "Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-b", "summary": "Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptp_msg_type() (msg->header.type_major_sdo_id & 0xF, range 0-15) and uses it to index the msg_size[] table. That table only defines entries up to PTP_MSG_MANAGEMENT (0xD), giving it ARRAY_SIZE == 14. Before the fix there was no upper-bound check, so the undefined types 0xE and 0xF indexed one or t", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00285, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12632"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19929, "pinned": false}, {"id": "CVE-2026-75093", "publisher": "VulDB", "title": "A security vulnerability has been detected in sonos tract up to 0.23.4", "summary": "A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 66b10bda8895f4bfaf8c205361f0125cdf51f99b. It is best practice to appl", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00594, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75093"}], "cwe": ["CWE-120", "CWE-131"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.4772, "pinned": false}, {"id": "CVE-2026-75845", "publisher": "VulnCheck", "title": "ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_settin", "summary": "ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP server-level tool. SetServerSettingTool.execute() gates only on the global allowAdmin flag and never checks the caller's role, so in an MCP deployment with allowAdmin=true and a non-root allowedUsers set, any authenticated read-only user can invoke set_server_setting to modify server GlobalConfiguration, enabling configuration tampe", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75845"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20144, "pinned": false}, {"id": "CVE-2026-74951", "publisher": "Mozilla Corporation", "title": "Clickjacking issue in Firefox for Android", "summary": "Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00275, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 154.0"], "fixed": "154.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 154.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74951"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-74/"}], "cwe": ["CWE-1021"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18889, "pinned": false}, {"id": "CVE-2026-74980", "publisher": "Mozilla Corporation", "title": "Clickjacking issue in the Downloads component in Firefox for Android", "summary": "Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00275, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 154.0"], "fixed": "154.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 154.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74980"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-74/"}], "cwe": ["CWE-1021"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.18889, "pinned": false}, {"id": "CVE-2026-73383", "publisher": "Patchstack", "title": "Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.", "summary": "Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00474, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73383"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.40067, "pinned": false}, {"id": "CVE-2026-73336", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escap", "summary": "Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 5.1.0 and < 5.4.8", ">= 6.0.0 and <= 6.1.3"], "fixed": "5.4.8", "safe": "before 5.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_5.1.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_5.1.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73336"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1073-20260806-core-xss-through-schema-org-outputs.html"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17554, "pinned": false}, {"id": "CVE-2026-68923", "publisher": "GitHub, Inc.", "title": "MobSF is a mobile application security testing tool used", "summary": "MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMiddleware only in the deprecated MIDDLEWARE_CLASSES setting and omits it from the active MIDDLEWARE tuple, allowing a remote attacker to make a logged-in victim submit cross-site POST requests to authenticated web endpoints including /delete_scan/, /upload/, /download_scan/, /change_password/, /create_user/, and", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68923"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17372, "pinned": false}, {"id": "CVE-2026-66637", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66637"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12371, "pinned": false}, {"id": "CVE-2026-66638", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66638"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12373, "pinned": false}, {"id": "CVE-2026-66639", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in WPZOOM Forms \u2013 Contact Form Plugin for Gutenberg <= 2.0.4 versions.", "summary": "Contributor Cross Site Scripting (XSS) in WPZOOM Forms \u2013 Contact Form Plugin for Gutenberg <= 2.0.4 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66639"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12374, "pinned": false}, {"id": "CVE-2026-66640", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66640"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12375, "pinned": false}, {"id": "CVE-2026-66641", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66641"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12375, "pinned": false}, {"id": "CVE-2026-66643", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66643"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12373, "pinned": false}, {"id": "CVE-2026-66644", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66644"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12372, "pinned": false}, {"id": "CVE-2026-66645", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.", "summary": "Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66645"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12371, "pinned": false}, {"id": "CVE-2026-66646", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "summary": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66646"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12372, "pinned": false}, {"id": "CVE-2026-68565", "publisher": "Patchstack", "title": "Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.", "summary": "Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68565"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12394, "pinned": false}, {"id": "CVE-2026-68568", "publisher": "Patchstack", "title": "Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.", "summary": "Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0026, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68568"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16793, "pinned": false}, {"id": "CVE-2026-73359", "publisher": "Patchstack", "title": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "summary": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00224, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73359"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1237, "pinned": false}, {"id": "CVE-2026-73995", "publisher": "Patchstack", "title": "Subscriber Broken Authentication in User Registration <= 5.2.6 versions.", "summary": "Subscriber Broken Authentication in User Registration <= 5.2.6 versions.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00361, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73995"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.28674, "pinned": false}, {"id": "CVE-2026-63328", "publisher": "GitHub, Inc.", "title": "Trivy is a security scanner", "summary": "Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under ~/.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and plugin binary to arbitrary user-writable paths, while plugins from the official Trivy plugin index are not affected. This issue is fixed in version 0.72.0", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.0019, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63328"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08192, "pinned": false}, {"id": "CVE-2026-75857", "publisher": "VulnCheck", "title": "CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_inter", "summary": "CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an already-approved long-running interactive shell (e.g., a python3 -i REPL, mysql, ssh, or sudo -i session) without any approval prompt. An attacker who ca", "cvss": 7.0, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75857"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04244, "pinned": false}, {"id": "CVE-2026-47630", "publisher": "NVIDIA Corporation", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute pa", "summary": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0018, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "triton inference server", "vendor": "nvidia", "type": "app", "affected": ["<= 26.05"], "fixed": "newer than 26.05", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy triton-inference-server || rpm -q triton-inference-server || triton-inference-server --version"}, {"label": "2. UPGRADE to newer than 26.05 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade triton-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade triton-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47630"}, {"t": "Patch", "u": "https://github.com/NVIDIA/product-security/tree/main/2026/5865"}], "cwe": ["CWE-36"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.07186, "pinned": false}, {"id": "CVE-2026-59915", "publisher": "Dell", "title": "Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnera", "summary": "Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00135, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59915"}], "cwe": ["CWE-272"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02724, "pinned": false}, {"id": "CVE-2026-71417", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/certificates/upload allowed a non-read-only user to create a duplicate row using another certificate body, authority_id, serial, or external_id without requiring permission on the underlying authority. PUT /api/1/certificates//revoke authorized the caller against only the selected Lemur row, so the creator of the duplicate bypassed CertificatePermission. The duplicate had no cert", "cvss": 7.3, "sev": "HIGH", "epss": 0.00105, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71417"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01002, "pinned": false}, {"id": "CVE-2026-75077", "publisher": "VulDB", "title": "A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0", "summary": "A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0047, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75077"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39751, "pinned": false}, {"id": "CVE-2026-75078", "publisher": "VulDB", "title": "A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0", "summary": "A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0047, "kev": false, "added": "2026-08-17", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75078"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.39752, "pinned": false}, {"id": "CVE-2026-75082", "publisher": "VulDB", "title": "A flaw has been found in Webkul Bagisto up to 2.4.4", "summary": "A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first_name/last_name causes basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor confirms: \"The reported issues were already identified through our", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00449, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75082"}], "cwe": ["CWE-74", "CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38015, "pinned": false}, {"id": "CVE-2026-55162", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.2, lemur/certificates/verify.py accepted CRL Distribution Point and OCSP responder URLs from uploaded certificate extensions and used them in crl_verify and ocsp_verify without adequate destination validation. An authenticated operator could submit a certificate through POST /api/1/certificates/upload and cause verify_string to reach loopback, RFC1918, link-local, or instance-metadata destinati", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55162"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11432, "pinned": false}, {"id": "CVE-2026-55163", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermission(role_id), which allowed either an administrator or any existing member of the target role. The handler passed data[\"users\"] and data[\"name\"] to service.update, allowing a non-admin member to add or remove other users and rename the role. This enabled lateral privilege grants within roles that control c", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55163"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11433, "pinned": false}, {"id": "CVE-2026-16309", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allo", "summary": "Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects EdoWEB: before 780-g7.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16309"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23119, "pinned": false}, {"id": "CVE-2026-32467", "publisher": "Patchstack", "title": "Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.", "summary": "Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-32467"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10011, "pinned": false}, {"id": "CVE-2026-71477", "publisher": "GitHub, Inc.", "title": "mise manages dev tools like node, python, cmake, and terraform", "summary": "mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a root-installed executable, especially when MISE_INSTALL_PATH targets a shared location such as /usr/local/bin. This issue is fixed in version 2026.7.1.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00131, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71477"}], "cwe": ["CWE-278"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02446, "pinned": false}, {"id": "CVE-2026-70667", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_revocation_url in lemur/certificates/verify.py checked the original CRL or OCSP URL but the later request could reach a different destination. The CRL requests.get call followed HTTP redirects without validating each Location target, so a public attacker-controlled URL could redirect to loopback, RFC1918, link-local, or instance-metadata addresses. Validation and connection also pe", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70667"}], "cwe": ["CWE-367", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0712, "pinned": false}, {"id": "CVE-2026-12631", "publisher": "Zephyr Project", "title": "The Zephyr kernel validates the k_thread_join() and k_thread_abort() system calls (declared __syscall in inclu", "summary": "The Zephyr kernel validates the k_thread_join() and k_thread_abort() system calls (declared __syscall in include/zephyr/kernel.h) through thread_obj_validate() in kernel/thread.c. Its default switch branch is the access-denied path, taken when k_object_validate() returns -EPERM (the calling user thread was never granted access to the target thread object) or -EBADF (the supplied pointer is not a registered kernel object of the right type). That b", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00155, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-12631"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04283, "pinned": false}, {"id": "CVE-2026-41921", "publisher": "VulnCheck", "title": "Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purch", "summary": "Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purchase suggestion handler that allows authenticated staff users to inject malicious scripts by submitting unsanitized input through the suggestion save operation. Attackers can supply crafted HTML or script content in fields such as title, author, isbn, publishercode, place, collectiontitle, itemtype, and note, which are stored without sanit", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41921"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21386, "pinned": false}, {"id": "CVE-2026-75834", "publisher": "VulnCheck", "title": "Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss() function ", "summary": "Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss() function (system/src/Grav/Common/Security.php). All XSS detection patterns use the PCRE /u (UTF-8) modifier, so a single invalid UTF-8 byte anywhere in page content causes preg_match() to return false for every pattern, silently bypassing the save-time XSS safety gate (Validation::checkSafety()). An authenticated attacker with page-edit permission", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75834"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16137, "pinned": false}, {"id": "CVE-2026-75838", "publisher": "VulnCheck", "title": "DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-r", "summary": "DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75838"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21582, "pinned": false}, {"id": "CVE-2026-75841", "publisher": "VulnCheck", "title": "ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows a", "summary": "ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range() expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or unavailability.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75841"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30103, "pinned": false}, {"id": "CVE-2026-74975", "publisher": "Mozilla Corporation", "title": "Spoofing issue in the Downloads component in Firefox for Android", "summary": "Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00246, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "firefox mobile", "vendor": "mozilla", "type": "app", "affected": ["< 154.0"], "fixed": "154.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy firefox-mobile || rpm -q firefox-mobile || firefox-mobile --version"}, {"label": "2. UPGRADE to 154.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade firefox-mobile"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade firefox-mobile"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74975"}, {"t": "Vendor Advisory", "u": "https://www.mozilla.org/security/advisories/mfsa2026-74/"}], "cwe": ["CWE-451"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15056, "pinned": false}, {"id": "CVE-2026-72532", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0", "summary": "Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72532"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1072-20260805-core-improper-acl-checks-for-category-webservice-endpoints.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17355, "pinned": false}, {"id": "CVE-2026-63336", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol() and ConnectionFactory.useSslProtocol(String) configure com.rabbitmq.client.TrustEverythingTrustManager and leave hostname verification disabled, causing arbitrary server certificates, including self-signed certificates, to be accepted. A network attacker abl", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63336"}], "cwe": ["CWE-295"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22349, "pinned": false}, {"id": "CVE-2026-71572", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - L", "summary": "Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00243, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 3.0.0 and < 5.4.8", ">= 6.0.0 and <= 6.1.3"], "fixed": "5.4.8", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71572"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1068-20260801-core-response-header-injection-in-download-views.html"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14682, "pinned": false}, {"id": "CVE-2026-72531", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, ", "summary": "Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create fields for inaccessible components.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-72531"}, {"t": "Vendor Advisory, Broken Link", "u": "https://developer.joomla.org/security-centre/20260804-core-improper-acl-checks-for-custom-fields-webservice-endpoints.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17355, "pinned": false}, {"id": "CVE-2026-71317", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/authorities with type=subca did not require AuthorityPermission on the parent authority when ADMIN_ONLY_AUTHORITY_CREATION was false. AssociatedAuthoritySchema resolved the caller-supplied parent and passed it through authority creation to cryptography-issuer, which used the parent authority_certificate.private_key to sign a new intermediate. Any authenticated non-read-only user ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00105, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71317"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01029, "pinned": false}, {"id": "CVE-2026-76032", "publisher": "VulnCheck", "title": "Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user", "summary": "Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/{Uuid} in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for GET /a/share/cell/{Uuid} loads the workspace and requires MatchPolicies with ResourcePolicyAction_READ, returning a not-found error so that existence i", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00378, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76032"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30623, "pinned": false}, {"id": "CVE-2026-75081", "publisher": "VulDB", "title": "A vulnerability was detected in Webkul Bagisto up to 2.4.4", "summary": "A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rma_qty/resolution_type/rma_reason_id results in enforcement of behavioral workflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor confirms: \"The reported issues were already identified through our internal security assessment process ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00367, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75081"}], "cwe": ["CWE-840", "CWE-841"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29432, "pinned": false}, {"id": "CVE-2026-19447", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbi", "summary": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS.\n\nThis issue affects FileOrbis: before 16.5.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19447"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12575, "pinned": false}, {"id": "CVE-2026-5224", "publisher": "Computer Emergency Response Team of the Republic of Turkey", "title": "Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Indust", "summary": "Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade Inc. Cryptosim allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Cryptosim: before 3.1.0.229.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5224"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06487, "pinned": false}, {"id": "CVE-2026-75107", "publisher": "VulnCheck", "title": "Grav Form Plugin before 9.1.19 fails to escape field-definition properties including prepend, append, spacer t", "summary": "Grav Form Plugin before 9.1.19 fails to escape field-definition properties including prepend, append, spacer text, section text, and select option labels in form templates. Attackers with form authoring privileges can inject arbitrary HTML and JavaScript that executes for all form visitors through unescaped |raw filters and unquoted attributes.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00235, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75107"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13599, "pinned": false}, {"id": "CVE-2026-73426", "publisher": "GitHub, Inc.", "title": "Trix is a what-you-see-is-what-you-get rich text editor for everyday writing", "summary": "Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes attribute with a malicious payload that, when rendered, executes arbitrary JavaScript in the user's session and may perform unauthorized actions or disclose ", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.0032, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73426"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2382, "pinned": false}, {"id": "CVE-2026-74004", "publisher": "Patchstack", "title": "Subscriber Broken Access Control in Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms <= 6.0 vers", "summary": "Subscriber Broken Access Control in Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms <= 6.0 versions.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74004"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13097, "pinned": false}, {"id": "CVE-2026-53456", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom_components/blueprint_studio/backend/terminal_manager.py wrote SSH private-key material to a file under the Home Assistant configuration directory before applying restrictive permissions and relied on best-effort cleanup. The key could temporarily remain on disk and could persist if clean", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53456"}], "cwe": ["CWE-522"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10517, "pinned": false}, {"id": "CVE-2026-75835", "publisher": "VulnCheck", "title": "Grav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in user", "summary": "Grav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize() (AbstractApiController.php). The function fails to consult the calling request's API key scopes, relying instead on the account's raw super-admin flag and ACL grants. As a result, an authenticated attacker holding a scoped API key minted on a privileged account can bypass their declared scope restrictions to access autho", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00308, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75835"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22412, "pinned": false}, {"id": "CVE-2026-75839", "publisher": "VulnCheck", "title": "ArcadeDB (com.arcadedb:arcadedb-server) versions <= 26.7.3 contain an insecure direct object reference (IDOR) ", "summary": "ArcadeDB (com.arcadedb:arcadedb-server) versions <= 26.7.3 contain an insecure direct object reference (IDOR) vulnerability in the Raft cluster-info endpoints (GetClusterHandler and PostBootstrapStateHandler), which authenticate but do not authorize access. On an ArcadeDB HA cluster (only reachable when arcadedb.ha.enabled is set and the ha-raft module is loaded), any authenticated user \u2014 including one granted access to only one database or none ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75839"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22242, "pinned": false}, {"id": "CVE-2026-70657", "publisher": "GitHub, Inc.", "title": "Copyparty is a portable file server", "summary": "Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory key, granting read access to the containing folder. This vulnerability was only reachable if both types of keys (filekeys and dirkeys) were manually enabled in the volume flags simultaneously. This issue is fixed in version 1.20.17.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70657"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25046, "pinned": false}, {"id": "CVE-2026-49500", "publisher": "Dell", "title": "Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before ", "summary": "Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privileges.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00104, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49500"}], "cwe": ["CWE-272"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00969, "pinned": false}, {"id": "CVE-2026-74908", "publisher": "VulnCheck", "title": "Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks fo", "summary": "Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks for the exact extension 'svg', allowing .svgz and .xhtml files to bypass sanitization and be stored unsanitized. Attackers with api.media.write permission can upload files containing executable script payloads that execute in the site origin when accessed by administrators or visitors.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74908"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16137, "pinned": false}, {"id": "CVE-2026-75832", "publisher": "VulnCheck", "title": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15) c", "summary": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15) contains a missing authorization vulnerability in BlueprintPathResolver::resolveUserScope(). The method gates the users/<name> scope on the account's raw super-admin ACL flag (access.api.super) instead of validating the presented API key's actual scope. An attacker holding an API key scoped only to api.media.write minted on a super-admin a", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75832"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21368, "pinned": false}, {"id": "CVE-2026-18751", "publisher": "Citrix Systems, Inc.", "title": "External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.\n\nThis issue affects Work", "summary": "External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.\n\nThis issue affects WorkSpace App: 2607.", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00181, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-18751"}], "cwe": ["CWE-73"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07329, "pinned": false}, {"id": "CVE-2026-66634", "publisher": "Patchstack", "title": "Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.", "summary": "Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66634"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18253, "pinned": false}, {"id": "CVE-2026-73371", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An", "summary": "Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00285, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 4.0.0 and <= 5.4.8", ">= 6.0.0 and <= 6.1.3"], "fixed": "newer than 6.1.3", "safe": "before 4.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to newer than 6.1.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_4.0.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_4.0.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73371"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1075-20260808-core-improper-acl-checks-for-batch-copy-actions.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19953, "pinned": false}, {"id": "CVE-2026-73372", "publisher": "Joomla! Project", "title": "Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 a", "summary": "Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact information for unaccessible contact items into schema.org snippets.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00285, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [{"name": "joomla\\!", "vendor": "joomla", "type": "app", "affected": [">= 5.1.0 and < 5.4.8", ">= 6.0.0 and < 6.1.3"], "fixed": "5.4.8, 6.1.3", "safe": "before 5.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy joomla || rpm -q joomla || joomla --version"}, {"label": "2. UPGRADE to 5.4.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade joomla"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade joomla"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison joomla\nsudo apt install joomla=<VERSION_BEFORE_5.1.0>\nsudo apt-mark hold joomla"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list joomla\nsudo dnf downgrade joomla-<VERSION_BEFORE_5.1.0>\nsudo dnf versionlock add joomla"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73372"}, {"t": "Vendor Advisory", "u": "https://developer.joomla.org/security-centre/1076-20260809-core-improper-acl-checks-when-injection-schema-org-contact-data.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.19953, "pinned": false}, {"id": "CVE-2026-63640", "publisher": "GitHub, Inc.", "title": "MagicMirror\u00b2 is an open source modular smart mirror platform", "summary": "MagicMirror\u00b2 is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node_helper.js passes every inbound object payload through replaceSecretPlaceholder in js/server_functions.js before invoking socketNotificationReceived. A client connected to a loaded module namespace can submit a SECRET_API_KEY placeholder, causing the server to replace it with the corresponding", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63640"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21301, "pinned": false}, {"id": "CVE-2026-74903", "publisher": "VulnCheck", "title": "SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpo", "summary": "SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to transform arbitrary DOM input, and large payloads cause endpoint starvation through per-path mutex serialization.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74903"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15948, "pinned": false}, {"id": "CVE-2026-74003", "publisher": "Patchstack", "title": "Contributor Broken Access Control in RomethemeForm For Elementor <= 1.2.6 versions.", "summary": "Contributor Broken Access Control in RomethemeForm For Elementor <= 1.2.6 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74003"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16051, "pinned": false}, {"id": "CVE-2026-74006", "publisher": "Patchstack", "title": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "summary": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74006"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16052, "pinned": false}, {"id": "CVE-2026-75151", "publisher": "VulDB", "title": "A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0", "summary": "A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75151"}], "cwe": ["CWE-352", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12414, "pinned": false}, {"id": "CVE-2026-75833", "publisher": "VulnCheck", "title": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before version 1.0", "summary": "The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo(). The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in special (http/https) schemes, so a returnTo value such as '/\\evil.com' passes the guard and is later resolved by the browser as the protocol-relativ", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00219, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75833"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11704, "pinned": false}, {"id": "CVE-2026-71322", "publisher": "GitHub, Inc.", "title": "Lemur manages TLS certificate creation", "summary": "Lemur manages TLS certificate creation. Prior to 1.9.3, CertificateExport placed its CertificatePermission ownership check inside the plugin.requires_key branch for POST /api/1/certificates//export. A plugin declaring requires_key false bypassed that check, and the handler still passed cert.private_key as an argument and recorded a key_view audit event. The bundled JavaTruststoreExportPlugin ignored the key, so the immediate exposure was limited ", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00234, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71322"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13458, "pinned": false}, {"id": "CVE-2026-75850", "publisher": "VulnCheck", "title": "ArcadeDB before 26.8.1 fails to bind the authenticated principal (setCurrentUser) on its batch and time-series", "summary": "ArcadeDB before 26.8.1 fails to bind the authenticated principal (setCurrentUser) on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer (LocalBucket.checkPermissionsOnFile) does not execute for these handlers. In deployments that use per-type or per-group ACLs, a user with database access but only limited per-type permissions can read from and write to types th", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75850"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10259, "pinned": false}, {"id": "CVE-2026-63641", "publisher": "GitHub, Inc.", "title": "MagicMirror\u00b2 is an open source modular smart mirror platform", "summary": "MagicMirror\u00b2 is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.js is attached directly to the HTTP server without equivalent IP allowlist, origin, or namespace authentication checks. In a documented non-loopback deployment that relies on ipWhitelist, an unauthenticated adjacent-network client can connect directly to module Socket.IO", "cvss": 2.3, "sev": "LOW", "epss": 0.00433, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63641"}], "cwe": ["CWE-284"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.36566, "pinned": false}, {"id": "CVE-2026-68927", "publisher": "GitHub, Inc.", "title": "MobSF is a mobile application security testing tool used", "summary": "MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/manifest_analysis.py validates only an Android manifest android:host value with valid_host before appending a separately supplied android:port to the URL fetched by _check_url, allowing an authenticated user to upload a crafted APK that makes requests to an attacker-selected nonstandard port at /.well-known/asse", "cvss": 3.0, "sev": "LOW", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-68927"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25082, "pinned": false}, {"id": "CVE-2026-50126", "publisher": "GitHub, Inc.", "title": "Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-", "summary": "Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry contains a malformed coordinate. The coordinate parser in `adagucserverEC/CConvertGeoJSON.cpp` indexes `pt.u.array.values[0]` and `pt.u.array.values[1]` an", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00177, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50126"}], "cwe": ["CWE-125", "CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06904, "pinned": false}, {"id": "CVE-2026-61634", "publisher": "GitHub, Inc.", "title": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit", "summary": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory continue to validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the negotiated limit is not applied c", "cvss": 0.0, "sev": "NONE", "epss": 0.00488, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61634"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.41121, "pinned": false}, {"id": "CVE-2026-75904", "publisher": "VulnCheck", "title": "libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp", "summary": "libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array pat_loops, so an index of zero reads pat_loops[-1], one byte before the array. The index is the smpno field of a parsed MIDI event, which is initialised to zero and only later overwritten from a program-change ", "cvss": 3.3, "sev": "LOW", "epss": 0.00186, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T22:10:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75904"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07754, "pinned": false}, {"id": "CVE-2026-71227", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libkcapi", "summary": "A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00197, "kev": false, "added": "2026-08-05", "modified": "2026-10-22T21:17:22.223", "products": [{"name": "hardened images", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hardened-images || rpm -q hardened-images || hardened-images --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "openshift container platform", "vendor": "redhat", "type": "app", "affected": ["4.0"], "fixed": null, "safe": "before 4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openshift-container-platform || rpm -q openshift-container-platform || openshift-container-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison openshift-container-platform\nsudo apt install openshift-container-platform=<VERSION_BEFORE_4.0>\nsudo apt-mark hold openshift-container-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list openshift-container-platform\nsudo dnf downgrade openshift-container-platform-<VERSION_BEFORE_4.0>\nsudo dnf versionlock add openshift-container-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "libkcapi", "vendor": "smuellerdd", "type": "app", "affected": [">= 0.12.0 and < 1.5.1"], "fixed": "1.5.1", "safe": "before 0.12.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libkcapi || rpm -q libkcapi || libkcapi --version"}, {"label": "2. UPGRADE to 1.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libkcapi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libkcapi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.12.0 (Debian / Ubuntu)", "cmd": "apt-cache madison libkcapi\nsudo apt install libkcapi=<VERSION_BEFORE_0.12.0>\nsudo apt-mark hold libkcapi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libkcapi\nsudo dnf downgrade libkcapi-<VERSION_BEFORE_0.12.0>\nsudo dnf versionlock add libkcapi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["8.0", "9.0", "10.0"], "fixed": null, "safe": "before 8.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71227"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71227"}, {"t": "Exploit, Issue Tracking", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2462867"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.08919, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67267\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.0-6.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69285\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67266\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67265\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9.6 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-2.el9_6.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87712\nrpm -q libkcapi", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71226", "publisher": "Red Hat, Inc.", "title": "Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error befor", "summary": "Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00135, "kev": false, "added": "2026-08-05", "modified": "2026-10-22T21:17:22.063", "products": [{"name": "hardened images", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hardened-images || rpm -q hardened-images || hardened-images --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "openshift container platform", "vendor": "redhat", "type": "app", "affected": ["4.0"], "fixed": null, "safe": "before 4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openshift-container-platform || rpm -q openshift-container-platform || openshift-container-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison openshift-container-platform\nsudo apt install openshift-container-platform=<VERSION_BEFORE_4.0>\nsudo apt-mark hold openshift-container-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list openshift-container-platform\nsudo dnf downgrade openshift-container-platform-<VERSION_BEFORE_4.0>\nsudo dnf versionlock add openshift-container-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "libkcapi", "vendor": "smuellerdd", "type": "app", "affected": [">= 0.12.0 and < 1.5.1"], "fixed": "1.5.1", "safe": "before 0.12.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libkcapi || rpm -q libkcapi || libkcapi --version"}, {"label": "2. UPGRADE to 1.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libkcapi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libkcapi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.12.0 (Debian / Ubuntu)", "cmd": "apt-cache madison libkcapi\nsudo apt install libkcapi=<VERSION_BEFORE_0.12.0>\nsudo apt-mark hold libkcapi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libkcapi\nsudo dnf downgrade libkcapi-<VERSION_BEFORE_0.12.0>\nsudo dnf versionlock add libkcapi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["8.0", "9.0", "10.0"], "fixed": null, "safe": "before 8.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71226"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71226"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2462114"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.02727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67267\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.0-6.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69285\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67266\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67265\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9.6 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-2.el9_6.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87712\nrpm -q libkcapi", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71225", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libkcapi", "summary": "A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (CBC), the library improperly reuses the Initialization Vector (IV) for each internal data chunk. A remote attacker could potentially exploit this by making an application that uses libkcapi process specially crafted large inputs. This can lead to a significant weakening ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00345, "kev": false, "added": "2026-08-05", "modified": "2026-10-22T21:17:21.860", "products": [{"name": "hardened images", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hardened-images || rpm -q hardened-images || hardened-images --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "openshift container platform", "vendor": "redhat", "type": "app", "affected": ["4.0"], "fixed": null, "safe": "before 4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openshift-container-platform || rpm -q openshift-container-platform || openshift-container-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison openshift-container-platform\nsudo apt install openshift-container-platform=<VERSION_BEFORE_4.0>\nsudo apt-mark hold openshift-container-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list openshift-container-platform\nsudo dnf downgrade openshift-container-platform-<VERSION_BEFORE_4.0>\nsudo dnf versionlock add openshift-container-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "libkcapi", "vendor": "smuellerdd", "type": "app", "affected": [">= 0.10.1 and < 1.5.1"], "fixed": "1.5.1", "safe": "before 0.10.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libkcapi || rpm -q libkcapi || libkcapi --version"}, {"label": "2. UPGRADE to 1.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libkcapi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libkcapi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.10.1 (Debian / Ubuntu)", "cmd": "apt-cache madison libkcapi\nsudo apt install libkcapi=<VERSION_BEFORE_0.10.1>\nsudo apt-mark hold libkcapi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libkcapi\nsudo dnf downgrade libkcapi-<VERSION_BEFORE_0.10.1>\nsudo dnf versionlock add libkcapi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["8.0", "9.0", "10.0"], "fixed": null, "safe": "before 8.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71225"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-71225"}, {"t": "Exploit, Issue Tracking", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2462011"}], "cwe": ["CWE-330"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26881, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libkcapi", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67267\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.0-6.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69285\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67266\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-3.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:67265\nrpm -q libkcapi", "url": null, "note": null}, {"os": "RHEL 9.6 Extended Update Support", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.4.0-2.el9_6.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:87712\nrpm -q libkcapi", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libkcapi", "status": "fixed", "fixed": "libkcapi-1.5.1-r0", "cmd": "apk add --upgrade libkcapi\napk info -v libkcapi", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-6554", "publisher": "Tcpdump Group", "title": "libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement loopi", "summary": "libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0031, "kev": false, "added": "2026-09-05", "modified": "2026-10-22T21:17:21.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-6554"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22673, "pinned": false, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3100 (important): libpcap", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3100.html", "date": "2026-09-29"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3927 (important): libpcap", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3927.html", "date": "2026-09-28"}], "buzz": 2, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "libpcap", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libpcap", "status": "fixed", "fixed": "libpcap-1.10.7-r0", "cmd": "apk add --upgrade libpcap\napk info -v libpcap", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libpcap", "status": "fixed", "fixed": "libpcap-1.10.7-r0", "cmd": "apk add --upgrade libpcap\napk info -v libpcap", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libpcap", "status": "fixed", "fixed": "libpcap-1.10.7-r0", "cmd": "apk add --upgrade libpcap\napk info -v libpcap", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libpcap", "status": "fixed", "fixed": "libpcap-1.10.7-r0", "cmd": "apk add --upgrade libpcap\napk info -v libpcap", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3100", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-6554.html", "note": "ALAS2023-2026-3100"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3927", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-6554.html", "note": "ALAS2-2026-3927"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5260", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libgnutls", "summary": "A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00945, "kev": false, "added": "2026-05-26", "modified": "2026-10-22T21:17:20.440", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5260"}], "cwe": ["CWE-126"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.60729, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Ubuntu 20.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.6.13-2ubuntu1.12+esm2", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.6.13-2ubuntu1.12+esm2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.7.3-4ubuntu1.9", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.7.3-4ubuntu1.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.3-1.1ubuntu3.6", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.3-1.1ubuntu3.6\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.9-3ubuntu2.2", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.9-3ubuntu2.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "gnutls28", "status": "fixed", "fixed": "3.7.9-2+deb12u7", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.7.9-2+deb12u7\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "gnutls28", "status": "fixed", "fixed": "3.8.9-3+deb13u4", "cmd": "sudo apt update && sudo apt install --only-upgrade gnutls28\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' gnutls28)\" ge \"3.8.9-3+deb13u4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.10-4.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:20613\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.9-9.el10_0.19", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:26409\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.16-8.el8_10.6", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:20611\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.4 Advanced Mission Critical Update Support", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.6.14-10.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q gnutls", "url": null, "note": null}, {"os": "RHEL 8.4 Advanced Mission Critical Update Support", "pkg": "libtasn1", "status": "fixed", "fixed": "libtasn1-4.13-3.el8_4.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:33125\nrpm -q libtasn1", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.13-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.13-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.13-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "gnutls", "status": "fixed", "fixed": "gnutls-3.8.13-r0", "cmd": "apk add --upgrade gnutls\napk info -v gnutls", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1757", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-5260.html", "note": "ALAS2023-2026-1757"}], "vendors_checked": "2026-10-23T16:52:41.195741+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58015", "publisher": "Red Hat, Inc.", "title": "A flaw was found in GLib", "summary": "A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00774, "kev": false, "added": "2026-06-30", "modified": "2026-10-22T21:17:19.857", "products": [{"name": "glib", "vendor": "gnome", "type": "app", "affected": ["< 2.88.1"], "fixed": "2.88.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy glib || rpm -q glib || glib --version"}, {"label": "2. UPGRADE to 2.88.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade glib"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade glib"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["6.0", "7.0", "8.0", "9.0", "10.0"], "fixed": null, "safe": "before 6.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58015"}, {"t": "Exploit, Issue Tracking", "u": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P1", "why": ["Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.55288, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.64.6-1~ubuntu20.04.9+esm2", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.64.6-1~ubuntu20.04.9+esm2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.72.4-0ubuntu2.10", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.72.4-0ubuntu2.10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.80.0-6ubuntu3.9", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.80.0-6ubuntu3.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "glib2.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glib2.0", "status": "fixed", "fixed": "2.84.4-3~deb13u4", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.84.4-3~deb13u4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.80.4-12.el10_2.21", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:57015\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.80.4-4.el10_0.17", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:65767\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.56.1-13.el7_9.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:65773\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "mingw-glib2", "status": "fixed", "fixed": "mingw-glib2-2.70.1-9.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:49512\nrpm -q mingw-glib2", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.56.4-177.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:61766\nrpm -q glib2", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1942", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-58015.html", "note": "ALAS2023-2026-1942"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58014", "publisher": "Red Hat, Inc.", "title": "A flaw was found in GLib", "summary": "A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.", "cvss": 7.3, "sev": "HIGH", "epss": 0.00488, "kev": false, "added": "2026-06-30", "modified": "2026-10-22T21:17:19.150", "products": [{"name": "glib", "vendor": "gnome", "type": "app", "affected": ["< 2.88.1"], "fixed": "2.88.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy glib || rpm -q glib || glib --version"}, {"label": "2. UPGRADE to 2.88.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade glib"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade glib"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["6.0", "7.0", "8.0", "9.0", "10.0"], "fixed": null, "safe": "before 6.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-58014"}], "cwe": ["CWE-193"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P1", "why": ["High severity", "Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.41127, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.64.6-1~ubuntu20.04.9+esm2", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.64.6-1~ubuntu20.04.9+esm2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.72.4-0ubuntu2.10", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.72.4-0ubuntu2.10\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "glib2.0", "status": "fixed", "fixed": "2.80.0-6ubuntu3.9", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.80.0-6ubuntu3.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "glib2.0", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "glib2.0", "status": "fixed", "fixed": "2.84.4-3~deb13u4", "cmd": "sudo apt update && sudo apt install --only-upgrade glib2.0\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' glib2.0)\" ge \"2.84.4-3~deb13u4\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.80.4-12.el10_2.21", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:57015\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.80.4-4.el10_0.17", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:65767\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.56.1-13.el7_9.1", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:65773\nrpm -q glib2", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "mingw-glib2", "status": "fixed", "fixed": "mingw-glib2-2.70.1-9.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:49512\nrpm -q mingw-glib2", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "glib2", "status": "fixed", "fixed": "glib2-2.56.4-177.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:61766\nrpm -q glib2", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1942", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-58014.html", "note": "ALAS2023-2026-1942"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}}, {"id": "CVE-2026-55644", "publisher": "GitHub, Inc.", "title": "Element X iOS is a Matrix iOS Client provided by Element", "summary": "Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an attacker-controlled origin inside the call screen's WKWebView which will be granted device microphone and camera permissions (provided the user has previously grant", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00304, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:19.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55644"}], "cwe": ["CWE-20"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21986, "pinned": false}, {"id": "CVE-2026-4629", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Keycloak", "summary": "A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions and inject the `realm-admin` role into generated tokens, resulting in privilege escalation and full administrative access to the realm.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00486, "kev": false, "added": "2026-06-30", "modified": "2026-10-22T21:17:18.827", "products": [{"name": "build of keycloak", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy build-of-keycloak || rpm -q build-of-keycloak || build-of-keycloak --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4629"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-4629"}, {"t": "Exploit, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2450244"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.40954, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-4628", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Keycloak", "summary": "A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak\u2019s User-Managed Access (UMA) resource_set endpoint allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false restriction. This occurs due to incomplete enforcement of access control checks on PUT operations to the resource_set endpoint. This issue enables unauthorized modification of protected resources, impacting data integrity.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-03-23", "modified": "2026-10-22T21:17:18.640", "products": [{"name": "build of keycloak", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy build-of-keycloak || rpm -q build-of-keycloak || build-of-keycloak --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-4628"}, {"t": "Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-4628"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2450240"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.25505, "pinned": false}, {"id": "CVE-2026-3628", "publisher": "IBM Corporation", "title": "IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.", "summary": "IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:18.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-3628"}], "cwe": ["CWE-209"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24904, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-3161", "publisher": "IBM Corporation", "title": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow ", "summary": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:18.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-3161"}], "cwe": ["CWE-327"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.10448, "pinned": false}, {"id": "CVE-2026-37980", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Keycloak, specifically in the organization selection login page", "summary": "A flaw was found in Keycloak, specifically in the organization selection login page. A remote attacker with `manage-realm` or `manage-organizations` administrative privileges can exploit a Stored Cross-Site Scripting (XSS) vulnerability. This flaw occurs because the `organization.alias` is placed into an inline JavaScript `onclick` handler, allowing a crafted JavaScript payload to execute in a user's browser when they view the login page. Success", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00355, "kev": false, "added": "2026-04-14", "modified": "2026-10-22T21:17:18.210", "products": [{"name": "build of keycloak", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy build-of-keycloak || rpm -q build-of-keycloak || build-of-keycloak --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-37980"}, {"t": "Mitigation, Vendor Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-37980"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2455325"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28059, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "org.keycloak:keycloak-services", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-m32f-8vh9-2hh3", "note": "vulnerable: <= 26.5.5"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15661", "publisher": "IBM Corporation", "title": "IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to imprope", "summary": "IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0031, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:18.087", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15661"}], "cwe": ["CWE-117"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22674, "pinned": false}, {"id": "CVE-2026-11319", "publisher": "VulnCheck", "title": "TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its export", "summary": "TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename via ACTION_SEND intents. A malicious application can register a ContentProvider returning a _display_name value containing traversal sequences, which is ", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00136, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:17.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11319"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02757, "pinned": false}, {"id": "CVE-2026-113582", "publisher": "Apache Software Foundation", "title": "UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an at", "summary": "UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access sensitive data or make server-side requests when an application parses attacker-controlled XML with Abdera.\n\n\n\nThis issue affects Apache Abdera: all versions.\n\n\n\nApache Abdera is retired and no longer supported, so we do not plan to release a version that fixes this issue. Users are recommended to migrate to a maintained ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00463, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T21:17:16.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113582"}], "cwe": ["CWE-611"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.39164, "pinned": false, "pocs": [], "ssvc": null, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-112780", "publisher": "VulnCheck", "title": "Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbi", "summary": "Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-*@ directives past the callable check to invoke Folder::delete, Folder::move, or Utils::download, deleting directories, overwriting files, or reading files.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00303, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:16.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112780"}], "cwe": ["CWE-749"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21853, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112775", "publisher": "VulnCheck", "title": "Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to re", "summary": "Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the victim verifies an email change, resetting the password and taking over the account.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00311, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:16.117", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112775"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22772, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112770", "publisher": "VulnCheck", "title": "Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig g", "summary": "Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables without the checkArrow guard used by other arrow-accepting filters. Authenticated control panel users can pass an array-callable such as FileHelper::writeToFile via element-select condition rules to write a webshell to the webroot and execute code as the web user.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00583, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.980", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112770"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.47157, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112398", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix fi", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00321, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.783", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112398"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23909, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112394", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose accepted size is smaller than the unpacker's actual footprint. This can disclose up to three adjacent heap bytes in output pixels or crash the process. Thi", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00291, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.580", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112394"}], "cwe": ["CWE-126"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20606, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-4558-3h8r-v8xp", "note": "vulnerable: <= 12.3.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112302", "publisher": "VulDB", "title": "A weakness has been identified in kiwilan php-archive up to 2.3.02", "summary": "A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0041, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112302"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.34132, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112297", "publisher": "VulDB", "title": "A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12", "summary": "A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Configuration Handler. This manipulation of the argument base_url causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.277", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112297"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1621, "pinned": false}, {"id": "CVE-2026-112259", "publisher": "Red Hat, Inc.", "title": "A flaw was found in GIMP", "summary": "A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00108, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:15.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112259"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01127, "pinned": false}, {"id": "CVE-2026-112249", "publisher": "VulDB", "title": "A vulnerability was detected in grandnode grandnode2 up to 2.3.0", "summary": "A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation results in cross site scripting. The attack can be launched remotely. Upgrading to version 2.4.0-beta and 2.4.0 is able to address this issue. The patch is identified as 41a8e349eab8d9641cf6ea800d738f2d8991ca22. Up", "cvss": 2.4, "sev": "LOW", "epss": 0.00398, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:14.987", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112249"}], "cwe": ["CWE-79", "CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32878, "pinned": false}, {"id": "CVE-2026-112193", "publisher": "VulDB", "title": "A vulnerability was detected in Webkul Aureus ERP up to 1.6.0", "summary": "A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is now public and may be", "cvss": 3.7, "sev": "LOW", "epss": 0.00362, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:14.837", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112193"}], "cwe": ["CWE-521"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.28796, "pinned": false}, {"id": "CVE-2026-111749", "publisher": "GitHub, Inc.", "title": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python", "summary": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, although impact is limited when applications do not reflect those cookies to a browser. This issue is fixed in version 3.14.4.", "cvss": 2.3, "sev": "LOW", "epss": 0.00294, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:14.683", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111749"}], "cwe": ["CWE-565"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20865, "pinned": false}, {"id": "CVE-2026-111063", "publisher": "GitHub, Inc.", "title": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python", "summary": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-10-19", "modified": "2026-10-22T21:17:14.523", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111063"}], "cwe": ["CWE-311", "CWE-1004"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.11886, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Python (pip)", "pkg": "aiohttp", "status": "fixed", "fixed": "3.14.4", "cmd": "pip install --upgrade \"aiohttp>=3.14.4\"\npip show aiohttp", "url": "https://github.com/advisories/GHSA-494j-54xm-rwp3", "note": "vulnerable: <= 3.14.3"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "python-aiohttp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-aiohttp", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2025-71438", "publisher": "MITRE", "title": "An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 all", "summary": "An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T21:17:14.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-71438"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05294, "pinned": false}, {"id": "CVE-2025-60496", "publisher": "MITRE", "title": "A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP", "summary": "A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00201, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T21:17:14.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60496"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09428, "pinned": false}, {"id": "CVE-2025-60479", "publisher": "MITRE", "title": "A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box b", "summary": "A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T21:17:13.910", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60479"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05295, "pinned": false}, {"id": "CVE-2025-60478", "publisher": "MITRE", "title": "A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box b", "summary": "A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T21:17:13.790", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60478"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05854, "pinned": false}, {"id": "CVE-2025-60476", "publisher": "MITRE", "title": "A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box be", "summary": "A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00176, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T21:17:13.677", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60476"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06728, "pinned": false}, {"id": "CVE-2025-60469", "publisher": "MITRE", "title": "A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Pro", "summary": "A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00176, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T21:17:13.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60469"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06728, "pinned": false}, {"id": "CVE-2025-11395", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Podman", "summary": "A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0038, "kev": false, "added": "2026-09-15", "modified": "2026-10-22T21:17:13.340", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-11395"}], "cwe": ["CWE-277"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.30802, "pinned": false}, {"id": "CVE-2024-9407", "publisher": "Red Hat, Inc.", "title": "A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction", "summary": "A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories from the host into a container during the build process and, in some cases, modify the contents of those mounted files. Even if SELinux is used, this vul", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.0029, "kev": false, "added": "2024-10-01", "modified": "2026-10-22T21:17:13.157", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-9407"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.20483, "pinned": false}, {"id": "CVE-2024-9355", "publisher": "Red Hat, Inc.", "title": "A vulnerability was found in Golang FIPS OpenSSL", "summary": "A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a deri", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2024-10-01", "modified": "2026-10-22T21:17:12.640", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-9355"}], "cwe": ["CWE-457"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21313, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "github.com/golang-fips/openssl", "status": "vulnerable", "fixed": null, "cmd": null, "url": "https://github.com/advisories/GHSA-3h3x-2hwv-hr52", "note": "vulnerable: <= 2.0.3"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "rhc-worker-script", "status": "fixed", "fixed": "rhc-worker-script-0.10-2.el7_9", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:10133\nrpm -q rhc-worker-script", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "grafana", "status": "fixed", "fixed": "grafana-9.2.10-20.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:8327\nrpm -q grafana", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "grafana-pcp", "status": "fixed", "fixed": "grafana-pcp-5.1.1-9.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:8847\nrpm -q grafana-pcp", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "osbuild-composer", "status": "fixed", "fixed": "osbuild-composer-101.5-2.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:66016\nrpm -q osbuild-composer", "url": null, "note": null}, {"os": "RHEL 8.6 Advanced Mission Critical Update Support", "pkg": "osbuild-composer", "status": "fixed", "fixed": "osbuild-composer-46.3-8.el8_6", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69235\nrpm -q osbuild-composer", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2024-3727", "publisher": "Red Hat, Inc.", "title": "A flaw was found in the github.com/containers/image library", "summary": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.", "cvss": 8.3, "sev": "HIGH", "epss": 0.01279, "kev": false, "added": "2024-05-14", "modified": "2026-10-22T21:17:11.693", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"}], "cwe": ["CWE-354"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.69788, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Go", "pkg": "github.com/containers/image", "status": "fixed", "fixed": "5.30.1", "cmd": "go get github.com/containers/image@v5.30.1\ngo list -m github.com/containers/image", "url": "https://github.com/advisories/GHSA-6wvf-f2vw-3425", "note": "vulnerable: < 5.30.1"}, {"os": "Go", "pkg": "github.com/containers/image/v5", "status": "fixed", "fixed": "5.30.1", "cmd": "go get github.com/containers/image/v5@v5.30.1\ngo list -m github.com/containers/image/v5", "url": "https://github.com/advisories/GHSA-6wvf-f2vw-3425", "note": "vulnerable: >= 5.30.0, < 5.30.1"}, {"os": "Debian 12", "pkg": "golang-github-containers-image", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "golang-github-containers-image", "status": "fixed", "fixed": "5.29.3-1", "cmd": "sudo apt update && sudo apt install --only-upgrade golang-github-containers-image\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' golang-github-containers-image)\" ge \"5.29.3-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "buildah", "status": "fixed", "fixed": "buildah-1.37.2-1.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:9097\nrpm -q buildah", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "skopeo", "status": "fixed", "fixed": "skopeo-1.16.1-1.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:9098\nrpm -q skopeo", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "podman", "status": "fixed", "fixed": "podman-5.2.2-1.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2024:9102\nrpm -q podman", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "buildah", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "conmon", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "buildah", "status": "fixed", "fixed": "buildah-1.35.4-r0", "cmd": "apk add --upgrade buildah\napk info -v buildah", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "podman", "status": "fixed", "fixed": "podman-5.0.3-r0", "cmd": "apk add --upgrade podman\napk info -v podman", "url": null, "note": null}, {"os": "Alpine 3.20", "pkg": "skopeo", "status": "fixed", "fixed": "skopeo-1.15.1-r0", "cmd": "apk add --upgrade skopeo\napk info -v skopeo", "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "buildah", "status": "fixed", "fixed": "buildah-1.35.4-r0", "cmd": "apk add --upgrade buildah\napk info -v buildah", "url": null, "note": null}], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": true}, {"id": "CVE-2024-11831", "publisher": "Red Hat, Inc.", "title": "A flaw was found in npm-serialize-javascript", "summary": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentia", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.01122, "kev": false, "added": "2025-02-10", "modified": "2026-10-22T21:17:10.183", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.65962, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "npm", "pkg": "serialize-javascript", "status": "fixed", "fixed": "6.0.2", "cmd": "npm install serialize-javascript@\">=6.0.2\"\nnpm ls serialize-javascript", "url": "https://github.com/advisories/GHSA-76p7-773f-r4q5", "note": "vulnerable: >= 6.0.0, < 6.0.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "node-serialize-javascript", "status": "fixed", "fixed": "6.0.0-2+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade node-serialize-javascript\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' node-serialize-javascript)\" ge \"6.0.0-2+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-serialize-javascript", "status": "fixed", "fixed": "6.0.2-1", "cmd": "sudo apt update && sudo apt install --only-upgrade node-serialize-javascript\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' node-serialize-javascript)\" ge \"6.0.2-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.112-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:0381\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "dotnet8.0", "status": "fixed", "fixed": "dotnet8.0-8.0.112-1.el9_5", "cmd": "sudo dnf upgrade --advisory=RHBA-2025:0304\nrpm -q dotnet8.0", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "dotnet8.0", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "dotnet6.0", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "grafana", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60672", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Conf", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60672"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42475, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60696", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Conf", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60696"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42453, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60698", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confiden", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60698"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42453, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60721", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Int", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60721"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42453, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60782", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments.  Successful attacks of this vulnerability can result in takeover of Oracle Payments. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60782"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42442, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60821", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Inter", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confident", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60821"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42442, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60858", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Calculation Manager. CVSS 3.1 Base Score 9.8 (Confident", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60858"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42474, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60591", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: ", "summary": "Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).  Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and  19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification acces", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hospitality simphony", "vendor": "oracle", "type": "app", "affected": [">= 19.8 and <= 19.8.5", ">= 19.9 and <= 19.9.3", ">= 19.10 and <= 19.10.1"], "fixed": "newer than 19.10.1", "safe": "before 19.8", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hospitality-simphony || rpm -q hospitality-simphony || hospitality-simphony --version"}, {"label": "2. UPGRADE to newer than 19.10.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade hospitality-simphony"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade hospitality-simphony"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.8 (Debian / Ubuntu)", "cmd": "apt-cache madison hospitality-simphony\nsudo apt install hospitality-simphony=<VERSION_BEFORE_19.8>\nsudo apt-mark hold hospitality-simphony"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hospitality-simphony\nsudo dnf downgrade hospitality-simphony-<VERSION_BEFORE_19.8>\nsudo dnf versionlock add hospitality-simphony"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60591"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3787, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60727", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Int", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60727"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4245, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2026-60737", "publisher": "Oracle", "title": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services ", "summary": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Services Manager.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critica", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "web services manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy web-services-manager || rpm -q web-services-manager || web-services-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison web-services-manager\nsudo apt install web-services-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold web-services-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list web-services-manager\nsudo dnf downgrade web-services-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add web-services-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60737"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35763, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60728", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCente", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60728"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41533, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60754", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data and un", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60754"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41534, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60592", "publisher": "Oracle", "title": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator)", "summary": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).  Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (comple", "cvss": 8.2, "sev": "HIGH", "epss": 0.00379, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "mysql cluster", "vendor": "oracle", "type": "app", "affected": [">= 8.0.0 and <= 8.0.48", ">= 8.4.0 and <= 8.4.11", ">= 9.7.0 and <= 9.7.2"], "fixed": "newer than 9.7.2", "safe": "before 8.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mysql-cluster || rpm -q mysql-cluster || mysql-cluster --version"}, {"label": "2. UPGRADE to newer than 9.7.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mysql-cluster"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mysql-cluster"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mysql-cluster\nsudo apt install mysql-cluster=<VERSION_BEFORE_8.0.0>\nsudo apt-mark hold mysql-cluster"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mysql-cluster\nsudo dnf downgrade mysql-cluster-<VERSION_BEFORE_8.0.0>\nsudo dnf versionlock add mysql-cluster"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60592"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.3071, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-60699", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60699"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34656, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60702", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change)", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60702"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36424, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60720", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager.  While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60720"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36471, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60730", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful attacks", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60730"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36444, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71675", "publisher": "MITRE", "title": "An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() f", "summary": "An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c", "cvss": 7.5, "sev": "HIGH", "epss": 0.00549, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71675"}], "cwe": ["CWE-401"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45188, "pinned": false, "pocs": [{"kind": "writeup", "name": "gist.github.com/centauruszzz/fa7e78c6657132dae95318bc4600194b", "url": "https://gist.github.com/centauruszzz/fa7e78c6657132dae95318bc4600194b"}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60796", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data and unauthoriz", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60796"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37454, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60415", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.1 (Co", "cvss": 8.1, "sev": "HIGH", "epss": 0.00424, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60415"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35669, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60860", "publisher": "Oracle", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl", "summary": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affected are 14.1.2.0.0 and  12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Service Delivery Platform.  While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change).  S", "cvss": 8.7, "sev": "HIGH", "epss": 0.00356, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "service delivery platform", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform || rpm -q service-delivery-platform || service-delivery-platform --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60860"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60903", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Succes", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60903"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26244, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60742", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Techn", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confid", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60742"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32211, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60831", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Br", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confide", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60831"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32211, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60861", "publisher": "Oracle", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl", "summary": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affected are 14.1.2.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Service Delivery Platform.  While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "service delivery platform", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform || rpm -q service-delivery-platform || service-delivery-platform --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60861"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.28843, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60905", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00378, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60905"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3061, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60391", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Finan", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60391"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34646, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60393", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycl", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to", "cvss": 7.5, "sev": "HIGH", "epss": 0.00437, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60393"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36963, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60590", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: ", "summary": "Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).  Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and  19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hospitality simphony", "vendor": "oracle", "type": "app", "affected": [">= 19.8 and <= 19.8.5", ">= 19.9 and <= 19.9.3", ">= 19.10 and <= 19.10.1"], "fixed": "newer than 19.10.1", "safe": "before 19.8", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hospitality-simphony || rpm -q hospitality-simphony || hospitality-simphony --version"}, {"label": "2. UPGRADE to newer than 19.10.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade hospitality-simphony"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade hospitality-simphony"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.8 (Debian / Ubuntu)", "cmd": "apt-cache madison hospitality-simphony\nsudo apt install hospitality-simphony=<VERSION_BEFORE_19.8>\nsudo apt-mark hold hospitality-simphony"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hospitality-simphony\nsudo dnf downgrade hospitality-simphony-<VERSION_BEFORE_19.8>\nsudo dnf versionlock add hospitality-simphony"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60590"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60715", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Inte", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60715"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36466, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60716", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60716"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36473, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60722", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60722"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36424, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60726", "publisher": "Oracle", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engi", "summary": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, In", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "access manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy access-manager || rpm -q access-manager || access-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison access-manager\nsudo apt install access-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold access-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list access-manager\nsudo dnf downgrade access-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add access-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60726"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36437, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60729", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60729"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36444, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60731", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via RMI to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60731"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36473, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60751", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impac", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60751"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36466, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60767", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impac", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60767"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36426, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60850", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Unified Direct", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60850"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34659, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60879", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration ", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60879"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36448, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60889", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Unified Direct", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60889"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34642, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60906", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCente", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60906"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34642, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60707", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager.  While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products (scope change).  Successful attack", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60707"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33874, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60820", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Integration accessible d", "cvss": 7.4, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60820"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-1284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31159, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60759", "publisher": "Oracle", "title": "Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Inte", "summary": "Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Internet Procurement Connector.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to ", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60759"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26237, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60766", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Integration accessible ", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60766"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26237, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60792", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deploymen", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60792"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26236, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60797", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel CRM Integration accessible ", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60797"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2624, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60803", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing acce", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60803"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26237, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60680", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical da", "cvss": 8.1, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60680"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.308, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60757", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM End User executes to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60757"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60779", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessi", "cvss": 8.1, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60779"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.308, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60791", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized c", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60791"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30223, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60841", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory.  While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60841"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60849", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory.  While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60849"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25557, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60758", "publisher": "Oracle", "title": "Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI)", "summary": "Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence.  While the vulnerability is in Siebel Artificial Intelligence, attacks may significantly impact additional products (scope change).  Successful attacks of this", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel artificial intelligence", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-artificial-intelligence || rpm -q siebel-artificial-intelligence || siebel-artificial-intelligence --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-artificial-intelligence"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-artificial-intelligence"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-artificial-intelligence\nsudo apt install siebel-artificial-intelligence=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-artificial-intelligence"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-artificial-intelligence\nsudo dnf downgrade siebel-artificial-intelligence-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-artificial-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60758"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21557, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60798", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  While the vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can re", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60798"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21565, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60883", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.2 (Confidentiality, ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60883"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40911, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60392", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In P", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Su", "cvss": 7.8, "sev": "HIGH", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "outside in technology", "vendor": "oracle", "type": "app", "affected": ["8.5.8"], "fixed": null, "safe": "before 8.5.8", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy outside-in-technology || rpm -q outside-in-technology || outside-in-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.5.8 (Debian / Ubuntu)", "cmd": "apt-cache madison outside-in-technology\nsudo apt install outside-in-technology=<VERSION_BEFORE_8.5.8>\nsudo apt-mark hold outside-in-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list outside-in-technology\nsudo dnf downgrade outside-in-technology-<VERSION_BEFORE_8.5.8>\nsudo dnf versionlock add outside-in-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60392"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23624, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60412", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful a", "cvss": 7.8, "sev": "HIGH", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "outside in technology", "vendor": "oracle", "type": "app", "affected": ["8.5.8"], "fixed": null, "safe": "before 8.5.8", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy outside-in-technology || rpm -q outside-in-technology || outside-in-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.5.8 (Debian / Ubuntu)", "cmd": "apt-cache madison outside-in-technology\nsudo apt install outside-in-technology=<VERSION_BEFORE_8.5.8>\nsudo apt-mark hold outside-in-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list outside-in-technology\nsudo dnf downgrade outside-in-technology-<VERSION_BEFORE_8.5.8>\nsudo dnf versionlock add outside-in-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60412"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23624, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60679", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Con", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0", "15.1.1.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60679"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25553, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60748", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle General Ledger.  While the vulnerability is in Oracle General Ledger, attacks may significantly impact additional products (scope change).  Successful attacks of thi", "cvss": 7.6, "sev": "HIGH", "epss": 0.00337, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60748"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25959, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60769", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and A", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60769"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53457", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd working-directory parameter and checked only whether the directory existed, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper c", "cvss": 5.1, "sev": "MEDIUM", "epss": 0.00756, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53457"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.54683, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60682", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financia", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60682"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1858, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60752", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data and una", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60752"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30435, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60865", "publisher": "Oracle", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl", "summary": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affected are 14.1.2.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Service Delivery Platform.  While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change).  Su", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "service delivery platform", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform || rpm -q service-delivery-platform || service-delivery-platform --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60865"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.32655, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60866", "publisher": "Oracle", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl", "summary": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Service Delivery Platform acces", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "service delivery platform", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform || rpm -q service-delivery-platform || service-delivery-platform --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60866"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18578, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60733", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful attac", "cvss": 7.7, "sev": "HIGH", "epss": 0.00249, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60733"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15323, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60693", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Gener", "cvss": 7.1, "sev": "HIGH", "epss": 0.00299, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60693"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21451, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60781", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Payments accessible data as well as  ", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60781"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21554, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60830", "publisher": "Oracle", "title": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist)", "summary": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Workflow accessible data. CVSS 3.1 Base Score ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "workflow", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy workflow || rpm -q workflow || workflow --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade workflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade workflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison workflow\nsudo apt install workflow=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold workflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list workflow\nsudo dnf downgrade workflow-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add workflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60830"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27684, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60413", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful a", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "outside in technology", "vendor": "oracle", "type": "app", "affected": ["8.5.8"], "fixed": null, "safe": "before 8.5.8", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy outside-in-technology || rpm -q outside-in-technology || outside-in-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.5.8 (Debian / Ubuntu)", "cmd": "apt-cache madison outside-in-technology\nsudo apt install outside-in-technology=<VERSION_BEFORE_8.5.8>\nsudo apt-mark hold outside-in-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list outside-in-technology\nsudo dnf downgrade outside-in-technology-<VERSION_BEFORE_8.5.8>\nsudo dnf versionlock add outside-in-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60413"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08446, "pinned": false}, {"id": "CVE-2026-60414", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology.  Successful attacks require human interaction from a person other than the attacker. Successful a", "cvss": 7.8, "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "outside in technology", "vendor": "oracle", "type": "app", "affected": ["8.5.8"], "fixed": null, "safe": "before 8.5.8", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy outside-in-technology || rpm -q outside-in-technology || outside-in-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.5.8 (Debian / Ubuntu)", "cmd": "apt-cache madison outside-in-technology\nsudo apt install outside-in-technology=<VERSION_BEFORE_8.5.8>\nsudo apt-mark hold outside-in-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list outside-in-technology\nsudo dnf downgrade outside-in-technology-<VERSION_BEFORE_8.5.8>\nsudo dnf versionlock add outside-in-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60414"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08446, "pinned": false}, {"id": "CVE-2026-60753", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentia", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60753"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04906, "pinned": false}, {"id": "CVE-2026-60822", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager", "summary": "Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Systems Infrastructure executes to compromise Oracle Enterprise Manager for Systems Infrastructure.  Successful attacks of this ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "enterprise manager for systems infrastructure", "vendor": "oracle", "type": "app", "affected": ["13.5", "24.1"], "fixed": null, "safe": "before 13.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-for-systems-infrastructure || rpm -q enterprise-manager-for-systems-infrastructure || enterprise-manager-for-systems-infrastructure --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-for-systems-infrastructure\nsudo apt install enterprise-manager-for-systems-infrastructure=<VERSION_BEFORE_13.5>\nsudo apt-mark hold enterprise-manager-for-systems-infrastructure"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-for-systems-infrastructure\nsudo dnf downgrade enterprise-manager-for-systems-infrastructure-<VERSION_BEFORE_13.5>\nsudo dnf versionlock add enterprise-manager-for-systems-infrastructure"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60822"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04907, "pinned": false}, {"id": "CVE-2026-60895", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Orac", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60895"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20381, "pinned": false}, {"id": "CVE-2026-53458", "publisher": "GitHub, Inc.", "title": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files", "summary": "Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom_components/blueprint_studio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could contain internal filesystem paths or implementation details. The disclosed information could help an authenticated user fingerprint a Home Assistant install", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00451, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53458"}], "cwe": ["CWE-209"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.38211, "pinned": false}, {"id": "CVE-2026-60765", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability imp", "cvss": 7.5, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60765"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-346", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07413, "pinned": false}, {"id": "CVE-2026-60808", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing.  While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "siebel apps - marketing", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-apps---marketing || rpm -q siebel-apps---marketing || siebel-apps---marketing --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-apps---marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-apps---marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-apps---marketing\nsudo apt install siebel-apps---marketing=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-apps---marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-apps---marketing\nsudo dnf downgrade siebel-apps---marketing-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-apps---marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60808"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02239, "pinned": false}, {"id": "CVE-2026-60873", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and wh", "cvss": 7.2, "sev": "HIGH", "epss": 0.00139, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60873"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02957, "pinned": false}, {"id": "CVE-2026-60902", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise Peopl", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60902"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02376, "pinned": false}, {"id": "CVE-2026-60853", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  ", "cvss": 3.7, "sev": "LOW", "epss": 0.00275, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.20"], "fixed": null, "safe": "before 3.2.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60853"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18904, "pinned": false}, {"id": "CVE-2026-60589", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocol", "cvss": 3.7, "sev": "LOW", "epss": 0.00265, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60589"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.17459, "pinned": false, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3878 (medium): java-17-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3878.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3879 (medium): java-11-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3879.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3888 (medium): java-1.8.0-openjdk", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3888.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2CORRETTO8-2026-025 (medium): java-1.8.0-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2CORRETTO8-2026-025.html", "date": "2026-08-31"}], "buzz": 1}, {"id": "CVE-2026-60884", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processo", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60884"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.06054, "pinned": false}, {"id": "CVE-2026-53759", "publisher": "GitHub, Inc.", "title": "linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations", "summary": "linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, db_sqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who controls a local monitoring account can create a symlink such as /tmp/linuxfabrik-monitoring-plugins-docker-stats.db and then trigger a sudo-authorized ", "cvss": 2.0, "sev": "LOW", "epss": 0.00191, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T21:09:59.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53759"}], "cwe": ["CWE-377"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.08301, "pinned": false}, {"id": "CVE-2026-96563", "publisher": "Wordfence", "title": "The Motors \u2013 Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Si", "summary": "The Motors \u2013 Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00206, "kev": false, "added": "2026-10-10", "modified": "2026-10-22T20:17:08.220", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96563"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10063, "pinned": false}, {"id": "CVE-2026-85197", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libsoup", "summary": "A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.", "cvss": 7.6, "sev": "HIGH", "epss": 0.00269, "kev": false, "added": "2026-09-04", "modified": "2026-10-22T20:17:08.080", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85197"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.18081, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Ubuntu 20.04", "pkg": "libsoup2.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libsoup2.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libsoup2.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libsoup3", "status": "fixed", "fixed": "3.0.7-0ubuntu1+esm9", "cmd": "sudo apt update && sudo apt install --only-upgrade libsoup3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libsoup3)\" ge \"3.0.7-0ubuntu1+esm9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libsoup3", "status": "fixed", "fixed": "3.4.4-5ubuntu0.9", "cmd": "sudo apt update && sudo apt install --only-upgrade libsoup3\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libsoup3)\" ge \"3.4.4-5ubuntu0.9\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "libsoup2.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libsoup2.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libsoup3", "status": "fixed", "fixed": "libsoup3-3.6.5-3.el10_2.14", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:68235\nrpm -q libsoup3", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "libsoup3", "status": "fixed", "fixed": "libsoup3-3.6.5-3.el10_0.18", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:82728\nrpm -q libsoup3", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "libsoup", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libsoup", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libsoup", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3144", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-85197.html", "note": "ALAS2023-2026-3144"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15567", "publisher": "Red Hat, Inc.", "title": "A flaw was found in Wildfly", "summary": "A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00548, "kev": false, "added": "2026-08-11", "modified": "2026-10-22T20:17:07.207", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15567"}], "cwe": ["CWE-789"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.45154, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-102560", "publisher": "Red Hat, Inc.", "title": "A flaw was found in libsoup", "summary": "A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00419, "kev": false, "added": "2026-09-29", "modified": "2026-10-22T20:17:05.393", "products": [{"name": "libsoup", "vendor": "gnome", "type": "app", "affected": ["< 3.7.3"], "fixed": "3.7.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libsoup || rpm -q libsoup || libsoup --version"}, {"label": "2. UPGRADE to 3.7.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libsoup"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libsoup"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["7.0", "8.0", "9.0", "10.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102560"}, {"t": "Mitigation, Third Party Advisory", "u": "https://access.redhat.com/security/cve/CVE-2026-102560"}, {"t": "Issue Tracking, Patch", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2543296"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.35161, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "libsoup2.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libsoup2.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libsoup2.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libsoup2.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libsoup2.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libsoup3", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "libsoup3", "status": "fixed", "fixed": "libsoup3-3.6.5-3.el10_2.20", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:83618\nrpm -q libsoup3", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "libsoup", "status": "fixed", "fixed": "libsoup-2.72.0-16.el9_8.8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:83384\nrpm -q libsoup", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "libsoup", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libsoup", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "libsoup", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3212", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-102560.html", "note": "ALAS2023-2026-3212"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3212 (important): libsoup", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3212.html", "date": "2026-10-12"}], "buzz": 1}, {"id": "CVE-2026-61241", "publisher": "Oracle", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server", "summary": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.  While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change).  Succ", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "internet directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy internet-directory || rpm -q internet-directory || internet-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison internet-directory\nsudo apt install internet-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold internet-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list internet-directory\nsudo dnf downgrade internet-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add internet-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61241"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4246, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62626", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62626"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42461, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62630", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, I", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62630"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42446, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62632", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62632"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42463, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62633", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62633"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42462, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62634", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62634"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42457, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62635", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62635"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42446, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62639", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62639"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42473, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62640", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62640"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42462, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70669", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70669"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60921", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60921"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42473, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60946", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 B", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60946"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42463, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60947", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 B", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60947"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42463, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60958", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60958"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42446, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60970", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60970"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42442, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60971", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60971"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42442, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-60977", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Component", "summary": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confid", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "weblogic server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server || rpm -q weblogic-server || weblogic-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server\nsudo apt install weblogic-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server\nsudo dnf downgrade weblogic-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60977"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42472, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-61018", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Inte", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61018"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42443, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-61272", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).  Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentialit", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone tools", "vendor": "oracle", "type": "app", "affected": [">= 9.2.0.0 and <= 9.2.26.4"], "fixed": "newer than 9.2.26.4", "safe": "before 9.2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-tools || rpm -q jd-edwards-enterpriseone-tools || jd-edwards-enterpriseone-tools --version"}, {"label": "2. UPGRADE to newer than 9.2.26.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jd-edwards-enterpriseone-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jd-edwards-enterpriseone-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-tools\nsudo apt install jd-edwards-enterpriseone-tools=<VERSION_BEFORE_9.2.0.0>\nsudo apt-mark hold jd-edwards-enterpriseone-tools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-tools\nsudo dnf downgrade jd-edwards-enterpriseone-tools-<VERSION_BEFORE_9.2.0.0>\nsudo dnf versionlock add jd-edwards-enterpriseone-tools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61272"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4246, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-61318", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.8 (Confidentiality, In", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61318"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42461, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62457", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Ba", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62457"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42494, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62539", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Techno", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62539"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42472, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62541", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Techno", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62541"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42457, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62543", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Techno", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62543"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42458, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62544", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Techno", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62544"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42449, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62585", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival)", "summary": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Administration.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Administration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availa", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62585"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4245, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62592", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62592"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42446, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62609", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62609"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42449, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62611", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62611"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42449, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62614", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62614"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42449, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62617", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62617"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42466, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62621", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62621"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42473, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62622", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62622"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42473, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-62624", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality,", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62624"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42459, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-61258", "publisher": "Oracle", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server", "summary": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.  Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidential", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "internet directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy internet-directory || rpm -q internet-directory || internet-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison internet-directory\nsudo apt install internet-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold internet-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list internet-directory\nsudo dnf downgrade internet-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add internet-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61258"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42465, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:16:25.380207+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-61008", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61008"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35752, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62610", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62610"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35765, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70668", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70668"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35756, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60916", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien", "summary": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture.  While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional pr", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00371, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter enterprise capture", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-enterprise-capture || rpm -q webcenter-enterprise-capture || webcenter-enterprise-capture --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-enterprise-capture\nsudo apt install webcenter-enterprise-capture=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-enterprise-capture"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-enterprise-capture\nsudo dnf downgrade webcenter-enterprise-capture-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-enterprise-capture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60916"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29841, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62452", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62452"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30483, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62586", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival)", "summary": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Administration.  While the vulnerability is in Siebel CRM Administration, attacks may significantly impact additional products (scope change).  Successful attacks of this vu", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62586"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62629", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all ", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62629"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34665, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62638", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all ", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62638"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.37868, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": false}, {"id": "CVE-2026-61029", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61029"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32222, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60990", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector.  While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope cha", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60990"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36402, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60995", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector.  While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope cha", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60995"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36424, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61003", "publisher": "Oracle", "title": "Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime ", "summary": "Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Managed File Transfer.  While the vulnerability is in Oracle Managed File Transfer, attacks may significantly impact additional products (scope", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "managed file transfer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy managed-file-transfer || rpm -q managed-file-transfer || managed-file-transfer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison managed-file-transfer\nsudo apt install managed-file-transfer=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold managed-file-transfer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list managed-file-transfer\nsudo dnf downgrade managed-file-transfer-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add managed-file-transfer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61003"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36418, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61021", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change).  Successful att", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61021"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36416, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61066", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via RMI to compromise Oracle Identity Manager.  While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products (scope change).  Successful att", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61066"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61206", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change).  Su", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61206"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36456, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61228", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful a", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61228"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61230", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful a", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61230"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34659, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61248", "publisher": "Oracle", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server", "summary": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory.  While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change).  Succe", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "internet directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy internet-directory || rpm -q internet-directory || internet-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison internet-directory\nsudo apt install internet-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold internet-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list internet-directory\nsudo dnf downgrade internet-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add internet-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61248"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36405, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61317", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change).  Successful a", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61317"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36416, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62512", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change).  Successful a", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62512"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36404, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62535", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may signi", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62535"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34649, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62588", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerabi", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62588"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.36436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62599", "publisher": "Oracle", "title": "Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data ", "summary": "Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data Integration).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading Community.  While the vulnerability is in Oracle Trading Community, attacks may significantly impact additional products (scope change).  Success", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "trading community", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy trading-community || rpm -q trading-community || trading-community --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade trading-community"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade trading-community"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison trading-community\nsudo apt install trading-community=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold trading-community"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list trading-community\nsudo dnf downgrade trading-community-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add trading-community"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62599"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34657, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62608", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via CORBA to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successf", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62608"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62618", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successf", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62618"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27738, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62620", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successf", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62620"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62628", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successfu", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62628"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34657, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70673", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successfu", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70673"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27734, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61033", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter S", "cvss": 8.6, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61033"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30484, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61045", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter S", "cvss": 8.6, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61045"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30484, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61286", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: ", "summary": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to", "cvss": 8.6, "sev": "HIGH", "epss": 0.00371, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise manager base platform", "vendor": "oracle", "type": "app", "affected": ["13.5.0.0", "24.1.0.0.0"], "fixed": null, "safe": "before 13.5.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-base-platform || rpm -q enterprise-manager-base-platform || enterprise-manager-base-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-base-platform\nsudo apt install enterprise-manager-base-platform=<VERSION_BEFORE_13.5.0.0>\nsudo apt-mark hold enterprise-manager-base-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-base-platform\nsudo dnf downgrade enterprise-manager-base-platform-<VERSION_BEFORE_13.5.0.0>\nsudo dnf versionlock add enterprise-manager-base-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61286"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2984, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61302", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin).  Supported versions that are affected are 8.2.0.0.0 and  26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or compl", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61302"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37454, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62625", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Reports ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62625"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30484, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62636", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Reports D", "cvss": 8.6, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62636"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30484, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60934", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Succes", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60934"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26242, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60935", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Succes", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60935"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26244, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60954", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Succes", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60954"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26231, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60980", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Succes", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60980"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26232, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61011", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 8.2, "sev": "HIGH", "epss": 0.004, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61011"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33107, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61016", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 8.2, "sev": "HIGH", "epss": 0.004, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61016"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33108, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61034", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61034"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40895, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61193", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61193"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26239, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62589", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulner", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62589"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26242, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70670", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70670"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.32582, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60992", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 8.1", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60992"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32224, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61001", "publisher": "Oracle", "title": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services ", "summary": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Services Manager.  While the vulnerability is in Oracle Web Services Manager, attacks may significantly impact additional products (scope cha", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "web services manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy web-services-manager || rpm -q web-services-manager || web-services-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison web-services-manager\nsudo apt install web-services-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold web-services-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list web-services-manager\nsudo dnf downgrade web-services-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add web-services-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61001"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.28842, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61038", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter S", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61038"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27733, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61054", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter S", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61054"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27735, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61229", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.1 (Confidentiality, I", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61229"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32214, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61265", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orc", "summary": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).  Supported versions that are affected are 9.2.0.0-9.2.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise JD Edwards EnterpriseOne Orchestrator.  Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Orchestrator. CVSS", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone orchestrator", "vendor": "oracle", "type": "app", "affected": [">= 9.2 and <= 9.2.26.4"], "fixed": "newer than 9.2.26.4", "safe": "before 9.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-orchestrator || rpm -q jd-edwards-enterpriseone-orchestrator || jd-edwards-enterpriseone-orchestrator --version"}, {"label": "2. UPGRADE to newer than 9.2.26.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jd-edwards-enterpriseone-orchestrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jd-edwards-enterpriseone-orchestrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-orchestrator\nsudo apt install jd-edwards-enterpriseone-orchestrator=<VERSION_BEFORE_9.2>\nsudo apt-mark hold jd-edwards-enterpriseone-orchestrator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-orchestrator\nsudo dnf downgrade jd-edwards-enterpriseone-orchestrator-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add jd-edwards-enterpriseone-orchestrator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61265"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61293", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Calculation Manager. CVSS 3.1 Base Score 8.1 (Confide", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61293"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3221, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61307", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (compone", "summary": "Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise PeopleSoft Enterprise CC Common Application Objects.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "peoplesoft enterprise cc common application objects", "vendor": "oracle", "type": "app", "affected": ["9.2"], "fixed": null, "safe": "before 9.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-cc-common-application-objects || rpm -q peoplesoft-enterprise-cc-common-application-objects || peoplesoft-enterprise-cc-common-application-objects --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-cc-common-application-objects\nsudo apt install peoplesoft-enterprise-cc-common-application-objects=<VERSION_BEFORE_9.2>\nsudo apt-mark hold peoplesoft-enterprise-cc-common-application-objects"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-cc-common-application-objects\nsudo dnf downgrade peoplesoft-enterprise-cc-common-application-objects-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add peoplesoft-enterprise-cc-common-application-objects"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61307"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3221, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62463", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycl", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additiona", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62463"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.28848, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62471", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62471"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32216, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62501", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62501"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32216, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62531", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycl", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CV", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62531"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32212, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62582", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change).  Su", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62582"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.28828, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70675", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 8.1 (Confidentiality", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70675"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70684", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: ", "summary": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).  Supported versions that are affected are 13.5 and  24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise manager base platform", "vendor": "oracle", "type": "app", "affected": ["13.5.0.0", "24.1.0.0.0"], "fixed": null, "safe": "before 13.5.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-base-platform || rpm -q enterprise-manager-base-platform || enterprise-manager-base-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-base-platform\nsudo apt install enterprise-manager-base-platform=<VERSION_BEFORE_13.5.0.0>\nsudo apt-mark hold enterprise-manager-base-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-base-platform\nsudo dnf downgrade enterprise-manager-base-platform-<VERSION_BEFORE_13.5.0.0>\nsudo dnf versionlock add enterprise-manager-base-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70684"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32219, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60914", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Unified Direct", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60914"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60967", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover", "cvss": 8.8, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": [">= 8.61 and <= 8.63"], "fixed": "newer than 8.63", "safe": "before 8.61", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. UPGRADE to newer than 8.63 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade peoplesoft-enterprise-peopletools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade peoplesoft-enterprise-peopletools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60967"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34818, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60976", "publisher": "Oracle", "title": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting.  Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impac", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "scripting", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scripting || rpm -q scripting || scripting --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scripting"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scripting"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison scripting\nsudo apt install scripting=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold scripting"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scripting\nsudo dnf downgrade scripting-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add scripting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60976"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36411, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61002", "publisher": "Oracle", "title": "Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine)", "summary": "Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite.  Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability i", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "soa suite", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy soa-suite || rpm -q soa-suite || soa-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison soa-suite\nsudo apt install soa-suite=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold soa-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list soa-suite\nsudo dnf downgrade soa-suite-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add soa-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61002"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36418, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61007", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter S", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61007"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34657, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61017", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61017"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36434, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61022", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61022"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36419, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61032", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61032"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36434, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61040", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61040"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36434, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61042", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61042"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36432, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61058", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)", "summary": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter sites", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-sites || rpm -q webcenter-sites || webcenter-sites --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-sites\nsudo apt install webcenter-sites=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-sites"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-sites\nsudo dnf downgrade webcenter-sites-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-sites"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61058"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36434, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61118", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Inte", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61118"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36403, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61213", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Inte", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61213"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36461, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61231", "publisher": "Oracle", "title": "Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Director", "summary": "Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Virtual Directory.  Successful attacks of this vulnerability can result in takeover of Oracle Virtual Directory. CVSS 3.1 Base Score 8.8 (Confide", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "virtual directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy virtual-directory || rpm -q virtual-directory || virtual-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison virtual-directory\nsudo apt install virtual-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold virtual-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list virtual-directory\nsudo dnf downgrade virtual-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add virtual-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61231"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36404, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61273", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Secu", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).  Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 8.8 (Confident", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone tools", "vendor": "oracle", "type": "app", "affected": [">= 9.2.0.0 and <= 9.2.26.4"], "fixed": "newer than 9.2.26.4", "safe": "before 9.2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-tools || rpm -q jd-edwards-enterpriseone-tools || jd-edwards-enterpriseone-tools --version"}, {"label": "2. UPGRADE to newer than 9.2.26.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jd-edwards-enterpriseone-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jd-edwards-enterpriseone-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-tools\nsudo apt install jd-edwards-enterpriseone-tools=<VERSION_BEFORE_9.2.0.0>\nsudo apt-mark hold jd-edwards-enterpriseone-tools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-tools\nsudo dnf downgrade jd-edwards-enterpriseone-tools-<VERSION_BEFORE_9.2.0.0>\nsudo dnf versionlock add jd-edwards-enterpriseone-tools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61273"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36431, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61276", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Calculation Manager. CVSS 3.1 Base Score 8.8 (Confidenti", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61276"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36418, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61284", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: ", "summary": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platfo", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise manager base platform", "vendor": "oracle", "type": "app", "affected": ["13.5.0.0", "24.1.0.0.0"], "fixed": null, "safe": "before 13.5.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-base-platform || rpm -q enterprise-manager-base-platform || enterprise-manager-base-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-base-platform\nsudo apt install enterprise-manager-base-platform=<VERSION_BEFORE_13.5.0.0>\nsudo apt-mark hold enterprise-manager-base-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-base-platform\nsudo dnf downgrade enterprise-manager-base-platform-<VERSION_BEFORE_13.5.0.0>\nsudo dnf versionlock add enterprise-manager-base-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61284"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36426, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61319", "publisher": "Oracle", "title": "Vulnerability in the Oracle U.S", "summary": "Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle U.S. Federal Financials.  Successful attacks of this vulnerability can result in takeover of Oracle U.S. Federal Financials. CVSS 3.1 Base Score 8.8 (Confide", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61319"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36416, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61330", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Int", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61330"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36458, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61341", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Int", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61341"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36458, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62450", "publisher": "Oracle", "title": "Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operati", "summary": "Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow Manufacturing.  Successful attacks of this vulnerability can result in takeover of Oracle Flow Manufacturing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "flow manufacturing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flow-manufacturing || rpm -q flow-manufacturing || flow-manufacturing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flow-manufacturing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flow-manufacturing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison flow-manufacturing\nsudo apt install flow-manufacturing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold flow-manufacturing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list flow-manufacturing\nsudo dnf downgrade flow-manufacturing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add flow-manufacturing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62450"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36456, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62462", "publisher": "Oracle", "title": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process.  Successful attacks of this vulnerability can result in takeover of Oracle Work in Process. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "work in process", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy work-in-process || rpm -q work-in-process || work-in-process --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade work-in-process"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade work-in-process"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison work-in-process\nsudo apt install work-in-process=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold work-in-process"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list work-in-process\nsudo dnf downgrade work-in-process-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add work-in-process"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62462"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36466, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62500", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Bas", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62500"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36408, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62550", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62550"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34648, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62552", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62552"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34654, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62554", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62554"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34656, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:36:57.153856+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62612", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 8.8 (Confidentiality, ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62612"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.364, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62613", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62613"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.27938, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62619", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can resul", "cvss": 8.8, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62619"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34819, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62623", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can", "cvss": 8.8, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62623"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35063, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62631", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62631"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35064, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62637", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports ", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62637"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.27939, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70674", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00418, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70674"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.35064, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60996", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connect", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Identity Manager Connector.  While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60996"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33877, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61332", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61332"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33874, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62607", "publisher": "Oracle", "title": "Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Customer Care.  While the vulnerability is in Oracle Customer Care, attacks may significantly impact additional products (scope change).  Successful attacks of this v", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "customer care", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy customer-care || rpm -q customer-care || customer-care --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62607"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33877, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60915", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17 and  4.0.0-4.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible da", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60915"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26244, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60933", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or a", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60933"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26232, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60981", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 14.1.2.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter C", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60981"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61215", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Port", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61215"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61219", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Port", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61219"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61305", "publisher": "Oracle", "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)", "summary": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).  Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and  26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all ", "cvss": 8.3, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "bi publisher", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "12.2.1.4.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-publisher || rpm -q bi-publisher || bi-publisher --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-publisher\nsudo apt install bi-publisher=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold bi-publisher"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-publisher\nsudo dnf downgrade bi-publisher-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add bi-publisher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61305"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62492", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to cr", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62492"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26243, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62538", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modificati", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62538"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26242, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62616", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Successf", "cvss": 7.2, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62616"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26178, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70672", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or al", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70672"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26243, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60955", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Successf", "cvss": 8.2, "sev": "HIGH", "epss": 0.00355, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60955"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28017, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60998", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microso", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Identity Manager Connector.  While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact addi", "cvss": 8.0, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60998"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3033, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61177", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Ora", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61177"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28838, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61212", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61212"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25548, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61268", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic In", "summary": "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).  Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone tools", "vendor": "oracle", "type": "app", "affected": [">= 9.2.0.0 and <= 9.2.26.4"], "fixed": "newer than 9.2.26.4", "safe": "before 9.2.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-tools || rpm -q jd-edwards-enterpriseone-tools || jd-edwards-enterpriseone-tools --version"}, {"label": "2. UPGRADE to newer than 9.2.26.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jd-edwards-enterpriseone-tools"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jd-edwards-enterpriseone-tools"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-tools\nsudo apt install jd-edwards-enterpriseone-tools=<VERSION_BEFORE_9.2.0.0>\nsudo apt-mark hold jd-edwards-enterpriseone-tools"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-tools\nsudo dnf downgrade jd-edwards-enterpriseone-tools-<VERSION_BEFORE_9.2.0.0>\nsudo dnf versionlock add jd-edwards-enterpriseone-tools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61268"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28832, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61270", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orc", "summary": "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).  Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access t", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone orchestrator", "vendor": "oracle", "type": "app", "affected": [">= 9.2 and <= 9.2.26.4"], "fixed": "newer than 9.2.26.4", "safe": "before 9.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-orchestrator || rpm -q jd-edwards-enterpriseone-orchestrator || jd-edwards-enterpriseone-orchestrator --version"}, {"label": "2. UPGRADE to newer than 9.2.26.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jd-edwards-enterpriseone-orchestrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jd-edwards-enterpriseone-orchestrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-orchestrator\nsudo apt install jd-edwards-enterpriseone-orchestrator=<VERSION_BEFORE_9.2>\nsudo apt-mark hold jd-edwards-enterpriseone-orchestrator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-orchestrator\nsudo dnf downgrade jd-edwards-enterpriseone-orchestrator-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add jd-edwards-enterpriseone-orchestrator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61270"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28829, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61281", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in", "cvss": 8.1, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61281"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3114, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61321", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel C", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61321"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28835, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62455", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Siebel C", "cvss": 8.3, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62455"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27697, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62477", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critic", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62477"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28836, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62502", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62502"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28843, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62551", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62551"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62590", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnera", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62590"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2556, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62591", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creati", "cvss": 8.1, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62591"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31141, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62595", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Integration executes to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized cr", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62595"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30223, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62600", "publisher": "Oracle", "title": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Sales accessible data as ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "sales", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sales || rpm -q sales || sales --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62600"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28834, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62615", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Success", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62615"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25561, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70671", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Reports Developer.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all O", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70671"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2885, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60944", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter ", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60944"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23462, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61222", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Por", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61222"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23463, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61326", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change).  Successful a", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61326"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21559, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61340", "publisher": "Oracle", "title": "Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Inter", "summary": "Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in O", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "mes for process manufacturing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mes-for-process-manufacturing || rpm -q mes-for-process-manufacturing || mes-for-process-manufacturing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mes-for-process-manufacturing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mes-for-process-manufacturing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison mes-for-process-manufacturing\nsudo apt install mes-for-process-manufacturing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold mes-for-process-manufacturing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mes-for-process-manufacturing\nsudo dnf downgrade mes-for-process-manufacturing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add mes-for-process-manufacturing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61340"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23463, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62448", "publisher": "Oracle", "title": "Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component)", "summary": "Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may sign", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "email center", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy email-center || rpm -q email-center || email-center --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade email-center"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade email-center"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison email-center\nsudo apt install email-center=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold email-center"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list email-center\nsudo dnf downgrade email-center-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add email-center"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62448"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23461, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62485", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Orac", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62485"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23461, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62596", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerabi", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62596"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21566, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62605", "publisher": "Oracle", "title": "Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operati", "summary": "Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Manageme", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "partner management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy partner-management || rpm -q partner-management || partner-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade partner-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade partner-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison partner-management\nsudo apt install partner-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold partner-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list partner-management\nsudo dnf downgrade partner-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add partner-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62605"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23463, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70676", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all O", "cvss": 7.0, "sev": "HIGH", "epss": 0.00293, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70676"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20768, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:19:34.664669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60969", "publisher": "Oracle", "title": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core)", "summary": "Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory.  While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change).  Successful atta", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "unified directory", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy unified-directory || rpm -q unified-directory || unified-directory --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison unified-directory\nsudo apt install unified-directory=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold unified-directory"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list unified-directory\nsudo dnf downgrade unified-directory-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add unified-directory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60969"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2769, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60983", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 14.1.2.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Successfu", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60983"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27681, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61199", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change).  Successful attacks of this ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61199"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27689, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61308", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to comprom", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.0031, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61308"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22628, "pinned": false, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3878 (medium): java-17-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3878.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3879 (medium): java-11-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3879.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3888 (medium): java-1.8.0-openjdk", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3888.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2CORRETTO8-2026-025 (medium): java-1.8.0-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2CORRETTO8-2026-025.html", "date": "2026-08-31"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "openjdk-8", "status": "fixed", "fixed": "8u504-ga-1ubuntu1~20.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-8)\" ge \"8u504-ga-1ubuntu1~20.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "openjdk-8", "status": "fixed", "fixed": "8u504-ga-1ubuntu1~22.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-8)\" ge \"8u504-ga-1ubuntu1~22.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "openjdk-8", "status": "fixed", "fixed": "8u504-ga-1ubuntu1~24.04.3", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-8)\" ge \"8u504-ga-1ubuntu1~24.04.3\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "openjdk-lts", "status": "fixed", "fixed": "11.0.32.1+1-1ubuntu1~20.04", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-lts\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-lts)\" ge \"11.0.32.1+1-1ubuntu1~20.04\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "openjdk-lts", "status": "fixed", "fixed": "11.0.32.1+1-1ubuntu1~22.04", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-lts\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-lts)\" ge \"11.0.32.1+1-1ubuntu1~22.04\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "fixed", "fixed": "17.0.20.1+1-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-17\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-17)\" ge \"17.0.20.1+1-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "fixed", "fixed": "21.0.12.1+1-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-21\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-21)\" ge \"21.0.12.1+1-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "fixed", "fixed": "25.0.4.1+1-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-25\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-25)\" ge \"25.0.4.1+1-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "fixed", "fixed": "java-21-openjdk-21.0.12.1.1-1.2.el10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55787\nrpm -q java-21-openjdk", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "fixed", "fixed": "java-25-openjdk-25.0.4.1.1-1.1.el10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55798\nrpm -q java-25-openjdk", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "fixed", "fixed": "java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:72888\nrpm -q java-21-ibm-semeru-certified-jdk", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "java-21-openjdk", "status": "fixed", "fixed": "java-21-openjdk-21.0.12.1.1-1.1.el10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55787\nrpm -q java-21-openjdk", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "fixed", "fixed": "java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:72888\nrpm -q java-21-ibm-semeru-certified-jdk", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2102", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-61308.html", "note": "ALAS2023-2026-2102"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3888", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-61308.html", "note": "ALAS2-2026-3888"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61331", "publisher": "Oracle", "title": "Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Co", "summary": "Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules.  While the vulnerability is in Oracle Financials Common Modules, attacks may significantly impact additional products (scope chang", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61331"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27686, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62467", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional produ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62467"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27689, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62571", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change).  Su", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62571"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27687, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62593", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerabi", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62593"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27687, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62594", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulner", "cvss": 7.7, "sev": "HIGH", "epss": 0.00341, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62594"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26343, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62598", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SFTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change).  ", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62598"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2038, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60956", "publisher": "Oracle", "title": "Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll)", "summary": "Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne US Payroll.  Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne US Payroll. CVSS 3.1 Base Score 7.5 (Confidentiality", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "jd edwards enterpriseone us payroll", "vendor": "oracle", "type": "app", "affected": ["9.2"], "fixed": null, "safe": "before 9.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jd-edwards-enterpriseone-us-payroll || rpm -q jd-edwards-enterpriseone-us-payroll || jd-edwards-enterpriseone-us-payroll --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison jd-edwards-enterpriseone-us-payroll\nsudo apt install jd-edwards-enterpriseone-us-payroll=<VERSION_BEFORE_9.2>\nsudo apt-mark hold jd-edwards-enterpriseone-us-payroll"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jd-edwards-enterpriseone-us-payroll\nsudo dnf downgrade jd-edwards-enterpriseone-us-payroll-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add jd-edwards-enterpriseone-us-payroll"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60956"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25564, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60961", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Content executes to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCe", "cvss": 8.0, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60961"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20075, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61208", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebCenter Po", "cvss": 7.6, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61208"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23854, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62481", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Ba", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62481"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25565, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62576", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complet", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62576"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62602", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracl", "cvss": 8.0, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62602"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20074, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60993", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector.  Successful attacks of thi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60993"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24978, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61198", "publisher": "Oracle", "title": "Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operat", "summary": "Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Learning Management.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Learning Management", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "learning management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy learning-management || rpm -q learning-management || learning-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade learning-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade learning-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison learning-management\nsudo apt install learning-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold learning-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list learning-management\nsudo dnf downgrade learning-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add learning-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61198"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18578, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61259", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Calc", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61259"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62442", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can re", "cvss": 8.1, "sev": "HIGH", "epss": 0.00257, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62442"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-346", "CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.164, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62545", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technolo", "cvss": 7.5, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62545"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24978, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70680", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operation", "summary": "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications DBA.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Applications DBA ac", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "applications dba", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy applications-dba || rpm -q applications-dba || applications-dba --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade applications-dba"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade applications-dba"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison applications-dba\nsudo apt install applications-dba=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold applications-dba"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list applications-dba\nsudo dnf downgrade applications-dba-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add applications-dba"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70680"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70681", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java", "summary": "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java utils).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result i", "cvss": 7.5, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "applications dba", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy applications-dba || rpm -q applications-dba || applications-dba --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade applications-dba"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade applications-dba"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison applications-dba\nsudo apt install applications-dba=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold applications-dba"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list applications-dba\nsudo dnf downgrade applications-dba-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add applications-dba"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70681"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24753, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60909", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter C", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60909"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.182, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60928", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).   The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional produ", "cvss": 8.4, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["14.1.2.0.0"], "fixed": null, "safe": "before 14.1.2.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 14.1.2.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_14.1.2.0.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_14.1.2.0.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60928"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04641, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61124", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result i", "cvss": 7.1, "sev": "HIGH", "epss": 0.00322, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61124"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24038, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61227", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Port", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61227"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18199, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61288", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can resul", "cvss": 7.1, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61288"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23463, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61296", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear ", "summary": "Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Or", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise asset management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-asset-management || rpm -q enterprise-asset-management || enterprise-asset-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade enterprise-asset-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade enterprise-asset-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-asset-management\nsudo apt install enterprise-asset-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold enterprise-asset-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-asset-management\nsudo dnf downgrade enterprise-asset-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add enterprise-asset-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61296"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18201, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62458", "publisher": "Oracle", "title": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle", "cvss": 7.1, "sev": "HIGH", "epss": 0.00322, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "work in process", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy work-in-process || rpm -q work-in-process || work-in-process --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade work-in-process"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade work-in-process"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison work-in-process\nsudo apt install work-in-process=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold work-in-process"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list work-in-process\nsudo dnf downgrade work-in-process-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add work-in-process"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62458"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24059, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62475", "publisher": "Oracle", "title": "Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operati", "summary": "Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Shipping Execution.  Successful attacks of this vulnerability can result in takeover of Oracle Shipping Execution. CVSS 3.1 Base Score 6.6 (Confidentiality, In", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "shipping execution", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy shipping-execution || rpm -q shipping-execution || shipping-execution --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62475"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30332, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62555", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification a", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62555"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33877, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70678", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Calcul", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70678"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18202, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61290", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can resu", "cvss": 7.1, "sev": "HIGH", "epss": 0.00279, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61290"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1936, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61306", "publisher": "Oracle", "title": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (compo", "summary": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul.  While the vulnerability is in Oracle Complex Maintenance, Repair and Overhaul, attacks may significantly", "cvss": 7.1, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "complex maintenance repair and overhaul", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy complex-maintenance-repair-and-overhaul || rpm -q complex-maintenance-repair-and-overhaul || complex-maintenance-repair-and-overhaul --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade complex-maintenance-repair-and-overhaul"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade complex-maintenance-repair-and-overhaul"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison complex-maintenance-repair-and-overhaul\nsudo apt install complex-maintenance-repair-and-overhaul=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold complex-maintenance-repair-and-overhaul"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list complex-maintenance-repair-and-overhaul\nsudo dnf downgrade complex-maintenance-repair-and-overhaul-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add complex-maintenance-repair-and-overhaul"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61306"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20561, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62459", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change). ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00279, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62459"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19301, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62506", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all O", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62506"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27688, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62523", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerab", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00373, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62523"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30026, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62587", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival)", "summary": "Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).  Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Administration.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Administration accessible d", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 25.12 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 25.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.12 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_25.12>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_25.12>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62587"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21565, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-62601", "publisher": "Oracle", "title": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Sales accessible data as well as  unautho", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "sales", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sales || rpm -q sales || sales --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62601"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21565, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60991", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in takeover of Oracle ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60991"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04901, "pinned": false}, {"id": "CVE-2026-61291", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61291"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04902, "pinned": false}, {"id": "CVE-2026-61300", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: ", "summary": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in ta", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise manager base platform", "vendor": "oracle", "type": "app", "affected": ["13.5.0.0", "24.1.0.0.0"], "fixed": null, "safe": "before 13.5.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-base-platform || rpm -q enterprise-manager-base-platform || enterprise-manager-base-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-base-platform\nsudo apt install enterprise-manager-base-platform=<VERSION_BEFORE_13.5.0.0>\nsudo apt-mark hold enterprise-manager-base-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-base-platform\nsudo dnf downgrade enterprise-manager-base-platform-<VERSION_BEFORE_13.5.0.0>\nsudo dnf versionlock add enterprise-manager-base-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61300"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04905, "pinned": false}, {"id": "CVE-2026-62446", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Calculation Manager access", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62446"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23718, "pinned": false}, {"id": "CVE-2026-62454", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applicatio", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62454"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.049, "pinned": false}, {"id": "CVE-2026-62509", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Infrastru", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62509"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23715, "pinned": false}, {"id": "CVE-2026-62510", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle H", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62510"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23714, "pinned": false}, {"id": "CVE-2026-62566", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle H", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62566"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23712, "pinned": false}, {"id": "CVE-2026-62578", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerabil", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62578"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2649, "pinned": false}, {"id": "CVE-2026-62579", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle H", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62579"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23716, "pinned": false}, {"id": "CVE-2026-62581", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62581"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04903, "pinned": false}, {"id": "CVE-2026-70679", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Calculatio", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70679"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21619, "pinned": false}, {"id": "CVE-2026-60949", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change).  Success", "cvss": 7.1, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60949"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14257, "pinned": false}, {"id": "CVE-2026-62522", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional p", "cvss": 7.1, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62522"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14257, "pinned": false}, {"id": "CVE-2026-62627", "publisher": "Oracle", "title": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Aut", "summary": "Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version that is affected is 12.2.1.19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Reports Developer.  While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change).  Success", "cvss": 7.1, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "reports developer", "vendor": "oracle", "type": "app", "affected": ["12.2.1.19.0"], "fixed": null, "safe": "before 12.2.1.19.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy reports-developer || rpm -q reports-developer || reports-developer --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.19.0 (Debian / Ubuntu)", "cmd": "apt-cache madison reports-developer\nsudo apt install reports-developer=<VERSION_BEFORE_12.2.1.19.0>\nsudo apt-mark hold reports-developer"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list reports-developer\nsudo dnf downgrade reports-developer-<VERSION_BEFORE_12.2.1.19.0>\nsudo dnf versionlock add reports-developer"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62627"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14257, "pinned": false}, {"id": "CVE-2026-60975", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).  Supported versions that are affected are 8.61 and  8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan", "cvss": 7.5, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "peoplesoft enterprise peopletools", "vendor": "oracle", "type": "app", "affected": ["8.61", "8.62"], "fixed": null, "safe": "before 8.61", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-peopletools || rpm -q peoplesoft-enterprise-peopletools || peoplesoft-enterprise-peopletools --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.61 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-peopletools\nsudo apt install peoplesoft-enterprise-peopletools=<VERSION_BEFORE_8.61>\nsudo apt-mark hold peoplesoft-enterprise-peopletools"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-peopletools\nsudo dnf downgrade peoplesoft-enterprise-peopletools-<VERSION_BEFORE_8.61>\nsudo dnf versionlock add peoplesoft-enterprise-peopletools"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60975"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02238, "pinned": false}, {"id": "CVE-2026-61295", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content.  While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact a", "cvss": 7.1, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61295"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07334, "pinned": false}, {"id": "CVE-2026-61339", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications.  While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00151, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 22.3 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 22.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.3 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_22.3>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_22.3>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61339"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03923, "pinned": false}, {"id": "CVE-2026-60994", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector.  Successful attacks require human interaction from a person other than th", "cvss": 7.2, "sev": "HIGH", "epss": 0.00123, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "identity manager connector", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager-connector || rpm -q identity-manager-connector || identity-manager-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager-connector\nsudo apt install identity-manager-connector=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager-connector\nsudo dnf downgrade identity-manager-connector-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60994"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01868, "pinned": false}, {"id": "CVE-2026-61139", "publisher": "Oracle", "title": "Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (compo", "summary": "Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials (International).  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00262, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "public sector financials", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy public-sector-financials || rpm -q public-sector-financials || public-sector-financials --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade public-sector-financials"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade public-sector-financials"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison public-sector-financials\nsudo apt install public-sector-financials=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold public-sector-financials"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list public-sector-financials\nsudo dnf downgrade public-sector-financials-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add public-sector-financials"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61139"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17022, "pinned": false}, {"id": "CVE-2026-62536", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 7.1, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62536"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04644, "pinned": false}, {"id": "CVE-2026-62537", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 7.1, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62537"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04643, "pinned": false}, {"id": "CVE-2026-61313", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may sign", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61313"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06026, "pinned": false}, {"id": "CVE-2026-62449", "publisher": "Oracle", "title": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Work in Process executes to compromise Oracle Work in Process.  Successful attacks of this vulnerability can result in takeover of Oracle Work in Process. CVSS 3.1 Bas", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "work in process", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy work-in-process || rpm -q work-in-process || work-in-process --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade work-in-process"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade work-in-process"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison work-in-process\nsudo apt install work-in-process=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold work-in-process"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list work-in-process\nsudo dnf downgrade work-in-process-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add work-in-process"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62449"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.02375, "pinned": false}, {"id": "CVE-2026-62499", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Or", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62499"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14845, "pinned": false}, {"id": "CVE-2026-62520", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common E", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle ", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00222, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62520"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12111, "pinned": false}, {"id": "CVE-2026-62568", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker and while the vulnera", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62568"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14847, "pinned": false}, {"id": "CVE-2026-70677", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70677"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15986, "pinned": false}, {"id": "CVE-2026-61342", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61342"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21327, "pinned": false}, {"id": "CVE-2026-62572", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperio", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62572"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04231, "pinned": false}, {"id": "CVE-2026-62603", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerabil", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62603"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21036, "pinned": false}, {"id": "CVE-2026-62558", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interact", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00144, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62558"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03361, "pinned": false}, {"id": "CVE-2026-62441", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Calculation", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62441"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13246, "pinned": false}, {"id": "CVE-2026-62460", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change).  Su", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62460"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18548, "pinned": false}, {"id": "CVE-2026-62533", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Calculation Manager acce", "cvss": 3.7, "sev": "LOW", "epss": 0.00261, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62533"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16865, "pinned": false}, {"id": "CVE-2026-70682", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Calculation Manager acce", "cvss": 3.7, "sev": "LOW", "epss": 0.00261, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70682"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16865, "pinned": false}, {"id": "CVE-2026-61298", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: ", "summary": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install).  Supported versions that are affected are 13.5 and  24.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform.  While the vulnerability is in Oracle Enterp", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "enterprise manager base platform", "vendor": "oracle", "type": "app", "affected": ["13.5.0.0", "24.1.0.0.0"], "fixed": null, "safe": "before 13.5.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-base-platform || rpm -q enterprise-manager-base-platform || enterprise-manager-base-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-base-platform\nsudo apt install enterprise-manager-base-platform=<VERSION_BEFORE_13.5.0.0>\nsudo apt-mark hold enterprise-manager-base-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-base-platform\nsudo dnf downgrade enterprise-manager-base-platform-<VERSION_BEFORE_13.5.0.0>\nsudo dnf versionlock add enterprise-manager-base-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61298"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02011, "pinned": false}, {"id": "CVE-2026-62553", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62553"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0423, "pinned": false}, {"id": "CVE-2026-62564", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62564"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0423, "pinned": false}, {"id": "CVE-2026-62573", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62573"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04231, "pinned": false}, {"id": "CVE-2026-70683", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70683"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18275, "pinned": false}, {"id": "CVE-2026-62532", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Calculation", "cvss": 3.8, "sev": "LOW", "epss": 0.0026, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62532"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1682, "pinned": false}, {"id": "CVE-2026-62575", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability c", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62575"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0201, "pinned": false}, {"id": "CVE-2026-62526", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common S", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracl", "cvss": 3.3, "sev": "LOW", "epss": 0.00259, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62526"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16648, "pinned": false}, {"id": "CVE-2026-62529", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in ", "cvss": 3.5, "sev": "LOW", "epss": 0.0023, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62529"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1307, "pinned": false}, {"id": "CVE-2026-62584", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability ca", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62584"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0566, "pinned": false}, {"id": "CVE-2026-62604", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerab", "cvss": 3.1, "sev": "LOW", "epss": 0.00249, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62604"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15341, "pinned": false}, {"id": "CVE-2026-62461", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result ", "cvss": 3.1, "sev": "LOW", "epss": 0.00235, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62461"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13582, "pinned": false}, {"id": "CVE-2026-62606", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Calculation Manager acces", "cvss": 3.1, "sev": "LOW", "epss": 0.00222, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62606"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12077, "pinned": false}, {"id": "CVE-2026-62569", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability ca", "cvss": 3.4, "sev": "LOW", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62569"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04179, "pinned": false}, {"id": "CVE-2026-67442", "publisher": "GitHub, Inc.", "title": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software", "summary": "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /api/roles removes role definitions through server/runtime/users/usrstorage.js but does not remove the deleted role identifier from each user's info.roles array or the runtime usersMap cache. If a permission configuration still references that identifier, an affected user can retain authorization rights that an administrator intended to revoke, causin", "cvss": 2.0, "sev": "LOW", "epss": 0.00324, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67442"}], "cwe": ["CWE-284", "CWE-459"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24265, "pinned": false}, {"id": "CVE-2026-62577", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 3.3, "sev": "LOW", "epss": 0.00138, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62577"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0287, "pinned": false}, {"id": "CVE-2026-62580", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  Successful attacks of this vulnerabi", "cvss": 2.6, "sev": "LOW", "epss": 0.00207, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62580"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "A", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1027, "pinned": false}, {"id": "CVE-2026-62511", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability ", "cvss": 3.0, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62511"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02299, "pinned": false}, {"id": "CVE-2026-62570", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability ", "cvss": 3.0, "sev": "LOW", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62570"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02239, "pinned": false}, {"id": "CVE-2026-62583", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability ", "cvss": 3.0, "sev": "LOW", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T20:09:59.383", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-62583"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02238, "pinned": false}, {"id": "CVE-2026-63831", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: add skb_cow_data() befo", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: add skb_cow_data() before in-place crypto\n\nllsec_do_encrypt_unauth(), llsec_do_encrypt_auth(),\nllsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform\nin-place cryptographic transformations on skb data.  They build a\nscatterlist with sg_init_one() pointing into the skb's linear data area\nand then pass the same scatterlist as both src and dst to the c", "cvss": 8.8, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:24:19.030", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 3.16 and < 5.10.260", ">= 5.11 and < 5.15.211", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63831"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3a2b378b3a9ca75d3518d879148d2ad25b5714a9"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7a831bcd0486788283ef35e396d4282ee01bb0d5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/84a04eb5b210643bd67aab81ff805d32f62aa865"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/86d531337ea1ba02d9f2bc830d07c683d9bfaade"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/993fd674fe85d114e6a8d3963033d4fbbc2170a8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/bd968bdd568beacfdf98ec537a87527e85f1d0cf"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.15714, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.59.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71233\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-4.18.0-553.167.1.rt7.508.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71016\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "fixed", "fixed": "kernel-4.18.0-553.167.1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71213\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-687.51.1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71232\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63808", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential use-after-free in ex", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential use-after-free in exfat_find_dir_entry()\n\nIn exfat_find_dir_entry(), the buffer_head obtained from\nexfat_get_dentry() is released with brelse(bh) before the fall-through\nTYPE_EXTEND branch reads the directory entry through ep (which points\ninto bh->b_data):\n\n\tbrelse(bh);\n\tif (entry_type == TYPE_EXTEND) {\n\t\t...\n\t\tlen = exfat_extract_uni_name(ep, entry_uniname", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00527, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:23:07.447", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.7 and < 5.10.260", ">= 5.11 and < 5.15.211", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63808"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/06c4e1e9967d332ac33ba38b7819851089ff9359"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3f5f8ee9917cc2b9076ac533492d8a200edcabb8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4d101016d5e587f820b3ae2d5bb6770d86342649"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/708b97e792945d3e4653939fd3405d71a61ad065"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8e0abc17fbd7e305802e84fe98b4950d50f9c433"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/adfacfbaeae2cb760f492357cc36b41f84ef7f86"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 58, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.43861, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-194.204", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-194.204\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-194.204~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-194.204~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.51.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:63128\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-687.44.1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:63129\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2032", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63808.html", "note": "ALAS2023-2026-2032"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-63846", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 4d7d774f100efb5089c86a1fb8c5bf47c63fc9ef)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:22:27.710", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.9 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63846"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/303da8279f195cc741adc52c1b44d6b64de63bb0"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/48ce00787e3fddd2b45692fc991b8ab128343da5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5ada37d7f736f9feeaa06a25e470a4c74e67a61a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/a2baf12eec41f246689e6a3f8619af1200031576"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/ee035a9d3eed3a9f5a3e83c31a10b321c9598861"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63848", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:22:23.220", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.6 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63848"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2e216c2ff159b2eb1da6e9c716d727efc73c64b5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/41c4f3f68a343d62bd352a95ace93a11c4ad92ed"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b41248d1c18384835f6532e68592ee07605da283"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/e5f612dc91650561fe2b5b76dd6d2898ec9ad480"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/f675801889b265634aefd30aa4503fc2b9e6ce1c"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06655, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2024-21762", "publisher": "Fortinet, Inc.", "title": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "summary": "A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiPr", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.83428, "kev": true, "added": "2024-02-09", "modified": "2026-10-22T19:20:41.990", "products": [{"name": "fortiproxy", "vendor": "fortinet", "type": "app", "affected": [">= 1.0.0 and < 2.0.14", ">= 7.0.0 and < 7.0.15", ">= 7.2.0 and < 7.2.9", ">= 7.4.0 and < 7.4.3"], "fixed": "2.0.14, 7.0.15, 7.2.9, 7.4.3", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiproxy || rpm -q fortiproxy || fortiproxy --version"}, {"label": "2. UPGRADE to 2.0.14 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiproxy"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiproxy"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiproxy\nsudo apt install fortiproxy=<VERSION_BEFORE_1.0.0>\nsudo apt-mark hold fortiproxy"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiproxy\nsudo dnf downgrade fortiproxy-<VERSION_BEFORE_1.0.0>\nsudo dnf versionlock add fortiproxy"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fortios", "vendor": "fortinet", "type": "os", "affected": [">= 6.0.0 and < 6.0.18", ">= 6.2.0 and < 6.2.16", ">= 6.4.0 and < 6.4.15", ">= 7.0.0 and < 7.0.14", ">= 7.2.0 and < 7.2.7", ">= 7.4.0 and < 7.4.3"], "fixed": "6.0.18, 6.2.16, 6.4.15, 7.0.14, 7.2.7, 7.4.3", "safe": "before 6.0.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-21762"}, {"t": "Vendor Advisory", "u": "https://fortiguard.com/psirt/FG-IR-24-015"}, {"t": "Vendor Advisory", "u": "https://fortiguard.com/psirt/FG-IR-24-015"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2024-02-16", "kev_added": "2024-02-09", "ransom": true, "priority": 100, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Used in ransomware campaigns", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99685, "pinned": false, "pocs": [{"kind": "poc", "name": "h4x0r-dz/CVE-2024-21762 (150 stars)", "url": "https://github.com/h4x0r-dz/CVE-2024-21762", "stars": 150}, {"kind": "poc", "name": "BishopFox/cve-2024-21762-check (107 stars)", "url": "https://github.com/BishopFox/cve-2024-21762-check", "stars": 107}, {"kind": "poc", "name": "r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check (16 stars)", "url": "https://github.com/r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check", "stars": 16}, {"kind": "poc", "name": "AlexLondan/CVE-2024-21762-Fortinet-RCE-ALLWORK", "url": "https://github.com/AlexLondan/CVE-2024-21762-Fortinet-RCE-ALLWORK", "stars": 0}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "mentions": [{"src": "CERT-FR Alerts", "group": "gov", "title": "[M\u00e0J] Vuln\u00e9rabilit\u00e9 dans Fortinet FortiOS (09 f\u00e9vrier 2024)", "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2024-ALE-004/", "date": "2024-02-09"}], "buzz": 1, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-63849", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit e16be95a2c3ee712b142cb27d2dca0b461181359)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:18:39.553", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.14 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63849"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/081ef0e46c9cdd26c0db0ef721470393d36b6655"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5a4bffd67e94944ed3db26a959346cfb7fabaecd"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8f4954722eab88e10c4ea0c0d3b1269c31421d3a"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06435, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91541", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Peop", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.857", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91541"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23571, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91497", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Enviro", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterpr", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91497"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19611, "pinned": false}, {"id": "CVE-2026-91468", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS)", "summary": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS).  Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools acces", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00242, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.590", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91468"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14508, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91453", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.473", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91453"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1961, "pinned": false}, {"id": "CVE-2026-91452", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network acce", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.353", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91452"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19611, "pinned": false}, {"id": "CVE-2026-91451", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Networking)", "summary": "Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerabi", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91451"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19612, "pinned": false}, {"id": "CVE-2026-91418", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition ", "summary": "Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability a", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00402, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.117", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91418"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33341, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91417", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: C", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vul", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:05.000", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91417"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22204, "pinned": false}, {"id": "CVE-2026-91410", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Libraries)", "summary": "Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerabil", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.887", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91410"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.22204, "pinned": false}, {"id": "CVE-2026-91396", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compr", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.763", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91396"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25214, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91395", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compr", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.623", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91395"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15845, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91373", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: JSSE)", "summary": "Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in un", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.520", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91373"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31393, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91361", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag", "summary": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).  Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00214, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.393", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91361"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.11166, "pinned": false}, {"id": "CVE-2026-91352", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of O", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00293, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.283", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91352"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20775, "pinned": false}, {"id": "CVE-2026-91350", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complet", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.170", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91350"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91349", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complet", "cvss": 7.5, "sev": "HIGH", "epss": 0.00324, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:04.060", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91349"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:50:44.744827+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91345", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complet", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.947", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91345"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37269, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91344", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complet", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.833", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91344"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37271, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91332", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Networking)", "summary": "Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerabilit", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.703", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91332"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19611, "pinned": false}, {"id": "CVE-2026-91255", "publisher": "Oracle", "title": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel)", "summary": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).   The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 7.5 (Availabili", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.593", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91255"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37269, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-91254", "publisher": "Oracle", "title": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel)", "summary": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).   The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 7.5 (Availabili", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-91254"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-89409", "publisher": "Silicon Labs", "title": "In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices),", "summary": "In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00269, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:18:03.367", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89409"}], "cwe": ["CWE-940"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18129, "pinned": false}, {"id": "CVE-2026-87398", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Ora", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.260", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87398"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87395", "publisher": "Oracle", "title": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In C", "summary": "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).   The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Ora", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87395"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87369", "publisher": "Oracle", "title": "Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core)", "summary": "Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Service ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:03.037", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87369"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37269, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85079", "publisher": "Silicon Labs", "title": "In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write pote", "summary": "In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00305, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:18:02.927", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85079"}], "cwe": ["CWE-121"], "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22076, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:41:14.998713+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84920", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00228, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:18:02.777", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84920"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12794, "pinned": false}, {"id": "CVE-2026-83400", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:02.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83400"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31393, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-83395", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network acce", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:18:02.533", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83395"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2357, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.7.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-82814", "publisher": "Wordfence", "title": "The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions", "summary": "The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() during migration. This allows unauthenticated attackers to store a serialized object in public site content before an administrator builds a package and later performs a migration or import that", "cvss": 8.8, "sev": "HIGH", "epss": 0.0053, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:18:02.413", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82814"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43983, "pinned": false, "mentions": [{"src": "Wordfence Intelligence", "group": "ecosystem", "title": "Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator", "url": "https://www.wordfence.com/blog/2026/10/wordfence-argus-discovers-high-severity-unauthenticated-php-object-injection-in-duplicator/", "date": "2026-10-20"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-55200", "publisher": "VulnCheck", "title": "libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read(", "summary": "libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.", "cvss": 8.1, "sev": "HIGH", "epss": 0.04024, "kev": false, "added": "2026-06-17", "modified": "2026-10-22T19:17:55.937", "products": [{"name": "libssh2", "vendor": "libssh2", "type": "app", "affected": ["1.11.1"], "fixed": null, "safe": "before 1.11.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libssh2 || rpm -q libssh2 || libssh2 --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.11.1 (Debian / Ubuntu)", "cmd": "apt-cache madison libssh2\nsudo apt install libssh2=<VERSION_BEFORE_1.11.1>\nsudo apt-mark hold libssh2"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libssh2\nsudo dnf downgrade libssh2-<VERSION_BEFORE_1.11.1>\nsudo dnf versionlock add libssh2"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"}, {"t": "Patch", "u": "https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8"}, {"t": "Patch", "u": "https://github.com/libssh2/libssh2/pull/2052"}], "cwe": ["CWE-680"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": null, "kev_added": null, "ransom": false, "priority": 61, "tier": "P1", "why": ["High severity", "EPSS top 9%: very likely to be exploited", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.90546, "pinned": false, "pocs": [{"kind": "poc", "name": "0xBlackash/CVE-2026-55200 (10 stars)", "url": "https://github.com/0xBlackash/CVE-2026-55200", "stars": 10}, {"kind": "poc", "name": "xd20111/CVE-2026-55200 (4 stars)", "url": "https://github.com/xd20111/CVE-2026-55200", "stars": 4}, {"kind": "poc", "name": "kaleth4/CVE-2026-55200 (0 stars)", "url": "https://github.com/kaleth4/CVE-2026-55200", "stars": 0}, {"kind": "writeup", "name": "web.archive.org/web/20260623211210/https://github.com/bikini/exploitarium/tree/main/libssh", "url": "https://web.archive.org/web/20260623211210/https://github.com/bikini/exploitarium/tree/main/libssh2-cve-2026-55200-poc"}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "libssh2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libssh2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "libssh2", "status": "fixed", "fixed": "1.11.1-1ubuntu0.25.10.2", "cmd": "sudo apt update && sudo apt install --only-upgrade libssh2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libssh2)\" ge \"1.11.1-1ubuntu0.25.10.2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libssh2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libssh2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libssh2", "status": "fixed", "fixed": "1.11.1-1+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade libssh2\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libssh2)\" ge \"1.11.1-1+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "libssh2", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libssh2", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "virt:rhel/libssh2", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.21", "pkg": "libssh2", "status": "fixed", "fixed": "libssh2-1.11.1-r2", "cmd": "apk add --upgrade libssh2\napk info -v libssh2", "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "libssh2", "status": "fixed", "fixed": "libssh2-1.11.1-r2", "cmd": "apk add --upgrade libssh2\napk info -v libssh2", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libssh2", "status": "fixed", "fixed": "libssh2-1.11.1-r3", "cmd": "apk add --upgrade libssh2\napk info -v libssh2", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libssh2", "status": "fixed", "fixed": "libssh2-1.11.1-r3", "cmd": "apk add --upgrade libssh2\napk info -v libssh2", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}}, {"id": "CVE-2026-43630", "publisher": "VulnCheck", "title": "llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state ", "summary": "llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and f", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00498, "kev": false, "added": "2026-08-06", "modified": "2026-10-22T19:17:55.207", "products": [{"name": "llama.cpp", "vendor": "ggml", "type": "app", "affected": [">= b5702 and <= b7653"], "fixed": "newer than b7653", "safe": "before b5702", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy llama.cpp || rpm -q llama.cpp || llama.cpp --version"}, {"label": "2. UPGRADE to newer than b7653 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade llama.cpp"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade llama.cpp"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before b5702 (Debian / Ubuntu)", "cmd": "apt-cache madison llama.cpp\nsudo apt install llama.cpp=<VERSION_BEFORE_b5702>\nsudo apt-mark hold llama.cpp"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list llama.cpp\nsudo dnf downgrade llama.cpp-<VERSION_BEFORE_b5702>\nsudo dnf versionlock add llama.cpp"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-43630"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}, {"t": "Patch", "u": "https://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0"}, {"t": "Patch, Third Party Advisory", "u": "https://www.vulncheck.com/advisories/llama-cpp-b5702-b7653-out-of-bounds-read-information-disclosure"}], "cwe": ["CWE-125", "CWE-209"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41808, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-20218", "publisher": "Cisco Systems, Inc.", "title": "A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco prod", "summary": "A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.&nbsp;&nbsp;\r\n\r\nThis vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00416, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:17:51.960", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20218"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34848, "pinned": false, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Multiple%20Cisco%20Products%20Snort%203%20Visual%20Basic%20for%20Applications%20Buffer%20Overflow%20Denial%20of%20Service%20Vulnerability%26vs_k=1", "date": "2026-10-22"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-16477", "publisher": "CERT.PL", "title": "CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable s", "summary": "CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automatically during parsing, resulting in arbitrary code execution in the context of the current user. Users who have never opened a .cleanshot file from an untru", "cvss": 8.4, "sev": "HIGH", "epss": 0.00287, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:50.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16477"}], "cwe": ["CWE-502"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.202, "pinned": false, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "Vulnerability in MTW CleanShot X software", "url": "https://cert.pl/en/posts/2026/10/CVE-2026-16477/", "date": "2026-10-22"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15634", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through 26.0.0.8\u00a0are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-09-14", "modified": "2026-10-22T19:17:50.623", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15634"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17843, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15412", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through 26.0.0.8\u00a0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the att", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00246, "kev": false, "added": "2026-09-14", "modified": "2026-10-22T19:17:50.230", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15412"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15046, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-15396", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through 26.0.0.8\u00a0are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00267, "kev": false, "added": "2026-09-14", "modified": "2026-10-22T19:17:49.977", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15396"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17843, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-11722", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-09-18", "modified": "2026-10-22T19:17:49.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11722"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08744, "pinned": false}, {"id": "CVE-2026-11549", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through 26.0.0.8\u00a0are affected by a virtual host bypass vulnerability.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-09-18", "modified": "2026-10-22T19:17:49.217", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11549"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14018, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-11548", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 thro", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-09-18", "modified": "2026-10-22T19:17:49.030", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-11548"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08745, "pinned": false}, {"id": "CVE-2026-115502", "publisher": "KNIME AG", "title": "A missing authorization check allows anyone having access to a \"link without login\" for a DataApp to list and ", "summary": "A missing authorization check allows anyone having access to a \"link without login\" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all \"links without login\" to DataApps.", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00277, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:48.587", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115502"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19098, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115496", "publisher": "KNIME AG", "title": "Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 m", "summary": "Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00401, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:48.447", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115496"}], "cwe": ["CWE-209"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33177, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115494", "publisher": "KNIME AG", "title": "A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allow", "summary": "A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in front of KNIME Business Hub could remove the X-Forwaded-For header from all incoming requests.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00191, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:48.247", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115494"}], "cwe": ["CWE-352"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08327, "pinned": false}, {"id": "CVE-2026-115482", "publisher": "MITRE", "title": "In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of ", "summary": "In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00446, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:48.100", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115482"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37791, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115454", "publisher": "KNIME AG", "title": "An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior", "summary": "An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00365, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:47.983", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115454"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:X/U:Green", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29143, "pinned": false}, {"id": "CVE-2026-115393", "publisher": "VulnCheck", "title": "Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type", "summary": "Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate that objects belong to the Store's Engine. Embedders mixing objects between Engines via Instance::new, StructRefPre::new, or Tag::new can trigger trampoline signature mismatches causing out-of-bounds stack writes, GC heap corruption, or panics.", "cvss": 3.8, "sev": "LOW", "epss": 0.00092, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:47.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115393"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00482, "pinned": false}, {"id": "CVE-2026-115392", "publisher": "VulnCheck", "title": "Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesy", "summary": "Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks.", "cvss": 7.9, "sev": "HIGH", "epss": 0.00242, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:46.983", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115392"}], "cwe": ["CWE-61"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14487, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 13", "pkg": "rust-wasmtime", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115391", "publisher": "VulnCheck", "title": "Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerabil", "summary": "Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams, causing the host to copy and buffer all bytes, bounded only by guest linear memory, exhausting host memory.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:46.820", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115391"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06242, "pinned": false}, {"id": "CVE-2026-115389", "publisher": "VulnCheck", "title": "Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host a", "summary": "Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-typed Val API, bypassing the hostcall fuel limit. A malicious WebAssembly guest can return crafted values that allocate at least ~100x more host memory than tracked, causing denial of service.", "cvss": 2.3, "sev": "LOW", "epss": 0.00152, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:46.453", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115389"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "A", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04051, "pinned": false}, {"id": "CVE-2026-115388", "publisher": "VulnCheck", "title": "wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce", "summary": "wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for WASIp2 outgoing HTTP bodies, so oversized writes succeed instead of trapping. A malicious guest can pass large buffers to write on outgoing-body resources, holding host allocations for the store's lifetime and exhausting host memory.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:46.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115388"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01327, "pinned": false}, {"id": "CVE-2026-115387", "publisher": "VulnCheck", "title": "Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerabi", "summary": "Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the host via overflowing filesystem timestamps. Attackers can pass atim or mtim values whose sub-second field overflows the seconds field to path_filestat_set_times, fd_filestat_set_times, set-times, or set-times-at, crashing the host.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:46.130", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115387"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01327, "pinned": false}, {"id": "CVE-2026-115385", "publisher": "VulnCheck", "title": "Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmt", "summary": "Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests to abort the Unix host process. Guests with mutable preopened directory access can call set-times or set-times-at with negative seconds timestamps before the epoch, triggering an assertion failure that crashes the host.", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:45.810", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115385"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01328, "pinned": false}, {"id": "CVE-2026-115384", "publisher": "VulnCheck", "title": "Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that all", "summary": "Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write ~16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions to overwrite return addresses, crashing the host or escaping the sandbox.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00312, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:45.653", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115384"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.22857, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 13", "pkg": "rust-wasmtime", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115383", "publisher": "VulnCheck", "title": "Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that acce", "summary": "Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing Wasmtime to panic when the exceptions proposal is enabled.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00183, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:45.500", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115383"}], "cwe": ["CWE-1287"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07519, "pinned": false}, {"id": "CVE-2026-115381", "publisher": "VulnCheck", "title": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocatio", "summary": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the wasmtime-wasi WASIp2 write-zeroes method of SinkOutputStream, the default stream used when stdout/stderr are not configured. A malicious WebAssembly guest can request huge zero-filled writes, exhausting host memory and causing denial of service.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00212, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:45.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115381"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10912, "pinned": false}, {"id": "CVE-2026-115380", "publisher": "VulnCheck", "title": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerabi", "summary": "Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASI preview 0 poll_oneoff adapter, which performs O(n) host work per subscription without consuming or checking fuel. Malicious guest modules can pass many subscriptions to force long-running host computation that ignores configured fuel limits.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:45.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115380"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01645, "pinned": false}, {"id": "CVE-2026-115379", "publisher": "VulnCheck", "title": "Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves", "summary": "Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves references live across try_call unrooted when compiling Wasm modules. Attackers can supply Wasm modules whose callee triggers garbage collection, leaving stale or dangling references that cause GC heap corruption or incorrect execution.", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00277, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:44.860", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115379"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19132, "pinned": false}, {"id": "CVE-2026-115355", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to", "summary": "Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Attackers can also inject HTML through unescaped error messages and included file contents to perform cross-site scripting even when escape=True is set.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:41.633", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115355"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31651, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115354", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attac", "summary": "Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying relative or absolute include paths. Attackers who submit Markdown rendered via Markdown.read() can disclose files such as /etc/passwd and inject unescaped HTML or script content into rendered output.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00333, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:41.483", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115354"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25363, "pinned": false}, {"id": "CVE-2026-115353", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attacker", "summary": "Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Attackers can submit markdown containing include directives referencing ../ sequences or absolute paths to embed sensitive files like credentials or environment data in rendered HTML.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:41.337", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115353"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31651, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115351", "publisher": "VulnCheck", "title": "Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markd", "summary": "Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary style declarations via the unvalidated figwidth option of the figure directive. Attackers can append declarations like background:url() to the rendered figure style attribute, forcing victim browsers to send requests to attacker servers and leak attribute values.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:41.033", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115351"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11983, "pinned": false}, {"id": "CVE-2026-115350", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits include", "summary": "Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content as raw block_html tokens. Attackers who can plant an HTML file readable by the renderer can reference it via an include directive, combined with path traversal, to execute stored scripts when escape=False is set.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00188, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:40.880", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115350"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08001, "pinned": false}, {"id": "CVE-2026-115349", "publisher": "VulnCheck", "title": "Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the pars", "summary": "Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafted requests.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00343, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:40.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115349"}], "cwe": ["CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26666, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115347", "publisher": "VulnCheck", "title": "Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allo", "summary": "Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html(), triggering repeated forward scans that stall worker processes for minutes.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00409, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:40.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115347"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34112, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "mistune", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114570", "publisher": "Wordfence", "title": "WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and includin", "summary": "WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a higher privileged user accesses the affected administrative screens. This issue only affects sites with a large numb", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0018, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:37.417", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114570"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07165, "pinned": false}, {"id": "CVE-2026-114220", "publisher": "TWCERT/CC", "title": "NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability", "summary": "NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00158, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:37.153", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114220"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.04575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114219", "publisher": "TWCERT/CC", "title": "NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability", "summary": "NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:37.027", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114219"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18521, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114057", "publisher": "VulnCheck", "title": "ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handle", "summary": "ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal unauthorized database names, exposing tenant or project identifiers.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:17:36.903", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114057"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0991, "pinned": false}, {"id": "CVE-2026-114052", "publisher": "VulnCheck", "title": "vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving tha", "summary": "vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processor_kwargs value in an unbounded dictionary. Unauthenticated attackers can send distinct or oversized mel_config values to the /tokenize endpoint, which bypasses --api-key, to exhaust host memory and crash the API process.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:17:36.780", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114052"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32179, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114047", "publisher": "VulnCheck", "title": "FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that a", "summary": "FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed, wrong-hostname certificate to impersonate the RDP target and receive proxied session data.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:17:36.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114047"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04663, "pinned": false}, {"id": "CVE-2026-114042", "publisher": "VulnCheck", "title": "FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream w", "summary": "FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash the client during teardown.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T19:17:36.527", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114042"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16016, "pinned": false}, {"id": "CVE-2026-113872", "publisher": "openjs", "title": "multer is a middleware for Node.js that handles multipart/form-data file uploads", "summary": "multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If the request is aborted while one file's asynchronous fileFilter is still pending, the pending callback later resumes a parsing stream that multer has already torn down, and the underlying parser emits an error on a stream", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:36.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113872"}], "cwe": ["CWE-248", "CWE-404"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3731, "pinned": false, "pocs": [{"kind": "poc", "name": "santihabib/multer-CVE-2026-113872 (0 stars)", "url": "https://github.com/santihabib/multer-CVE-2026-113872", "stars": 0}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-111181", "publisher": "openjs", "title": "body-parser is body parsing middleware for Node.js and Express", "summary": "body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream with no error listener. A payload of one valid compressed frame followed by trailin", "cvss": 7.5, "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:35.797", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111181"}], "cwe": ["CWE-248"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29333, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-110354", "publisher": "MITRE", "title": "HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worke", "summary": "HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without making progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client disconnects, and repeated requests can consume ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00762, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:35.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110354"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54903, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-110353", "publisher": "MITRE", "title": "HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread ", "summary": "HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be processed, its data is never consumed, and the H2 multiplexer tasklet is repeatedly woken by that pending data without making progress. The CPU spins", "cvss": 7.5, "sev": "HIGH", "epss": 0.00684, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T19:17:35.540", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110353"}], "cwe": ["CWE-252"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52022, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "haproxy", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-10841", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through ", "summary": "IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3\u00a0through 26.0.0.8\u00a0are vulnerable to HTTP request smuggling.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-09-18", "modified": "2026-10-22T19:17:35.350", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-10841"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08745, "pinned": false}, {"id": "CVE-2026-101810", "publisher": "Oracle", "title": "Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General)", "summary": "Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Scor", "cvss": 7.5, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:35.223", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101810"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33919, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101720", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handli", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in  unauthorized update, inser", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00294, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.970", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101720"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.20896, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101695", "publisher": "Oracle", "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents)", "summary": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.757", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101695"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21691, "pinned": false}, {"id": "CVE-2026-101679", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00426, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.620", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101679"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.35779, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101587", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00385, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.507", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101587"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31393, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101581", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-ro", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data and unaut", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00318, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101581"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2357, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101572", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Ba", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.263", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101572"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37271, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101569", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00332, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:34.120", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101569"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25214, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101520", "publisher": "Oracle", "title": "Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middlew", "summary": "Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Global Lifecycle Management NextGen OUI Framework.  Successful attacks of this vuln", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:33.983", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101520"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38909, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101508", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Integration. CVSS 3.1", "cvss": 7.5, "sev": "HIGH", "epss": 0.00461, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:33.850", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101508"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38987, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101399", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 B", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00386, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:33.707", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101399"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31444, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101394", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)", "summary": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Bas", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:33.587", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101394"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19643, "pinned": false}, {"id": "CVE-2026-101359", "publisher": "Oracle", "title": "Vulnerability in Oracle REST Data Services (component: Core)", "summary": "Vulnerability in Oracle REST Data Services (component: Core).  Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 5.3 (Integrity impac", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T19:17:33.357", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101359"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19611, "pinned": false}, {"id": "CVE-2023-54404", "publisher": "VulnCheck", "title": "Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attacker", "summary": "Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in $ZodArray (and the equivalent set and map paths) accumulates every validation issue for each failing element with no cap or early termination, causing the proc", "cvss": 7.5, "sev": "HIGH", "epss": 0.0035, "kev": false, "added": "2026-10-01", "modified": "2026-10-22T19:17:32.020", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-54404"}], "cwe": ["CWE-770", "CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27481, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "cockpit-image-builder", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "grafana-pcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rust", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rust-toolset:rhel8/rust", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63847", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:11:41.527", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.6 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63847"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3a96fee676fc0caf08f03ad915bec6fcd144d551"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4d96e3cbfc66e4d66ea0096bde858e28ab62da00"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/63691e396105611173072ad548fc2b68831ecf23"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/694fe016969c5e5a24b9e0ef7c1307eedec8ddf8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/79405e774ede411c6b47ed41c651e40b92de64a2"}], "cwe": ["CWE-754", "CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06641, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63850", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit 49b1fbbb5a071197ee71e2d70959b1cb29bdc317)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:10:57.173", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.9 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63850"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/139a8a52ef4349c62129703b3a3e3a6ae4d634eb"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2c350f3cd94be847ac216e1358ec7001eaaf0934"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8cae0ce77de492d7c31c1532a2e80c0c6e7e58cb"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/9f5a1459ecc3195282be617639d710b54779c9dc"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06655, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63845", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T19:10:49.210", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.19 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63845"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/6876d05b899102f4dfdb9ad560132126144c1c72"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/a676f16ea9a7df96d69f405afb6eb349571b3382"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/af4b458daa597dae707bf3f1f74745f5fc133ca2"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d4e0172a1b614373385e9b7111b580f8d2e0b98f"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/e7e90b5839aeb8805ec83bb4da610b8dab8e184d"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06645, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70689", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Infrastructure)", "summary": "Vulnerability in Oracle Essbase (component: Infrastructure).   The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.1.0.0"], "fixed": null, "safe": "before 21.8.1.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.1.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.1.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70689"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70739", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 9.8 (Confidentia", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70739"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4247, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70740", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 9.8 (Confidentia", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70740"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4247, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70745", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 9.8 (Confidentia", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70745"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42469, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70741", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70741"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35759, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71014", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauth", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71014"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35755, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70743", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fina", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70743"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37454, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70702", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Payments accessible data as well as ", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70702"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27734, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70704", "publisher": "Oracle", "title": "Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI)", "summary": "Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading Community.  Successful attacks of this vulnerability can result in takeover of Oracle Trading Community. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "trading community", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy trading-community || rpm -q trading-community || trading-community --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade trading-community"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade trading-community"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison trading-community\nsudo apt install trading-community=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold trading-community"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list trading-community\nsudo dnf downgrade trading-community-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add trading-community"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70704"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70744", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 8.1 (Confident", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70744"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32217, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:26:40.535356+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70749", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 8.1 (Confident", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70749"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32221, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70773", "publisher": "Oracle", "title": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge I", "summary": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM Common Architecture.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle HC", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hcm common architecture", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hcm-common-architecture || rpm -q hcm-common-architecture || hcm-common-architecture --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade hcm-common-architecture"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade hcm-common-architecture"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison hcm-common-architecture\nsudo apt install hcm-common-architecture=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold hcm-common-architecture"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hcm-common-architecture\nsudo dnf downgrade hcm-common-architecture-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add hcm-common-architecture"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70773"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27738, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70795", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: V", "summary": "Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Applications Platform Engineering.  Successful attacks of this vulnerability can result in takeover of Oracle Applications Platform Engineering.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "applications platform engineering", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy applications-platform-engineering || rpm -q applications-platform-engineering || applications-platform-engineering --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade applications-platform-engineering"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade applications-platform-engineering"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison applications-platform-engineering\nsudo apt install applications-platform-engineering=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold applications-platform-engineering"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list applications-platform-engineering\nsudo dnf downgrade applications-platform-engineering-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add applications-platform-engineering"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70795"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32221, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70686", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Ava", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70686"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70688", "publisher": "Oracle", "title": "Vulnerability in Oracle Essbase (component: Calculator)", "summary": "Vulnerability in Oracle Essbase (component: Calculator).   The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "essbase", "vendor": "oracle", "type": "app", "affected": ["21.8.1.0.0"], "fixed": null, "safe": "before 21.8.1.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy essbase || rpm -q essbase || essbase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 21.8.1.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison essbase\nsudo apt install essbase=<VERSION_BEFORE_21.8.1.0.0>\nsudo apt-mark hold essbase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list essbase\nsudo dnf downgrade essbase-<VERSION_BEFORE_21.8.1.0.0>\nsudo dnf versionlock add essbase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70688"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36396, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70696", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Payments.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 3.1 Ba", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70696"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34649, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70700", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payables.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Payables. CV", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payables", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payables || rpm -q payables || payables --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70700"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36744, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70707", "publisher": "Oracle", "title": "Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operat", "summary": "Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for Handhelds.  Successful attacks of this vulnerability can result in takeover of Oracle Sales for Handhelds. CVSS 3.1 Base Score 8.8 (Confidentiality, In", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "sales for handhelds", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sales-for-handhelds || rpm -q sales-for-handhelds || sales-for-handhelds --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sales-for-handhelds"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sales-for-handhelds"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison sales-for-handhelds\nsudo apt install sales-for-handhelds=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold sales-for-handhelds"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sales-for-handhelds\nsudo dnf downgrade sales-for-handhelds-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add sales-for-handhelds"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70707"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36457, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70737", "publisher": "Oracle", "title": "Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager", "summary": "Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Storage Server Management).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Systems Infrastructure.  Successful attacks of this vulnerability can result in takeover of Oracle Enter", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "enterprise manager for systems infrastructure", "vendor": "oracle", "type": "app", "affected": ["13.5", "24.1"], "fixed": null, "safe": "before 13.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy enterprise-manager-for-systems-infrastructure || rpm -q enterprise-manager-for-systems-infrastructure || enterprise-manager-for-systems-infrastructure --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.5 (Debian / Ubuntu)", "cmd": "apt-cache madison enterprise-manager-for-systems-infrastructure\nsudo apt install enterprise-manager-for-systems-infrastructure=<VERSION_BEFORE_13.5>\nsudo apt-mark hold enterprise-manager-for-systems-infrastructure"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list enterprise-manager-for-systems-infrastructure\nsudo dnf downgrade enterprise-manager-for-systems-infrastructure-<VERSION_BEFORE_13.5>\nsudo dnf versionlock add enterprise-manager-for-systems-infrastructure"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70737"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36414, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70742", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 8.8 (Confidentia", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70742"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36414, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70747", "publisher": "Oracle", "title": "Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab)", "summary": "Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers Online.  Successful attacks of this vulnerability can result in takeover of Oracle Customers Online. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Avai", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "customers online", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy customers-online || rpm -q customers-online || customers-online --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade customers-online"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade customers-online"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison customers-online\nsudo apt install customers-online=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold customers-online"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list customers-online\nsudo dnf downgrade customers-online-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add customers-online"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70747"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36411, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70752", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Finan", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70752"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70761", "publisher": "Oracle", "title": "Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Risk Management.  Successful attacks of this vulnerability can result in takeover of Oracle Risk Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "risk management", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy risk-management || rpm -q risk-management || risk-management --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70761"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36414, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70772", "publisher": "Oracle", "title": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Warehouse Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Warehouse ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "warehouse management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy warehouse-management || rpm -q warehouse-management || warehouse-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade warehouse-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade warehouse-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison warehouse-management\nsudo apt install warehouse-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold warehouse-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list warehouse-management\nsudo dnf downgrade warehouse-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add warehouse-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70772"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34638, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70777", "publisher": "Oracle", "title": "Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operation", "summary": "Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle iSupplier Portal a", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "isupplier portal", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy isupplier-portal || rpm -q isupplier-portal || isupplier-portal --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade isupplier-portal"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade isupplier-portal"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison isupplier-portal\nsudo apt install isupplier-portal=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold isupplier-portal"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list isupplier-portal\nsudo dnf downgrade isupplier-portal-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add isupplier-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70777"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34638, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70787", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 8.8 (Confidential", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70787"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3644, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70792", "publisher": "Oracle", "title": "Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Yard Management.  Successful attacks of this vulnerability can result in takeover of Oracle Yard Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "yard management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy yard-management || rpm -q yard-management || yard-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade yard-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade yard-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison yard-management\nsudo apt install yard-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold yard-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list yard-management\nsudo dnf downgrade yard-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add yard-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70792"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3644, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70799", "publisher": "Oracle", "title": "Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SDP Number Portability.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle SDP Nu", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "service delivery platform number portability", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform-number-portability || rpm -q service-delivery-platform-number-portability || service-delivery-platform-number-portability --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade service-delivery-platform-number-portability"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade service-delivery-platform-number-portability"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison service-delivery-platform-number-portability\nsudo apt install service-delivery-platform-number-portability=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold service-delivery-platform-number-portability"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list service-delivery-platform-number-portability\nsudo dnf downgrade service-delivery-platform-number-portability-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add service-delivery-platform-number-portability"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70799"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34661, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70810", "publisher": "Oracle", "title": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Scripting accessible data. CVSS ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "scripting", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scripting || rpm -q scripting || scripting --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scripting"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scripting"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison scripting\nsudo apt install scripting=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold scripting"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scripting\nsudo dnf downgrade scripting-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add scripting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70810"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70699", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Payments accessib", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70699"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26232, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70770", "publisher": "Oracle", "title": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 8.3, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "warehouse management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy warehouse-management || rpm -q warehouse-management || warehouse-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade warehouse-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade warehouse-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison warehouse-management\nsudo apt install warehouse-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold warehouse-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list warehouse-management\nsudo dnf downgrade warehouse-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add warehouse-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70770"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31573, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70778", "publisher": "Oracle", "title": "Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Care.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Care, attacks may ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "customer care", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy customer-care || rpm -q customer-care || customer-care --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70778"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70779", "publisher": "Oracle", "title": "Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operation", "summary": "Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle ", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "isupplier portal", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy isupplier-portal || rpm -q isupplier-portal || isupplier-portal --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade isupplier-portal"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade isupplier-portal"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison isupplier-portal\nsudo apt install isupplier-portal=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold isupplier-portal"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list isupplier-portal\nsudo dnf downgrade isupplier-portal-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add isupplier-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70779"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26241, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70783", "publisher": "Oracle", "title": "Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operatio", "summary": "Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Contracts.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracl", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "service contracts", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-contracts || rpm -q service-contracts || service-contracts --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade service-contracts"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade service-contracts"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison service-contracts\nsudo apt install service-contracts=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold service-contracts"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list service-contracts\nsudo dnf downgrade service-contracts-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add service-contracts"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70783"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26242, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70690", "publisher": "Oracle", "title": "Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General)", "summary": "Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (US).  While the vulnerability is in Oracle HRMS (US), attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerabil", "cvss": 8.0, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "human resources management system", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy human-resources-management-system || rpm -q human-resources-management-system || human-resources-management-system --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade human-resources-management-system"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade human-resources-management-system"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison human-resources-management-system\nsudo apt install human-resources-management-system=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold human-resources-management-system"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list human-resources-management-system\nsudo dnf downgrade human-resources-management-system-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add human-resources-management-system"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70690"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30328, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70701", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payables.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Payables accessible", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payables", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payables || rpm -q payables || payables --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70701"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2885, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70738", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: ", "summary": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Profitability and Cost Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification acces", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion profitability and cost management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-profitability-and-cost-management || rpm -q hyperion-profitability-and-cost-management || hyperion-profitability-and-cost-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-profitability-and-cost-management\nsudo apt install hyperion-profitability-and-cost-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-profitability-and-cost-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-profitability-and-cost-management\nsudo dnf downgrade hyperion-profitability-and-cost-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-profitability-and-cost-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70738"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28822, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70746", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70746"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70762", "publisher": "Oracle", "title": "Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations", "summary": "Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Risk Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Risk ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "risk management", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy risk-management || rpm -q risk-management || risk-management --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70762"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28827, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70782", "publisher": "Oracle", "title": "Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operati", "summary": "Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "labor distribution", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy labor-distribution || rpm -q labor-distribution || labor-distribution --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade labor-distribution"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade labor-distribution"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison labor-distribution\nsudo apt install labor-distribution=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold labor-distribution"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list labor-distribution\nsudo dnf downgrade labor-distribution-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add labor-distribution"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70782"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28821, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70802", "publisher": "Oracle", "title": "Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regre", "summary": "Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources.  While the vulnerability is in Oracle Public Sector Human Resources, attacks may significantly impact additional produ", "cvss": 8.0, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "public sector human resources", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy public-sector-human-resources || rpm -q public-sector-human-resources || public-sector-human-resources --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade public-sector-human-resources"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade public-sector-human-resources"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison public-sector-human-resources\nsudo apt install public-sector-human-resources=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold public-sector-human-resources"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list public-sector-human-resources\nsudo dnf downgrade public-sector-human-resources-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add public-sector-human-resources"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70802"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30331, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70805", "publisher": "Oracle", "title": "Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change", "summary": "Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Planning and Control.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "project planning and control", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy project-planning-and-control || rpm -q project-planning-and-control || project-planning-and-control --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade project-planning-and-control"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade project-planning-and-control"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison project-planning-and-control\nsudo apt install project-planning-and-control=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold project-planning-and-control"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list project-planning-and-control\nsudo dnf downgrade project-planning-and-control-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add project-planning-and-control"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70805"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28824, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:54:03.659226+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70735", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: ", "summary": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Profitability and Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Profitability and Cost Ma", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion profitability and cost management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-profitability-and-cost-management || rpm -q hyperion-profitability-and-cost-management || hyperion-profitability-and-cost-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-profitability-and-cost-management\nsudo apt install hyperion-profitability-and-cost-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-profitability-and-cost-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-profitability-and-cost-management\nsudo dnf downgrade hyperion-profitability-and-cost-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-profitability-and-cost-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70735"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40914, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70781", "publisher": "Oracle", "title": "Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals.  Successful attacks of this vulnerability can result in takeover of Oracle Proposals. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impa", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "proposals", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy proposals || rpm -q proposals || proposals --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade proposals"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade proposals"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison proposals\nsudo apt install proposals=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold proposals"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list proposals\nsudo dnf downgrade proposals-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add proposals"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70781"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40904, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70797", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability i", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "purchasing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purchasing || rpm -q purchasing || purchasing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade purchasing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade purchasing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison purchasing\nsudo apt install purchasing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold purchasing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list purchasing\nsudo dnf downgrade purchasing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add purchasing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70797"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40915, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70807", "publisher": "Oracle", "title": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology.  While the vulnerability is in Oracle Call Center Technology, attacks may significantly impact additional products (scope change).  Su", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70807"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70687", "publisher": "Oracle", "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience)", "summary": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing.  While the vulnerability is in Oracle Marketing, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "marketing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marketing || rpm -q marketing || marketing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade marketing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade marketing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison marketing\nsudo apt install marketing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold marketing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list marketing\nsudo dnf downgrade marketing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add marketing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70687"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27678, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70692", "publisher": "Oracle", "title": "Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Inter", "summary": "Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing Encyclopedia System.  While the vulnerability is in Oracle Marketing Encyclopedia System, attacks may significantly impact additional product", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "marketing encyclopedia system", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy marketing-encyclopedia-system || rpm -q marketing-encyclopedia-system || marketing-encyclopedia-system --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70692"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27683, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70703", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "agile engineering data management product of oracle supply chain", "vendor": "oracle", "type": "app", "affected": ["6.2.1"], "fixed": null, "safe": "before 6.2.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management-product-of-oracle-supply-chain || rpm -q agile-engineering-data-management-product-of-oracle-supply-chain || agile-engineering-data-management-product-of-oracle-supply-chain --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management-product-of-oracle-supply-chain\nsudo apt install agile-engineering-data-management-product-of-oracle-supply-chain=<VERSION_BEFORE_6.2.1>\nsudo apt-mark hold agile-engineering-data-management-product-of-oracle-supply-chain"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management-product-of-oracle-supply-chain\nsudo dnf downgrade agile-engineering-data-management-product-of-oracle-supply-chain-<VERSION_BEFORE_6.2.1>\nsudo dnf versionlock add agile-engineering-data-management-product-of-oracle-supply-chain"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70703"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20382, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70771", "publisher": "Oracle", "title": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Warehouse Management.  While the vulnerability is in Oracle Warehouse Management, attacks may significantly impact additional products (scope change).  Success", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "warehouse management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy warehouse-management || rpm -q warehouse-management || warehouse-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade warehouse-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade warehouse-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison warehouse-management\nsudo apt install warehouse-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold warehouse-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list warehouse-management\nsudo dnf downgrade warehouse-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add warehouse-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70771"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27681, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70694", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments.  While the vulnerability is in Oracle Payments, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability ca", "cvss": 7.7, "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70694"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24381, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70695", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)", "summary": "Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments.  While the vulnerability is in Oracle Payments, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability ca", "cvss": 7.7, "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "payments", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payments || rpm -q payments || payments --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payments"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payments"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payments\nsudo apt install payments=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payments"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payments\nsudo dnf downgrade payments-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payments"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70695"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70706", "publisher": "Oracle", "title": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales.  Successful attacks of this vulnerability can result in takeover of Oracle Sales. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "sales", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sales || rpm -q sales || sales --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70706"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70763", "publisher": "Oracle", "title": "Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Busin", "summary": "Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Business Intelligence).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Operations Intelligence.  Successful attacks of this vulnerability can result in takeover of Oracle Operations Intelligence. CVSS 3.1 Base Score 7.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "operations intelligence", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy operations-intelligence || rpm -q operations-intelligence || operations-intelligence --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70763"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25563, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70764", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle General Ledger accessib", "cvss": 7.6, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70764"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23853, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70769", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fin", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70769"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19647, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70804", "publisher": "Oracle", "title": "Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regre", "summary": "Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources.  While the vulnerability is in Oracle Public Sector Human Resources, attacks may significantly impact additional produ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "public sector human resources", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy public-sector-human-resources || rpm -q public-sector-human-resources || public-sector-human-resources --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade public-sector-human-resources"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade public-sector-human-resources"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison public-sector-human-resources\nsudo apt install public-sector-human-resources=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold public-sector-human-resources"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list public-sector-human-resources\nsudo dnf downgrade public-sector-human-resources-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add public-sector-human-resources"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70804"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24381, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70691", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management", "cvss": 7.5, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70691"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24977, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70788", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financial Re", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70788"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70790", "publisher": "Oracle", "title": "Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (componen", "summary": "Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Telecommunications Billing Integrator.  Successful attacks require human interaction from a person other than the attacker and while the vulne", "cvss": 7.4, "sev": "HIGH", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "telecommunications billing integrator", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy telecommunications-billing-integrator || rpm -q telecommunications-billing-integrator || telecommunications-billing-integrator --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade telecommunications-billing-integrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade telecommunications-billing-integrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison telecommunications-billing-integrator\nsudo apt install telecommunications-billing-integrator=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold telecommunications-billing-integrator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list telecommunications-billing-integrator\nsudo dnf downgrade telecommunications-billing-integrator-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add telecommunications-billing-integrator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70790"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23626, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70803", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle General", "cvss": 7.6, "sev": "HIGH", "epss": 0.00316, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70803"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23253, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71012", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized acces", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71012"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70774", "publisher": "Oracle", "title": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Opera", "summary": "Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 7.1, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "warehouse management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy warehouse-management || rpm -q warehouse-management || warehouse-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade warehouse-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade warehouse-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison warehouse-management\nsudo apt install warehouse-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold warehouse-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list warehouse-management\nsudo dnf downgrade warehouse-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add warehouse-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70774"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26289, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70786", "publisher": "Oracle", "title": "Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfill", "summary": "Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "service fulfillment manager", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-fulfillment-manager || rpm -q service-fulfillment-manager || service-fulfillment-manager --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade service-fulfillment-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade service-fulfillment-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison service-fulfillment-manager\nsudo apt install service-fulfillment-manager=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold service-fulfillment-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list service-fulfillment-manager\nsudo dnf downgrade service-fulfillment-manager-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add service-fulfillment-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70786"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18197, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70736", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: ", "summary": "Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Profitability and Cost Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion profitability and cost management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-profitability-and-cost-management || rpm -q hyperion-profitability-and-cost-management || hyperion-profitability-and-cost-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-profitability-and-cost-management\nsudo apt install hyperion-profitability-and-cost-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-profitability-and-cost-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-profitability-and-cost-management\nsudo dnf downgrade hyperion-profitability-and-cost-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-profitability-and-cost-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70736"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21556, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70767", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Financ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70767"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27678, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70791", "publisher": "Oracle", "title": "Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal O", "summary": "Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Execution.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trans", "cvss": 7.6, "sev": "HIGH", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "transportation execution", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy transportation-execution || rpm -q transportation-execution || transportation-execution --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade transportation-execution"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade transportation-execution"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison transportation-execution\nsudo apt install transportation-execution=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold transportation-execution"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list transportation-execution\nsudo dnf downgrade transportation-execution-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add transportation-execution"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70791"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15591, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70801", "publisher": "Oracle", "title": "Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operati", "summary": "Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow Manufacturing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Flow Manufactur", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "flow manufacturing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy flow-manufacturing || rpm -q flow-manufacturing || flow-manufacturing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade flow-manufacturing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade flow-manufacturing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison flow-manufacturing\nsudo apt install flow-manufacturing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold flow-manufacturing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list flow-manufacturing\nsudo dnf downgrade flow-manufacturing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add flow-manufacturing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70801"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21557, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70808", "publisher": "Oracle", "title": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Scripting accessible data as well", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "scripting", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scripting || rpm -q scripting || scripting --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scripting"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scripting"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison scripting\nsudo apt install scripting=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold scripting"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scripting\nsudo dnf downgrade scripting-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add scripting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70808"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21557, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70809", "publisher": "Oracle", "title": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Scripting acces", "cvss": 7.1, "sev": "HIGH", "epss": 0.00299, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "scripting", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy scripting || rpm -q scripting || scripting --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade scripting"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade scripting"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison scripting\nsudo apt install scripting=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold scripting"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list scripting\nsudo dnf downgrade scripting-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add scripting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70809"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2145, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70685", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may sign", "cvss": 7.9, "sev": "HIGH", "epss": 0.00177, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70685"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0694, "pinned": false}, {"id": "CVE-2026-70750", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Fin", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70750"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04906, "pinned": false}, {"id": "CVE-2026-70751", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00306, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70751"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22223, "pinned": false}, {"id": "CVE-2026-70754", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessib", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70754"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23713, "pinned": false}, {"id": "CVE-2026-70780", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerabil", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00303, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70780"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21856, "pinned": false}, {"id": "CVE-2026-70798", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Purchasing executes to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 7.8 (Confident", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "purchasing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purchasing || rpm -q purchasing || purchasing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade purchasing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade purchasing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison purchasing\nsudo apt install purchasing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold purchasing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list purchasing\nsudo dnf downgrade purchasing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add purchasing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70798"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04906, "pinned": false}, {"id": "CVE-2026-71010", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experien", "cvss": 7.8, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71010"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07442, "pinned": false}, {"id": "CVE-2026-70760", "publisher": "Oracle", "title": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic", "summary": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management.  While the vulnerability is in Oracle Order Management, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 7.1, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "order management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy order-management || rpm -q order-management || order-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade order-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade order-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison order-management\nsudo apt install order-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold order-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list order-management\nsudo dnf downgrade order-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add order-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70760"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.14256, "pinned": false}, {"id": "CVE-2026-70705", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager.  While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may sign", "cvss": 7.1, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion calculation manager", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-calculation-manager || rpm -q hyperion-calculation-manager || hyperion-calculation-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-calculation-manager\nsudo apt install hyperion-calculation-manager=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-calculation-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-calculation-manager\nsudo dnf downgrade hyperion-calculation-manager-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-calculation-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70705"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07334, "pinned": false}, {"id": "CVE-2026-70753", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  u", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70753"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18197, "pinned": false}, {"id": "CVE-2026-70800", "publisher": "Oracle", "title": "Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SDP Number Portability executes to compromise Oracle SDP Number Portability.  While the vulnerability is in Oracle SDP Number Portability, attacks may significan", "cvss": 7.3, "sev": "HIGH", "epss": 0.00163, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "service delivery platform number portability", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy service-delivery-platform-number-portability || rpm -q service-delivery-platform-number-portability || service-delivery-platform-number-portability --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade service-delivery-platform-number-portability"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade service-delivery-platform-number-portability"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison service-delivery-platform-number-portability\nsudo apt install service-delivery-platform-number-portability=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold service-delivery-platform-number-portability"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list service-delivery-platform-number-portability\nsudo dnf downgrade service-delivery-platform-number-portability-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add service-delivery-platform-number-portability"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70800"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.05266, "pinned": false}, {"id": "CVE-2026-70775", "publisher": "Oracle", "title": "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface)", "summary": "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as w", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00262, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "installed base", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy installed-base || rpm -q installed-base || installed-base --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade installed-base"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade installed-base"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison installed-base\nsudo apt install installed-base=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold installed-base"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list installed-base\nsudo dnf downgrade installed-base-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add installed-base"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70775"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.17021, "pinned": false}, {"id": "CVE-2026-70796", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle General Ledger executes to compromise Oracle General Ledger.  While the vulnerability is in Oracle General Ledger, attacks may significantly impact additional products", "cvss": 7.2, "sev": "HIGH", "epss": 0.00144, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "general ledger", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy general-ledger || rpm -q general-ledger || general-ledger --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade general-ledger"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade general-ledger"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison general-ledger\nsudo apt install general-ledger=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold general-ledger"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list general-ledger\nsudo dnf downgrade general-ledger-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add general-ledger"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70796"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03376, "pinned": false}, {"id": "CVE-2026-70806", "publisher": "Oracle", "title": "Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle E-Business Tax executes to compromise Oracle E-Business Tax.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification acce", "cvss": 7.1, "sev": "HIGH", "epss": 0.00143, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "e-business tax", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-tax || rpm -q e-business-tax || e-business-tax --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-tax"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-tax"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-tax\nsudo apt install e-business-tax=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-tax"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-tax\nsudo dnf downgrade e-business-tax-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-tax"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70806"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03302, "pinned": false}, {"id": "CVE-2026-70697", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70697"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02375, "pinned": false}, {"id": "CVE-2026-70698", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Insta", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).   The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in takeover of Oracle", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00181, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70698"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07274, "pinned": false}, {"id": "CVE-2026-70765", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financi", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70765"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14853, "pinned": false}, {"id": "CVE-2026-70768", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financi", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70768"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14853, "pinned": false}, {"id": "CVE-2026-70789", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00254, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70789"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15986, "pinned": false}, {"id": "CVE-2026-71011", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71011"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14847, "pinned": false}, {"id": "CVE-2026-70693", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks require human interactio", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00141, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70693"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03139, "pinned": false}, {"id": "CVE-2026-70759", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70759"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14844, "pinned": false}, {"id": "CVE-2026-70766", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70766"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14853, "pinned": false}, {"id": "CVE-2026-71013", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, d", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00178, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71013"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07044, "pinned": false}, {"id": "CVE-2026-70785", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Reporting access", "cvss": 3.7, "sev": "LOW", "epss": 0.00261, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70785"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16865, "pinned": false}, {"id": "CVE-2026-70758", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized creation, delet", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70758"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01769, "pinned": false}, {"id": "CVE-2026-70784", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized creation, delet", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70784"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01769, "pinned": false}, {"id": "CVE-2026-70793", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financial R", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00189, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70793"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08079, "pinned": false}, {"id": "CVE-2026-70794", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting.  Successful attacks of this vulnerability can result in  unauthorized creation, delet", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00118, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70794"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0162, "pinned": false}, {"id": "CVE-2026-70776", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server)", "summary": "Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in ", "cvss": 2.6, "sev": "LOW", "epss": 0.0019, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T19:09:59.383", "products": [{"name": "hyperion financial reporting", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-reporting || rpm -q hyperion-financial-reporting || hyperion-financial-reporting --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-reporting\nsudo apt install hyperion-financial-reporting=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-reporting"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-reporting\nsudo dnf downgrade hyperion-financial-reporting-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-reporting"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70776"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08154, "pinned": false}, {"id": "CVE-2026-96912", "publisher": "Microsoft Corporation", "title": "Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.", "summary": "Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00311, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T19:00:23.227", "products": [{"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9711"], "fixed": "10.0.26200.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96912"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96912"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.22735, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows Server 2025", "pkg": "KB5126646", "status": "fixed", "fixed": "10.0.26100.33650", "cmd": "Install KB5126646 via Windows Update, then verify:\nGet-HotFix -Id KB5126646", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646", "note": "KB5126646"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96911", "publisher": "Microsoft Corporation", "title": "Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an", "summary": "Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00393, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T19:00:11.840", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96911"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.32288, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows 11 Version 24H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 24H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96914", "publisher": "Microsoft Corporation", "title": "Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att", "summary": "Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00259, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:59:21.337", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96914"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96914"}], "cwe": ["CWE-122", "CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.1665, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows 11 Version 23H2 for ARM64-based Systems", "pkg": "KB5126653", "status": "fixed", "fixed": "10.0.22631.7652", "cmd": "Install KB5126653 via Windows Update, then verify:\nGet-HotFix -Id KB5126653", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653", "note": "KB5126653"}, {"os": "Windows 11 Version 23H2 for x64-based Systems", "pkg": "KB5126653", "status": "fixed", "fixed": "10.0.22631.7652", "cmd": "Install KB5126653 via Windows Update, then verify:\nGet-HotFix -Id KB5126653", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653", "note": "KB5126653"}, {"os": "Windows 11 Version 24H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 24H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96913", "publisher": "Microsoft Corporation", "title": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.", "summary": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:58:56.010", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9711"], "fixed": "10.0.26100.9711", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96913"}, {"t": "Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24161, "pinned": false, "mentions": [{"src": "Microsoft MSRC Update Guide", "group": "vendor", "title": "CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913", "date": "2026-10-20"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows 11 Version 24H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 24H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26100.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26200.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}, {"os": "Windows 11 Version 26H2 for ARM64-based Systems", "pkg": "KB5127648", "status": "fixed", "fixed": "10.0.26300.9711", "cmd": "Install KB5127648 via Windows Update, then verify:\nGet-HotFix -Id KB5127648", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648", "note": "KB5127648"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63844", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 2f6afc97d259d530f4f86c7743efbc573a8da927)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:57:10.203", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.5 and < 6.6.141", ">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.6.141, 6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63844"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/249fa7549736de1c8e327d7ca6b32fa148a40bd6"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/83e37c0987ca92f9e87789b46dd311dcf5a4a6c8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8549b3933038e68dc61cb934b9a54223dd244a78"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b884ff67d62ef514eee9d5f605c03101c8b6bc98"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d6bd2a5fd611ec9c8a2411f084cff2435c709608"}], "cwe": ["CWE-754", "CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06665, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-83661", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar", "summary": "Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00225, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:57:08.557", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83661"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12435, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63843", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:57:06.070", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.7 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63843"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/424510b60d4698a75a6ff71acdd88b528f0f39af"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b65b7f3f3c18f797f81a2af7c97e2079900ad6db"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/f26e3f7186cd6ecc93e6af102744d64c798dea7e"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/f9bc5633b761cff200c428f61ed0df6212b1c721"}], "cwe": ["CWE-754", "CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06664, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-136.136", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-136.136\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "fixed", "fixed": "6.8.0-136.136~22.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-6.8\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-6.8)\" ge \"6.8.0-136.136~22.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63842", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 0f43893d3cd478fa57836697525b338817c9c23d)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00175, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:57:01.620", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.9 and < 6.12.91", ">= 6.13 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.12.91, 6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63842"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3a55ff19a6ff5e046d6a4a18e36deec5d95d9a2e"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/69ab75c7c5f378eb46f4c918aa848bb5c5603924"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/a7e63bb93a7fde3c8920984c3deee9acfe461562"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/ea7c61c5f895e8f9ea0ffffa180498ef9c740152"}], "cwe": ["CWE-754", "CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06664, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63841", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JP", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 742a98e2e81702df8fe1b1eccee5223220a03dc2)", "cvss": 7.8, "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:56:53.927", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.14 and < 6.18.33", ">= 6.19 and < 7.0.10", "7.1 rc1"], "fixed": "6.18.33, 7.0.10", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63841"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2f8e3da71a1b469b6e157aa3972f1448b3157840"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/869ce148c0d953570f8307c3e206b47bd5d3be99"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d0f6ae14c0452be4fc3aa5cf81c74e68b3243050"}], "cwe": ["CWE-754", "CWE-20"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06441, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93909", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypas", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00337, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:56:26.697", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.11"], "fixed": "26.0.0.11", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93909"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292236"}], "cwe": ["CWE-384"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25848, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93905", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote at", "summary": "IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:55:42.930", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 17.0.0.3 and < 26.0.0.11"], "fixed": "26.0.0.11", "safe": "before 17.0.0.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0.3 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_17.0.0.3>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_17.0.0.3>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93905"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292232"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25085, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93895", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote a", "summary": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00423, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T18:55:12.890", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 20.0.0.12 and < 26.0.0.11"], "fixed": "26.0.0.11", "safe": "before 20.0.0.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 20.0.0.12 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_20.0.0.12>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_20.0.0.12>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93895"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292228"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35572, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-106462", "publisher": "GitHub, Inc.", "title": "Backstage is an open framework for building developer portals", "summary": "Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operations with more access than intended. This issue is fixed in 1.54.6 when operators also enable scaffolder.requireScmUserCredentials after upgrading.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-10-06", "modified": "2026-10-22T18:53:09.440", "products": [{"name": "backstage\\/plugin-scaffolder-backend", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.11.10"], "fixed": "0.11.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend"}, {"label": "2. UPGRADE to 0.11.10", "cmd": "npm install backstageplugin-scaffolder-backend@\">=0.11.10\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-azure", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.2.25"], "fixed": "0.2.25", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-azure"}, {"label": "2. UPGRADE to 0.2.25", "cmd": "npm install backstageplugin-scaffolder-backend-module-azure@\">=0.2.25\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-bitbucket-cloud", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.3.10"], "fixed": "0.3.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-bitbucket-cloud"}, {"label": "2. UPGRADE to 0.3.10", "cmd": "npm install backstageplugin-scaffolder-backend-module-bitbucket-cloud@\">=0.3.10\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-bitbucket-server", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.2.25"], "fixed": "0.2.25", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-bitbucket-server"}, {"label": "2. UPGRADE to 0.2.25", "cmd": "npm install backstageplugin-scaffolder-backend-module-bitbucket-server@\">=0.2.25\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-github", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.9.13"], "fixed": "0.9.13", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-github"}, {"label": "2. UPGRADE to 0.9.13", "cmd": "npm install backstageplugin-scaffolder-backend-module-github@\">=0.9.13\""}]}, {"name": "backstage\\/plugin-scaffolder-backend-module-gitlab", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.11.10"], "fixed": "0.11.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-scaffolder-backend-module-gitlab"}, {"label": "2. UPGRADE to 0.11.10", "cmd": "npm install backstageplugin-scaffolder-backend-module-gitlab@\">=0.11.10\""}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106462"}, {"t": "Patch", "u": "https://github.com/backstage/backstage/commit/6fb2a41ea47da37eafe5ea744050ef90be6820c0"}, {"t": "Patch, Release Notes", "u": "https://github.com/backstage/backstage/releases/tag/v1.54.6"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/backstage/backstage/security/advisories/GHSA-29gx-h2m3-xw44"}], "cwe": ["CWE-441", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06215, "pinned": false}, {"id": "CVE-2026-106463", "publisher": "GitHub, Inc.", "title": "Backstage is an open framework for building developer portals", "summary": "Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organization event ingestion and rely on scoped catalog users as an access boundary may admit an unintended catalog identity. Depending on sign-in and permission configuration, this may allow unauthori", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00171, "kev": false, "added": "2026-10-06", "modified": "2026-10-22T18:52:52.427", "products": [{"name": "backstage\\/plugin-catalog-backend-module-gitlab", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.8.7"], "fixed": "0.8.7", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-catalog-backend-module-gitlab"}, {"label": "2. UPGRADE to 0.8.7", "cmd": "npm install backstageplugin-catalog-backend-module-gitlab@\">=0.8.7\""}]}, {"name": "backstage", "vendor": "linuxfoundation", "type": "app", "affected": ["< 1.54.6"], "fixed": "1.54.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy backstage || rpm -q backstage || backstage --version"}, {"label": "2. UPGRADE to 1.54.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade backstage"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade backstage"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106463"}, {"t": "Patch", "u": "https://github.com/backstage/backstage/commit/c211b4b67d28efd2f4fac63e35e2ac515e305cb3"}, {"t": "Patch, Release Notes", "u": "https://github.com/backstage/backstage/releases/tag/v1.54.6"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/backstage/backstage/security/advisories/GHSA-gp6m-x9vw-5c5x"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.06215, "pinned": false}, {"id": "CVE-2026-106487", "publisher": "GitHub, Inc.", "title": "Backstage is an open framework for building developer portals", "summary": "Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by unsupported catalog cluster authentication mode in kubernetes backend. Deployments using catalog cluster discovery may be affected when catalog contributors can create or modify kubernetes-cluster Resource entities. With the required endpoint permissions and pod RBAC, the backend can use its local in-clu", "cvss": 3.5, "sev": "LOW", "epss": 0.00263, "kev": false, "added": "2026-10-06", "modified": "2026-10-22T18:49:32.183", "products": [{"name": "backstage\\/plugin-kubernetes-backend", "vendor": "linuxfoundation", "type": "app", "affected": ["< 0.21.10"], "fixed": "0.21.10", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "npm ls backstageplugin-kubernetes-backend"}, {"label": "2. UPGRADE to 0.21.10", "cmd": "npm install backstageplugin-kubernetes-backend@\">=0.21.10\""}]}, {"name": "backstage", "vendor": "linuxfoundation", "type": "app", "affected": ["< 1.54.6"], "fixed": "1.54.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy backstage || rpm -q backstage || backstage --version"}, {"label": "2. UPGRADE to 1.54.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade backstage"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade backstage"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106487"}, {"t": "Patch", "u": "https://github.com/backstage/backstage/commit/c14f8be6908f0f719b16356e5492352311e28946"}, {"t": "Patch, Release Notes", "u": "https://github.com/backstage/backstage/releases/tag/v1.54.6"}, {"t": "Mitigation, Vendor Advisory", "u": "https://github.com/backstage/backstage/security/advisories/GHSA-h53x-hjx6-25gr"}], "cwe": ["CWE-441"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.17126, "pinned": false}, {"id": "CVE-2026-63809", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: use kvfree() for replaced sysctl wri", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: use kvfree() for replaced sysctl write buffer\n\nproc_sys_call_handler() allocates its temporary sysctl buffer with\nkvzalloc() and passes it to __cgroup_bpf_run_filter_sysctl(). Since\nkvzalloc() may fall back to vmalloc() for large allocations, freeing\nthat buffer with kfree() is wrong and can corrupt memory.\n\nUse kvfree() to safely handle both kmalloc and kvzalloc()/vmalloc\n", "cvss": 7.8, "sev": "HIGH", "epss": 0.00154, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:46:57.237", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.10.20 and < 5.10.260", ">= 5.11.3 and < 5.15.211", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63809"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4c21b5927d4364bfe7365f2700da5fea0ed0d004"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/65bd0c0afb0e1bf3287458e342429b069624f7d4"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/70df4de46577fab5e25418f014583155a147c902"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/77355ef7a9f6b0d2bdf65be3b37f2c1f365e20d2"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/81fc9a13acae99966232f0e055eb2e445263b89a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/838fe9c28121777c59a9406710a68fcf77bb8017"}], "cwe": ["CWE-763", "CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.04176, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2032", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63809.html", "note": "ALAS2023-2026-2032"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63823", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Pin request_key_auth payload in ins", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Pin request_key_auth payload in instantiate paths\n\nA: request_key()       B: KEYCTL_INSTANTIATE_IOV\n================       =========================\n\ncreate auth key\nstore rka in auth key\nwait for helper\n                       get auth key\n                       load rka from auth key\n                       copy user payload\n                       sleep on #PF\n\nhelper comp", "cvss": 7.8, "sev": "HIGH", "epss": 0.00124, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:40:16.387", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 2.6.16 and < 5.10.260", ">= 5.11 and < 5.15.211", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63823"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/35ab4db86774d82389e4b9559e26ab7f68d8e395"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4982bfabce6b33b3c9eddb4fb900fe5568b7cf91"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/708709c65a1832a99b0eef8ae46e343ddaca3d06"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7216ce8cb12fee44e309503955bb83806b106129"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/83c0a1cb296d955d5f4d1f0bd8a769ba8ed8c29f"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/d8274181b0f28d450b42489723a5ba81042158d7"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.01951, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.58.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70498\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-4.18.0-553.166.1.rt7.507.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70403\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "fixed", "fixed": "kernel-4.18.0-553.166.1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70402\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-687.50.1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70459\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2032", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63823.html", "note": "ALAS2023-2026-2032"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63824", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: fix overflow in keyctl_pkey_params_", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: fix overflow in keyctl_pkey_params_get_2()\n\nThe length for the internal output buffer is calculated incorrectly, which\ncan result overflow when a too small buffer is provided.\n\nFix the bug by allocating internal output with the size of the maximum\nlength of the cryptographic primitive instead of caller provided size.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:22:18.247", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 4.20 and < 5.10.260", ">= 5.11 and < 5.15.211", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63824"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0f3058d7d26f81df9b68a18ddbe164bdc3c5eff3"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5165f1cc727f1322456735df212d8e26ec237a8d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5966e4e2ba213ab7ad559166152eb4f1f170dd2c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/622ec2dcd59f21623f2a7ab773c80ceb7d555e3a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/670fc6a311ed321522b7fff92cf0fc376b4f6e78"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b11c1fa32667692a2c0566e10163758e786e430c"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.02389, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.51.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:63128\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-687.44.1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:63129\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2032", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63824.html", "note": "ALAS2023-2026-2032"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87942", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal S", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.860", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87942"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04992, "pinned": false}, {"id": "CVE-2026-87940", "publisher": "Drupal.org", "title": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting I", "summary": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00183, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.710", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87940"}], "cwe": ["CWE-525"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07465, "pinned": false}, {"id": "CVE-2026-87939", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal F", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00156, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.560", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87939"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04349, "pinned": false}, {"id": "CVE-2026-87937", "publisher": "Drupal.org", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00232, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87937"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.13311, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87936", "publisher": "Drupal.org", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal a", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00215, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87936"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.11329, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84924", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal E", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00181, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:31.110", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84924"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07295, "pinned": false}, {"id": "CVE-2026-84923", "publisher": "Drupal.org", "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Veri", "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.960", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84923"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15764, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84921", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.817", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84921"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20309, "pinned": false}, {"id": "CVE-2026-84919", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal P", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.673", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84919"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04993, "pinned": false}, {"id": "CVE-2026-84918", "publisher": "Drupal.org", "title": "Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature", "summary": "Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.", "cvss": 3.7, "sev": "LOW", "epss": 0.00126, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84918"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.02109, "pinned": false}, {"id": "CVE-2026-84917", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Jsonapi Role Access  allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Jsonapi Role Access  allows Forceful Browsing. This issue affects Jsonapi Role Access  versions: from 0.0.0 to 2.0.2.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00194, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84917"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.08608, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84916", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Islandora  allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Islandora  allows Forceful Browsing. This issue affects Islandora  versions: from 0.0.0 to 2.19.0.", "cvss": 3.7, "sev": "LOW", "epss": 0.00197, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.233", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84916"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.08938, "pinned": false}, {"id": "CVE-2026-84915", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal C", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:30.083", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84915"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04993, "pinned": false}, {"id": "CVE-2026-84914", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00214, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:29.927", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84914"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.11165, "pinned": false}, {"id": "CVE-2026-81163", "publisher": "Drupal.org", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media L", "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:29.777", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-81163"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11401, "pinned": false}, {"id": "CVE-2026-16648", "publisher": "Drupal.org", "title": "Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Service", "summary": "Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versions: from 0.0.0 to 1.2.7.", "cvss": 3.8, "sev": "LOW", "epss": 0.00196, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T18:17:28.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16648"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08793, "pinned": false}, {"id": "CVE-2026-114082", "publisher": "VulnCheck", "title": "Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session", "summary": "Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via session input initialization. Attackers can use the credential directly against the storage API to append, create, or trim other session and run streams, forging output or permanently deleting records.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T18:17:27.923", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114082"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18837, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114077", "publisher": "VulnCheck", "title": "Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 ", "summary": "Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resolves a WorkerDeployment by friendlyId alone, without environment, project, or organization scoping. Attackers holding only their own environment API key can POST to the deployment background-workers endpoint with a victim's deployment ID to re-point that in-progress deployment at a worker in the attacker's environment.", "cvss": 7.1, "sev": "HIGH", "epss": 0.0024, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T18:17:27.787", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114077"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.1428, "pinned": false}, {"id": "CVE-2026-114072", "publisher": "VulnCheck", "title": "The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-l", "summary": "The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth state without binding it to the initiating session. Attackers who know a target organization ID can trick an authenticated member into opening an unredeemed /integrations/slack/callback URL, connecting an attacker-controlled Slack workspace that may receive the organizatio", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00103, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T18:17:27.657", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114072"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0094, "pinned": false}, {"id": "CVE-2026-114067", "publisher": "VulnCheck", "title": "Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url sessio", "summary": "Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation history, since the route lacks a secret-key-only check.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00221, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T18:17:27.520", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114067"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11954, "pinned": false}, {"id": "CVE-2026-114062", "publisher": "VulnCheck", "title": "SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to re", "summary": "SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server, which redirects them to internal services.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00288, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T18:17:27.383", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114062"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.20268, "pinned": false}, {"id": "CVE-2026-63829", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_gre: require CAP_NET_ADMIN in the", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nA tunnel changelink() operates on at most two netns, dev_net(dev) and\nthe tunnel link netns t->net. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but no", "cvss": 8.8, "sev": "HIGH", "epss": 0.00114, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:17:26.850", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 3.16 and < 5.10.261", ">= 5.11 and < 5.15.212", ">= 5.16 and < 6.1.178", ">= 6.2 and < 6.6.145", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63829"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/1697957eb0971d420dde42862b88eb43506a1105"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/19275943d8fe903eb7b9aa53e380e41efd042ada"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/47b5d3d506609b08b2e1f7c14f0b681a1953d572"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/8165f7ff57d9667d2bb477ef6af83ede7fed4ad7"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/866b0f5ae599490bd496fd84581c68ac8b94e6af"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/92b766fc55156e0da2ecd0c2302c971118f8a229"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.01393, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.180-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.180-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-4.18.0-553.171.1.rt7.512.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:75746\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "fixed", "fixed": "kernel-4.18.0-553.171.1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:75747\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-687.55.1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:76739\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2058", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63829.html", "note": "ALAS2023-2026-2058"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101830", "publisher": "Oracle", "title": "Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operatio", "summary": "Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts.  While the vulnerability is in Oracle Project Contracts, attacks may significantly impact additional products (scope change).  Successful attack", "cvss": 7.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:26.227", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101830"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24471, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101828", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Termi", "summary": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle M", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:26.090", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101828"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24473, "pinned": false}, {"id": "CVE-2026-101822", "publisher": "Oracle", "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operatio", "summary": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of Material.  While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change).  Successful att", "cvss": 7.2, "sev": "HIGH", "epss": 0.00256, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.953", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101822"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.16227, "pinned": false}, {"id": "CVE-2026-101821", "publisher": "Oracle", "title": "Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compen", "summary": "Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00195, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.820", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101821"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08717, "pinned": false}, {"id": "CVE-2026-101819", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle General Ledger accessib", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.683", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101819"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24473, "pinned": false}, {"id": "CVE-2026-101818", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub.  While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability", "cvss": 7.7, "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.547", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101818"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13003, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101815", "publisher": "Oracle", "title": "Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Assets.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Assets as well as  unauthorized update", "cvss": 7.6, "sev": "HIGH", "epss": 0.00278, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101815"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19216, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101807", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (co", "summary": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management.  Successful attacks of this vulnerability can result in  una", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00208, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.273", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101807"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.10366, "pinned": false}, {"id": "CVE-2026-101805", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics)", "summary": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Applications Manager accessible data an", "cvss": 3.3, "sev": "LOW", "epss": 0.00256, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.140", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101805"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16227, "pinned": false}, {"id": "CVE-2026-101804", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in una", "cvss": 2.5, "sev": "LOW", "epss": 0.0011, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:25.000", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101804"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.01214, "pinned": false}, {"id": "CVE-2026-101803", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.843", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101803"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31933, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101802", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of th", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.703", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101802"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27692, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101801", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.567", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101801"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31935, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101799", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Serv", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.417", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101799"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.11473, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101798", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.283", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101798"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31932, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101794", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101794"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27693, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101793", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (com", "summary": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. ", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:24.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101793"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02563, "pinned": false}, {"id": "CVE-2026-101792", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (com", "summary": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Communications BRM - Elastic Charging Engine executes to compromise ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.873", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101792"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05981, "pinned": false}, {"id": "CVE-2026-101790", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (com", "summary": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engi", "cvss": 3.3, "sev": "LOW", "epss": 0.00126, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.740", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101790"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02099, "pinned": false}, {"id": "CVE-2026-101789", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.600", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101789"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27693, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101788", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Servic", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successf", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.460", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101788"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24314, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101787", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.320", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101787"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31933, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101785", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this", "cvss": 8.3, "sev": "HIGH", "epss": 0.00327, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.177", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101785"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24521, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101784", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:23.037", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101784"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31932, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101782", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnos", "summary": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle A", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:22.903", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101782"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24472, "pinned": false}, {"id": "CVE-2026-101780", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:22.727", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101780"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27693, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101779", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnera", "cvss": 2.7, "sev": "LOW", "epss": 0.00266, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:22.553", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101779"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.17502, "pinned": false}, {"id": "CVE-2026-101778", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Servic", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:22.373", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101778"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27692, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101777", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encrypt", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00361, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:22.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101777"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.28774, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101776", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Succe", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.990", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101776"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.20108, "pinned": false}, {"id": "CVE-2026-101775", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attac", "cvss": 7.4, "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.790", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101775"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.24314, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101774", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful at", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00283, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.610", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101774"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.1977, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101773", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL S", "cvss": 7.1, "sev": "HIGH", "epss": 0.00216, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.430", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101773"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.11473, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101769", "publisher": "Oracle", "title": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)", "summary": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).  Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster as well as  unauthorize", "cvss": 7.0, "sev": "HIGH", "epss": 0.00254, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.290", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101769"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.16004, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101766", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attac", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101766"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22744, "pinned": false}, {"id": "CVE-2026-101764", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (co", "summary": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Man", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:21.013", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101764"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02599, "pinned": false}, {"id": "CVE-2026-101762", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encrypt", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successf", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:20.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101762"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.19499, "pinned": false}, {"id": "CVE-2026-101761", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encrypt", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Success", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:20.663", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101761"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.15948, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101760", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vuln", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00287, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:20.490", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101760"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.20108, "pinned": false}, {"id": "CVE-2026-101756", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:20.320", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101756"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31934, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101755", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang o", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:20.143", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101755"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.19499, "pinned": false}, {"id": "CVE-2026-101754", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.940", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101754"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22744, "pinned": false}, {"id": "CVE-2026-101753", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthori", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.730", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101753"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22743, "pinned": false}, {"id": "CVE-2026-101752", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Servic", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can resul", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00311, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.557", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101752"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22744, "pinned": false}, {"id": "CVE-2026-101751", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successf", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101751"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31932, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101750", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attack", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.200", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101750"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31933, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101749", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encrypt", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to ca", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:19.033", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101749"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31933, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101748", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful atta", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.860", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101748"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27693, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101747", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulne", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.687", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101747"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27692, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101743", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS).  Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or freq", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.517", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101743"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27694, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101741", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.387", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101741"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06222, "pinned": false}, {"id": "CVE-2026-101740", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can", "cvss": 3.6, "sev": "LOW", "epss": 0.00102, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101740"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00888, "pinned": false}, {"id": "CVE-2026-101738", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to ", "cvss": 3.1, "sev": "LOW", "epss": 0.002, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:18.120", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101738"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09425, "pinned": false}, {"id": "CVE-2026-101737", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: Compiler)", "summary": "Vulnerability in Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00325, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.980", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101737"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24314, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101735", "publisher": "Oracle", "title": "Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Cont", "summary": "Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control).  Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Primavera Un", "cvss": 7.1, "sev": "HIGH", "epss": 0.00259, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.850", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101735"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.16663, "pinned": false}, {"id": "CVE-2026-101734", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Agi", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.713", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101734"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18245, "pinned": false}, {"id": "CVE-2026-101733", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.540", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101733"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101732", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.370", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101732"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33895, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101731", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.193", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101731"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33895, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:50:32.435774+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101730", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:17.053", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101730"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33895, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101729", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.0039, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.913", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101729"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.31932, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101728", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attac", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.767", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101728"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29474, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101727", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.627", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101727"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33895, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101726", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulner", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.490", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101726"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29475, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101725", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulner", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00368, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.347", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101725"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29476, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101724", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vuln", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.210", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101724"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33894, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101722", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handli", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result i", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:16.070", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101722"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.18229, "pinned": false}, {"id": "CVE-2026-101721", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Servic", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.930", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101721"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33896, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101718", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).   The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data as well as  unaut", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00257, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.800", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101718"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.164, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101717", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).   The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM.  While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change).  Successful attacks of thi", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00105, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.660", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101717"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01037, "pinned": false}, {"id": "CVE-2026-101715", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).   The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data as well as  unau", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00268, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.530", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101715"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17965, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101714", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.397", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101714"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14237, "pinned": false}, {"id": "CVE-2026-101713", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact add", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.270", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101713"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10275, "pinned": false}, {"id": "CVE-2026-101709", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Payroll, attacks may significantly impa", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.140", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101709"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10274, "pinned": false}, {"id": "CVE-2026-101706", "publisher": "Oracle", "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents)", "summary": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle One-to-One Fulfil", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:15.007", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101706"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.263, "pinned": false}, {"id": "CVE-2026-101701", "publisher": "Oracle", "title": "Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submi", "summary": "Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing.  While the vulnerability is in Oracle Concurrent Processing, attacks may ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:14.880", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101701"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04193, "pinned": false}, {"id": "CVE-2026-101697", "publisher": "Oracle", "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Consol", "summary": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.0024, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:14.747", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101697"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14236, "pinned": false}, {"id": "CVE-2026-101689", "publisher": "Oracle", "title": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (compon", "summary": "Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway.  While the vulnerability is in Oracle E-Business Suite Integrated SOA Gateway, attacks may significantly im", "cvss": 7.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T18:17:14.613", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101689"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26313, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:26:09.953192+00:00", "vendor_fixed": true}, {"id": "CVE-2026-63830", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skmsg: preserve sg.copy across SG tr", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skmsg: preserve sg.copy across SG transforms\n\nThe sk_msg sg.copy bitmap is part of the scatterlist entry ownership\nstate. A set bit tells sk_msg_compute_data_pointers() not to expose the\nentry through writable BPF ctx->data. This protects entries backed by\npages that are not private to the sk_msg, such as splice-backed file\npage-cache pages.\n\nSeveral sk_msg transform paths ", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00353, "kev": false, "added": "2026-07-19", "modified": "2026-10-22T18:14:48.593", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 4.20 and < 5.10.261", ">= 5.11 and < 5.15.212", ">= 5.16 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "5.10.261, 5.15.212, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-63830"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0eb4c16c4adb262763bda870a8ed38a1a9dec7ec"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/1acdd14c0990dd1cd4b6534f00366d2e6dfce05f"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/21ed9540a8e1906dfcbc1bb82ba9b4de4fa4bd6d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/31a110642b5fb5e61940cbcfb503445ac4f28017"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/406e8a651a7b854c41fecd5117bb282b3a6c2c6b"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/9bb86d8184b37503816150c4a6ad3c17dfdbe827"}], "cwe": ["CWE-863", "CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27722, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux-hwe-6.17", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2032", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-63830.html", "note": "ALAS2023-2026-2032"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70812", "publisher": "Oracle", "title": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 8.8 (Confidenti", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T18:09:59.473", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70812"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70811", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing acce", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T18:09:59.473", "products": [{"name": "purchasing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purchasing || rpm -q purchasing || purchasing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade purchasing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade purchasing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison purchasing\nsudo apt install purchasing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold purchasing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list purchasing\nsudo dnf downgrade purchasing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add purchasing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70811"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28856, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-106565", "publisher": "GitHub, Inc.", "title": "ImageMagick is free and open-source software used for editing and manipulating digital images", "summary": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2026-10-07", "modified": "2026-10-22T18:06:17.540", "products": [{"name": "imagemagick", "vendor": "imagemagick", "type": "app", "affected": ["< 6.9.13-57", ">= 7.0.0-0 and < 7.1.2-32"], "fixed": "6.9.13-57, 7.1.2-32", "safe": "before 7.0.0-0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagemagick || rpm -q imagemagick || imagemagick --version"}, {"label": "2. UPGRADE to 6.9.13-57 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagemagick"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagemagick"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0-0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagemagick\nsudo apt install imagemagick=<VERSION_BEFORE_7.0.0-0>\nsudo apt-mark hold imagemagick"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagemagick\nsudo dnf downgrade imagemagick-<VERSION_BEFORE_7.0.0-0>\nsudo dnf versionlock add imagemagick"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106565"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32"}, {"t": "Vendor Advisory", "u": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57"}], "cwe": ["CWE-400", "CWE-835"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35254, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-106566", "publisher": "GitHub, Inc.", "title": "ImageMagick is free and open-source software used for editing and manipulating digital images", "summary": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in version 7.1.2-32.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00137, "kev": false, "added": "2026-10-07", "modified": "2026-10-22T18:05:20.690", "products": [{"name": "imagemagick", "vendor": "imagemagick", "type": "app", "affected": ["< 7.1.2-32"], "fixed": "7.1.2-32", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagemagick || rpm -q imagemagick || imagemagick --version"}, {"label": "2. UPGRADE to 7.1.2-32 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagemagick"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagemagick"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106566"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32"}, {"t": "Vendor Advisory", "u": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57"}], "cwe": ["CWE-61", "CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.0285, "pinned": false}, {"id": "CVE-2026-106567", "publisher": "GitHub, Inc.", "title": "ImageMagick is free and open-source software used for editing and manipulating digital images", "summary": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0042, "kev": false, "added": "2026-10-07", "modified": "2026-10-22T17:59:16.593", "products": [{"name": "imagemagick", "vendor": "imagemagick", "type": "app", "affected": ["< 6.9.13-57", ">= 7.0.0-0 and < 7.1.2-32"], "fixed": "6.9.13-57, 7.1.2-32", "safe": "before 7.0.0-0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagemagick || rpm -q imagemagick || imagemagick --version"}, {"label": "2. UPGRADE to 6.9.13-57 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagemagick"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagemagick"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0-0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagemagick\nsudo apt install imagemagick=<VERSION_BEFORE_7.0.0-0>\nsudo apt-mark hold imagemagick"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagemagick\nsudo dnf downgrade imagemagick-<VERSION_BEFORE_7.0.0-0>\nsudo dnf versionlock add imagemagick"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106567"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32"}, {"t": "Vendor Advisory", "u": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57"}], "cwe": ["CWE-196", "CWE-835"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35254, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-106568", "publisher": "GitHub, Inc.", "title": "ImageMagick is free and open-source software used for editing and manipulating digital images", "summary": "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-10-07", "modified": "2026-10-22T17:58:06.517", "products": [{"name": "imagemagick", "vendor": "imagemagick", "type": "app", "affected": ["< 6.9.13-57", ">= 7.0.0-0 and < 7.1.2-32"], "fixed": "6.9.13-57, 7.1.2-32", "safe": "before 7.0.0-0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy imagemagick || rpm -q imagemagick || imagemagick --version"}, {"label": "2. UPGRADE to 6.9.13-57 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade imagemagick"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade imagemagick"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0-0 (Debian / Ubuntu)", "cmd": "apt-cache madison imagemagick\nsudo apt install imagemagick=<VERSION_BEFORE_7.0.0-0>\nsudo apt-mark hold imagemagick"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list imagemagick\nsudo dnf downgrade imagemagick-<VERSION_BEFORE_7.0.0-0>\nsudo dnf versionlock add imagemagick"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106568"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32"}, {"t": "Vendor Advisory", "u": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4"}, {"t": "Patch", "u": "https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025"}, {"t": "Patch, Release Notes", "u": "https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-57"}], "cwe": ["CWE-835"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31291, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "imagemagick", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "ImageMagick", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-95635", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in ", "summary": "Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00223, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:53:01.593", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95635"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-415"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12187, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-95636", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar", "summary": "Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00225, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:52:49.673", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95636"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12435, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-95637", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00195, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:52:30.690", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95637"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08688, "pinned": false}, {"id": "CVE-2026-95638", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod", "summary": "Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00246, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:51:58.923", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95638"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15048, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-95639", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code ", "summary": "Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.", "cvss": 8.6, "sev": "HIGH", "epss": 0.00211, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:51:12.577", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95639"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.10816, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:30:19.649972+00:00", "vendor_fixed": true}, {"id": "CVE-2026-95640", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application ", "summary": "Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00178, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:47:48.883", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95640"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.06973, "pinned": false}, {"id": "CVE-2026-114119", "publisher": "VulnCheck", "title": "Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative pass", "summary": "Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypass application authentication, and execute operating system commands as SYSTEM.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00428, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114119"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.36037, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2022-51022", "publisher": "VulnCheck", "title": "YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability ", "summary": "YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePath and set the delete parameter to read or remove system files like etc/passwd. Exploitation evidence was first observed by the Sh", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00794, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51022"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.55952, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2021-48016", "publisher": "VulnCheck", "title": "DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer hea", "summary": "DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00441, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48016"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37258, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:29:00.707103+00:00", "vendor_fixed": true}, {"id": "CVE-2026-97631", "publisher": "TianoCore.org", "title": "EDK2 contains a vulnerability in BIOS where a user may cause \u201cOut-of-bounds\nWrite\u201d, Classic\nBuffer Overflow, a", "summary": "EDK2 contains a vulnerability in BIOS where a user may cause \u201cOut-of-bounds\nWrite\u201d, Classic\nBuffer Overflow, and \u201cIncorrect Calculation of Buffer Size\u201d by remote access. Successful exploitation of this vulnerability\ncan lead to arbitrary\ncode execution. It could also impact\nConfidentiality,\nIntegrity,\nand Availability.", "cvss": 9.5, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97631"}], "cwe": ["CWE-120", "CWE-131", "CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36541, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}, {"os": "Debian 12", "pkg": "edk2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "edk2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "edk2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "edk2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "edk2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114108", "publisher": "VulnCheck", "title": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthe", "summary": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth() returns early when API_AUTH_KEY is unset. Attackers can post messages to /sessions/{id}/messages to trigger root shell commands via BashTool, upload .py or .sh files via /upload, read session histories, and obtain partial API keys.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00357, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114108"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2821, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2021-48013", "publisher": "VulnCheck", "title": "Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbi", "summary": "Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload endpoint. Attackers can send crafted GET requests with directory traversal sequences in fpath to retrieve sensitive files such as WEB-INF/web.xml from the server. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00736, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48013"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.53965, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112380", "publisher": "AMZN", "title": "Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of", "summary": "Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group.\n\n\n\nTo remediate this issue, users should upgrade to version 0.7.2.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00407, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112380"}], "cwe": ["CWE-862", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.33829, "pinned": false, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-140-aws/", "date": "2026-10-20"}], "buzz": 1, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2021-48015", "publisher": "VulnCheck", "title": "JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attac", "summary": "JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do with ../ sequences in dbPath, which bypasses AuthInterceptor, to retrieve files like win.ini. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-17.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00563, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48015"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46075, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75508", "publisher": "GitHub, Inc.", "title": "GraphQL-core is a Python port of the GraphQL.js reference implementation", "summary": "GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips comments. Each skipped comment is still allocated as a Token and retained through token.next and token.prev, allowing a highly compressible comment-padded GraphQL document to pass a low token limit while consuming me", "cvss": 7.5, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75508"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.4663, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "graphql-core", "status": "fixed", "fixed": "3.2.12", "cmd": "pip install --upgrade \"graphql-core>=3.2.12\"\npip show graphql-core", "url": "https://github.com/advisories/GHSA-r77w-qph3-7vf8", "note": "vulnerable: >= 3.2.3, < 3.2.12"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "graphql-core", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "graphql-core", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2016-20101", "publisher": "VulnCheck", "title": "Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthen", "summary": "Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-", "cvss": 8.1, "sev": "HIGH", "epss": 0.00398, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-20101"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32914, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2018-25438", "publisher": "VulnCheck", "title": "Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress", "summary": "Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shad", "cvss": 7.5, "sev": "HIGH", "epss": 0.00536, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2018-25438"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.44403, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2015-20124", "publisher": "VulnCheck", "title": "Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows", "summary": "Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to aspose_import_export_download.php with traversal sequences like ../../../wp-config.php to read database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-20124"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31868, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114107", "publisher": "VulnCheck", "title": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows rem", "summary": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to subprocess.run with shell=True and no allow-list or approval step, and read_url fetches arbitrary URLs, enabling command execution and server-side request for", "cvss": 8.8, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114107"}], "cwe": [], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38885, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2017-20287", "publisher": "VulnCheck", "title": "Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated", "summary": "Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the fn parameter of the jvfrm_spot_get_json AJAX action. Attackers can send GET requests to /wp-admin/admin-ajax.php with fn set to ../../wp-config.php to retrieve database credentials and secret keys. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2017-20287"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3791, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2018-25439", "publisher": "VulnCheck", "title": "MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unaut", "summary": "MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the str_replace filter to read files like config_db.php on Windows. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00469, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2018-25439"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3968, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2019-25779", "publisher": "VulnCheck", "title": "WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to re", "summary": "WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00447, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2019-25779"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3791, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2015-20123", "publisher": "VulnCheck", "title": "Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauth", "summary": "Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile(). Attackers can send GET requests to aspose_doc_exporter_download.php with the 'file' parameter set to values like ../../../wp-config.php to retrieve database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 202", "cvss": 7.5, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-20123"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34415, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2015-20125", "publisher": "VulnCheck", "title": "Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauth", "summary": "Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal sequences like ../../../wp-config.php to retrieve WordPress database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on", "cvss": 7.5, "sev": "HIGH", "epss": 0.00412, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-20125"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34415, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114106", "publisher": "VulnCheck", "title": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attacker", "summary": "HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke read_document, which lacks sandbox checks, or safe_user_path-gated tools to leak /etc/shadow, /proc/self/environ API keys, and /root credentials.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114106"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36485, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114123", "publisher": "GitHub, Inc.", "title": "D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code", "summary": "D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0, the officially documented Azure one-click deployment uses infrastructure/azuredeploy.json and infrastructure/main.bicep to default the apiKey parameter to an empty string and pass it to the App Service API_KEY setting. With API_KEY unset or empty, src/middleware/apiKeyAuth.ts passes requests through", "cvss": 7.5, "sev": "HIGH", "epss": 0.00423, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114123"}], "cwe": ["CWE-306", "CWE-1188"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35534, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2021-48017", "publisher": "VulnCheck", "title": "OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerab", "summary": "OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/<id>?op=theme with ../ sequences in style_name to read local files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00428, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48017"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36031, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2016-20103", "publisher": "VulnCheck", "title": "Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated a", "summary": "Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like ../../../../../wp-config.php to read database credentials, since the script passes input directly to readfile(). Exploitation evidence was first observed by the Shadowser", "cvss": 7.5, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-20103"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31866, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114109", "publisher": "VulnCheck", "title": "uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside ", "summary": "uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories, shadowing or overwriting existing binaries for code execution.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00381, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114109"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30953, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2022-51024", "publisher": "VulnCheck", "title": "Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to r", "summary": "Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to retrieve configuration files outside the temp directory. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51024"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31867, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-29001", "publisher": "VulnCheck", "title": "TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrato", "summary": "TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized by getValueAttribute() when the setting is read. Attackers can submit a serialized gadget chain, such as one generated via phpggc, through the admin settings form (for example the maintenance", "cvss": 7.2, "sev": "HIGH", "epss": 0.00644, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-29001"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.50252, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2022-51023", "publisher": "VulnCheck", "title": "PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to ", "summary": "PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information through error messages. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00262, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-51023"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17009, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2024-58393", "publisher": "VulnCheck", "title": "i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that", "summary": "i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-based SLEEP payloads in 'id' to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-09-14.", "cvss": 8.2, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-58393"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.1827, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114605", "publisher": "GitHub, Inc.", "title": "dnspython is a DNS toolkit for Python", "summary": "dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114605"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26114, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "dnspython", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "dnspython", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "python-dns", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-dns", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "python-dns", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115416", "publisher": "AMZN", "title": "Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authen", "summary": "Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this issue.\n\n\n\nAWS remediated the issue on October 7, 2026. No customer action is required.", "cvss": 7.7, "sev": "HIGH", "epss": 0.00273, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115416"}], "cwe": ["CWE-653", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.18646, "pinned": false, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-144-aws/", "date": "2026-10-22"}], "buzz": 1, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115328", "publisher": "VulnCheck", "title": "JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/i", "summary": "JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, StartTime, or EndTime values to read, modify, or delete historian data across all locations regardless of role.", "cvss": 8.8, "sev": "HIGH", "epss": 0.0029, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115328"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20434, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114658", "publisher": "VulnCheck", "title": "Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite ", "summary": "Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers can define an invitation form granting super access in page frontmatter, submit it unauthenticated, and register the invited address for full site control.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00264, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114658"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.17333, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-61791", "publisher": "GitHub, Inc.", "title": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and m", "summary": "OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, `Html::commandButton()` in `lib/Html.class.php` embeds an action URL containing a stored computer hostname into a JavaScript string in an inline `onclick` handler, using `htmlspecialchars(ENT_QUOTES)` only for HTML escaping. Browsers decode the HTML entities before interpreting the handler as JavaS", "cvss": 7.4, "sev": "HIGH", "epss": 0.00287, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61791"}], "cwe": ["CWE-83"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2016, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114391", "publisher": "VulnCheck", "title": "ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets", "summary": "ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for any method containing 'ajax'. Minimal-privilege users can call methods like task.ajaxGetByID, system.ajaxDBAuthUrl and admin.ajaxChangeTableEngine to read data, obtain database credentials, trigger CI jobs and alter tables.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00299, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114391"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21465, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114665", "publisher": "VulnCheck", "title": "Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCo", "summary": "Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read database configuration and deployment SSH private keys.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00353, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114665"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27826, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115453", "publisher": "Secur0", "title": "Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCama", "summary": "Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce Template allows any authenticated user to delete and modify the cart and wishlist rows of any other user, because cartRepository.delete(), cartRepository.updateQuantityInternal() and wishlistRepository.delete() in src/lib/db/drizzle/repositories/ match rows by primary key alone, with no predicate on the owning user, and the", "cvss": 7.1, "sev": "HIGH", "epss": 0.00249, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115453"}], "cwe": ["CWE-639"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.15362, "pinned": false}, {"id": "CVE-2026-115450", "publisher": "Secur0", "title": "External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 ", "summary": "External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts variantId, which determines what the order records, and stripeId, which determines what Stripe charges, as two independent fields of the request body, sto", "cvss": 7.1, "sev": "HIGH", "epss": 0.00235, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115450"}], "cwe": ["CWE-472"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.13571, "pinned": false}, {"id": "CVE-2026-114390", "publisher": "VulnCheck", "title": "Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX", "summary": "Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers under public/main/inc/ajax/ that exposes user names and certificates. Unauthenticated or low-privileged users can call actions like get_users_by_group_course, user_by_all_roles, and export_all_certificates to harvest user names and other learners' certificate PDFs.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00227, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114390"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12775, "pinned": false}, {"id": "CVE-2026-113799", "publisher": "GitHub, Inc.", "title": "Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit", "summary": "Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verification fails. For an invalid request, `slack-morphism` computes the correct signature for the attacker-controlled timestamp and request body and stores it in `SlackEventWrongSignatureError.generated_hash`. The error's `Debug` and `Display` representations expose that value,", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113799"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.31261, "pinned": false}, {"id": "CVE-2026-53986", "publisher": "VulnCheck", "title": "Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcode", "summary": "Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows attackers to obtain the shared TURN relay username by decompiling the app or intercepting unencrypted network traffic during live view registration. Attackers can extract the static TURN username and session token, which are identical across all installs and not tied to any user or device, potential", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53986"}], "cwe": ["CWE-319", "CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.11383, "pinned": false}, {"id": "CVE-2026-114388", "publisher": "VulnCheck", "title": "Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerabi", "summary": "Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to modify gradebook certificates. Attackers can request the set_default_certificate endpoint with any course id and document id to tamper with certificate configuration for any course.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00167, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114388"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.05612, "pinned": false}, {"id": "CVE-2026-114407", "publisher": "VulnCheck", "title": "e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated att", "summary": "e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parse_str() and concatenated unescaped into a rendered input tag via the form handler's 'other' option key. Attackers can craft a single GET request containing a crafted author parameter to break out of the HTML input tag and injec", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114407"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16213, "pinned": false}, {"id": "CVE-2017-20288", "publisher": "VulnCheck", "title": "QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated", "summary": "QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. Attackers can craft GET requests to /assets/php/_devtools/installer/step_2.php with malicious installation_path values echoed unescaped, executing JavaScript in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00256, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2017-20288"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16354, "pinned": false}, {"id": "CVE-2014-125131", "publisher": "VulnCheck", "title": "DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attack", "summary": "DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag and inject JavaScript, which executes in the victim's browser. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-23.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2014-125131"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10791, "pinned": false}, {"id": "CVE-2016-20102", "publisher": "VulnCheck", "title": "JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated a", "summary": "JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only JavaScript-escaped in HtmlCounterReport, to execute script in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 202", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-20102"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1079, "pinned": false}, {"id": "CVE-2020-37284", "publisher": "VulnCheck", "title": "Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticate", "summary": "Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of /config/postProcessing/testNaming. Attackers can craft GET requests with malicious SVG onload payloads that the testNaming handler returns unescaped, executing JavaScript in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-2", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2020-37284"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0994, "pinned": false}, {"id": "CVE-2023-54413", "publisher": "VulnCheck", "title": "WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerabilit", "summary": "WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter. Attackers can lure users to /wp-login.php with a wp_lang value injecting an image input with an obfuscated onfocus handler to execute JavaScript in the victim's browser. Exploitation evidence was first observed by the Shadowserver", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-54413"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1079, "pinned": false}, {"id": "CVE-2024-58394", "publisher": "VulnCheck", "title": "Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to ex", "summary": "Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. Attackers can supply an attacker-hosted SVG in the url parameter, which is served from the Retool origin without a Content Security Policy, executing JavaScript in victims' sessions. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-10-15.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00204, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2024-58394"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09862, "pinned": false}, {"id": "CVE-2026-114389", "publisher": "VulnCheck", "title": "Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiControlle", "summary": "Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI grading of other students' exam attempts. Attackers can enumerate exeId and questionId values sent to the open_answer_grade endpoint to expose other students' answers through feedback and consume AI quota.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114389"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18784, "pinned": false}, {"id": "CVE-2026-114608", "publisher": "GitHub, Inc.", "title": "Pylint is a static code analyser for Python", "summary": "Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can replace a stats cache with crafted serialized data, causing arbitrary code to execute with the privileges of the user who next runs Pylint. The default per-", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00115, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114608"}], "cwe": ["CWE-502"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01463, "pinned": false}, {"id": "CVE-2026-115400", "publisher": "VulnCheck", "title": "crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database r", "summary": "crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromised or exposed Postgres database to gain indefinite, unauthenticated access to all registered users' Google Search Console data.", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00087, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115400"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00309, "pinned": false}, {"id": "CVE-2026-51954", "publisher": "MITRE", "title": "An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a craft", "summary": "An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00511, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-51954"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.42745, "pinned": false}, {"id": "CVE-2026-115319", "publisher": "VulnCheck", "title": "fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents t", "summary": "fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server through quadratic string concatenation. Attackers can repeatedly send POST bodies of about 1 MB to the unauthenticated localhost port, blocking the single-threaded server for about 30 seconds each time.", "cvss": 2.5, "sev": "LOW", "epss": 0.00101, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115319"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00843, "pinned": false}, {"id": "CVE-2026-114463", "publisher": "CERT/CC", "title": "The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{rou", "summary": "The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a \":\" resolves toolset authorization to a different, higher-privileged prefix route than the one authenticated, which allows a remote attacker with the target HMAC to gain that higher-privileged route's toolsets.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114463"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.293, "pinned": false}, {"id": "CVE-2026-82987", "publisher": "CERT/CC", "title": "There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows ", "summary": "There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs", "cvss": "n/a", "sev": "HIGH", "epss": 0.00287, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82987"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20165, "pinned": false, "mentions": [{"src": "CERT/CC Vulnerability Notes", "group": "gov", "title": "VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise", "url": "https://kb.cert.org/vuls/id/234131", "date": "2026-09-24"}], "buzz": 1}, {"id": "CVE-2026-78801", "publisher": "MITRE", "title": "An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remo", "summary": "An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_factory_switch.gch", "cvss": "n/a", "sev": "HIGH", "epss": 0.00258, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78801"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 4, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16568, "pinned": false}, {"id": "CVE-2026-113811", "publisher": "CPANSec", "title": "Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared", "summary": "Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search.\n\nThe failure shift is cached for each pair of trie state and text character in a field of the matcher object, and nothing clears it. A character not seen before at a given state adds an entry that lasts for the life of the matcher.\n\nAn attacker who can submit text with many distinct characters to a long-liv", "cvss": "n/a", "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113811"}], "cwe": ["CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13, "pinned": false}, {"id": "CVE-2026-112921", "publisher": "CPANSec", "title": "Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent ", "summary": "Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request.\n\nEach Robots::Validate object holds one pure-Perl Aho-Corasick search machine and feeds every User-Agent into it without resetting its state. A User-Agent that ends part-way through a robot name leaves the machine mid-match, so the next User-Agent checked by the same object can complete ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112921"}], "cwe": ["CWE-488"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13, "pinned": false}, {"id": "CVE-2026-78846", "publisher": "MITRE", "title": "AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.", "summary": "AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0019, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:40:46.877", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78846"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08247, "pinned": false}, {"id": "CVE-2026-114403", "publisher": "VulnCheck", "title": "PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attacke", "summary": "PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize(), enabling gadget-chain code execution, file writes, or denial of service.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00477, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114403"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.40272, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114493", "publisher": "VulnCheck", "title": "LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go", "summary": "LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.", "cvss": 8.6, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114493"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3083, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115324", "publisher": "VulnCheck", "title": "mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that all", "summary": "mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute injected SQL on the configured Databricks SQL warehouse.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115324"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24489, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-89035", "publisher": "VulnCheck", "title": "MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that al", "summary": "MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts without incorporating channel-specific or session-specific input, and the user service validates tokens against the login store without verifying channel con", "cvss": 7.4, "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-89035"}], "cwe": ["CWE-613"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18769, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114111", "publisher": "VulnCheck", "title": "sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) t", "summary": "sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may result in arbitrary code execution.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00129, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114111"}], "cwe": ["CWE-416"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0228, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114113", "publisher": "VulnCheck", "title": "Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-202", "summary": "Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.", "cvss": 8.4, "sev": "HIGH", "epss": 0.00107, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114113"}], "cwe": [], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01078, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114386", "publisher": "VulnCheck", "title": "Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatche", "summary": "Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00346, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114386"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26944, "pinned": false}, {"id": "CVE-2025-71437", "publisher": "VulnCheck", "title": "Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction ", "summary": "Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a victim, writes arbitrary files to filesystem locations outside the installation prefix.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00285, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-71437"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19988, "pinned": false}, {"id": "CVE-2026-114100", "publisher": "VulnCheck", "title": "Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor select", "summary": "Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the entire Content-Type value exactly, so URL-encoded bodies whose Content-Type carries a media-type parameter are never parsed. Unauthenticated attackers can send application/x-www-form-urlencoded; charset=UTF-8 to keep ARGS_POST and REQUEST_BODY empty, evading body rules while the backend still processes the payload.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114100"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1251, "pinned": false}, {"id": "CVE-2026-114491", "publisher": "VulnCheck", "title": "pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside ", "summary": "pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents in the generated PDF.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00255, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114491"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1618, "pinned": false}, {"id": "CVE-2026-114090", "publisher": "VulnCheck", "title": "Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev ", "summary": "Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task, cancel-run, list-runs, and get-run-logs using the developer's stored access token.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00205, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114090"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.09926, "pinned": false}, {"id": "CVE-2026-114404", "publisher": "VulnCheck", "title": "PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows a", "summary": "PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attributes that are emitted unescaped, executing script in viewers' browsers.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00258, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114404"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16496, "pinned": false}, {"id": "CVE-2026-114120", "publisher": "VulnCheck", "title": "SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributo", "summary": "SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpsp_el_editor_form AJAX action. Attackers can reuse the wpsp-el-editor nonce from the Elementor modal to unpublish or reschedule administrator posts, or publish other users' pending or draft posts.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114120"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20039, "pinned": false}, {"id": "CVE-2026-115327", "publisher": "VulnCheck", "title": "libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src", "summary": "libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lyd_parse_op() to crash servers like netopeer2 or corrupt the heap.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00307, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115327"}], "cwe": ["CWE-824"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22302, "pinned": false}, {"id": "CVE-2020-37288", "publisher": "VulnCheck", "title": "Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an inter", "summary": "Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination (stack underflow). Affected contracts revert such calls unnecessarily, which in limited circumstances could enable denial of service against public contracts.", "cvss": 3.7, "sev": "LOW", "epss": 0.00284, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2020-37288"}], "cwe": ["CWE-670"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19859, "pinned": false}, {"id": "CVE-2026-114110", "publisher": "VulnCheck", "title": "Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary file", "summary": "Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to delete those files when the user uninstalls the package.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00271, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114110"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18513, "pinned": false}, {"id": "CVE-2026-114115", "publisher": "VulnCheck", "title": "Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested ", "summary": "Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing contracts to silently store corrupted values or revert.", "cvss": 3.7, "sev": "LOW", "epss": 0.00221, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114115"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12025, "pinned": false}, {"id": "CVE-2026-115322", "publisher": "VulnCheck", "title": "Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and ", "summary": "Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, database session details, and rollback SQL from other projects.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00281, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115322"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19568, "pinned": false}, {"id": "CVE-2026-114060", "publisher": "VulnCheck", "title": "SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:e", "summary": "SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slash. Attackers can craft action paths starting with // that become protocol-relative URLs, causing non-redirect form results to navigate victims to attacker-controlled sites.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:39:56.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114060"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05403, "pinned": false}, {"id": "CVE-2026-102785", "publisher": "Joomla! Project", "title": "Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOthem", "summary": "Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro\u2019s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote attacker can reuse a signature disclosed in a legitimate public image URL, inject additional image operations, traverse out of the intended cache directory, ", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00701, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102785"}], "cwe": ["CWE-434"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 56, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.52688, "pinned": false, "pocs": [{"kind": "poc", "name": "BIBILZERODAY/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store- (0 stars)", "url": "https://github.com/BIBILZERODAY/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-", "stars": 0}, {"kind": "poc", "name": "antid00t/CVE-2026-102785 (0 stars)", "url": "https://github.com/antid00t/CVE-2026-102785", "stars": 0}], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-105044", "publisher": "Mandiant Inc.", "title": "Improper Neutralization of Special Elements used in an OS Command in\u00a0Security Toolbox versions before\u00a020260929", "summary": "Improper Neutralization of Special Elements used in an OS Command in\u00a0Security Toolbox versions before\u00a020260929 in\u00a0Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection", "cvss": 8.5, "sev": "HIGH", "epss": 0.00936, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105044"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.60464, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71195", "publisher": "MITRE", "title": "In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the call", "summary": "In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual owner. This affects the following operations: allow_access: grant data-plane read/write access to another tenant's share; deny_access: revoke the owner's e", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00484, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71195"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40747, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "manila", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "manila", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19630", "publisher": "Internet Systems Consortium (ISC)", "title": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional proces", "summary": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.  A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00448, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19630"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37962, "pinned": false, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "ISC BIND security advisory (AV26-1072)", "url": "https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "bind9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "bind9", "status": "fixed", "fixed": "1:9.20.30-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.20.30-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind9.16", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96888", "publisher": "Internet Systems Consortium (ISC)", "title": "A BIND resolver that is configured with both a \"redirect\" zone and \"qname-minimization strict\" may abort with ", "summary": "A BIND resolver that is configured with both a \"redirect\" zone and \"qname-minimization strict\" may abort with an assertion failure while processing the redirect.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00461, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96888"}], "cwe": ["CWE-476", "CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39017, "pinned": false, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "ISC BIND security advisory (AV26-1072)", "url": "https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "bind9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "bind9", "status": "fixed", "fixed": "1:9.20.30-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.20.30-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind9.16", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-97313", "publisher": "Internet Systems Consortium (ISC)", "title": "A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query ", "summary": "A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have at least two RPZ zones configured: one with the default setting of \"recursive-only yes\", and the other with \"recursive-only no\".\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.2", "cvss": 7.5, "sev": "HIGH", "epss": 0.00448, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97313"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37961, "pinned": false, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "ISC BIND security advisory (AV26-1072)", "url": "https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072", "date": "2026-10-21"}], "buzz": 1, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "isc-dhcp", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "bind9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "bind9", "status": "fixed", "fixed": "1:9.20.30-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.20.30-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "bind9.16", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.22", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "bind", "status": "fixed", "fixed": "bind-9.20.30-r0", "cmd": "apk add --upgrade bind\napk info -v bind", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-82819", "publisher": "National Cyber Security Centre Finland", "title": "A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection v", "summary": "A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00457, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82819"}], "cwe": ["CWE-40"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38714, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113870", "publisher": "MongoDB, Inc.", "title": "MongoDB Compass improperly escapes certain BSON values when converting a stored view\u2019s aggregation pipeline in", "summary": "MongoDB Compass improperly escapes certain BSON values when converting a stored view\u2019s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with the privileges of the user running Compass.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00238, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113870"}], "cwe": ["CWE-116"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1409, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113866", "publisher": "Mozilla Corporation", "title": "When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover ", "summary": "When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00365, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113866"}], "cwe": ["CWE-523"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2915, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "thunderbird", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114197", "publisher": "Mandiant Inc.", "title": "Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code executio", "summary": "Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility", "cvss": 8.7, "sev": "HIGH", "epss": 0.00116, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114197"}], "cwe": ["CWE-502"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01535, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114198", "publisher": "Mandiant Inc.", "title": "Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code executio", "summary": "Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility", "cvss": 8.7, "sev": "HIGH", "epss": 0.00116, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114198"}], "cwe": ["CWE-502"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.01536, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113868", "publisher": "Mozilla Corporation", "title": "When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challe", "summary": "When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A challenge consisting only of base64 padding also caused an out-of-bounds read, crashing Thunderbird. This affected accounts configured to use NTLM or GSS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00425, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113868"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.35745, "pinned": false}, {"id": "CVE-2026-103672", "publisher": "ICS-CERT", "title": "The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f", "summary": "The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00126, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-103672"}], "cwe": ["CWE-129"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02086, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "HMS Networks PEAK-System PCAN Windows drivers", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-01", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-113869", "publisher": "Mozilla Corporation", "title": "When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) wh", "summary": "When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash. This vulnerability was fixed in Thunderbird 158.0.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113869"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19237, "pinned": false}, {"id": "CVE-2026-13411", "publisher": "Mattermost, Inc.", "title": "Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions ", "summary": "Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00321, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13411"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23888, "pinned": false}, {"id": "CVE-2026-101103", "publisher": "ICS-CERT", "title": "The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough ", "summary": "The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00122, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101103"}], "cwe": ["CWE-120"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01857, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "HMS Networks PEAK-System PCAN Windows drivers", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-01", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-105960", "publisher": "ICS-CERT", "title": "PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy", "summary": "PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00114, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105960"}], "cwe": ["CWE-130"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01399, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "HMS Networks PEAK-System PCAN Windows drivers", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-01", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-109576", "publisher": "ICS-CERT", "title": "The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the reco", "summary": "The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00122, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-109576"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01858, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "HMS Networks PEAK-System PCAN Windows drivers", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-01", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-110322", "publisher": "ICS-CERT", "title": "The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before d", "summary": "The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00114, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110322"}], "cwe": ["CWE-822"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01399, "pinned": false, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "HMS Networks PEAK-System PCAN Windows drivers", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-01", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-21811", "publisher": "HCL Software", "title": "HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving s", "summary": "HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface.", "cvss": 3.8, "sev": "LOW", "epss": 0.00183, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21811"}], "cwe": ["CWE-522"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07484, "pinned": false}, {"id": "CVE-2026-21812", "publisher": "HCL Software", "title": "HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability", "summary": "HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.", "cvss": 2.2, "sev": "LOW", "epss": 0.00119, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21812"}], "cwe": ["CWE-319"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01691, "pinned": false}, {"id": "CVE-2026-107079", "publisher": "MITRE", "title": "An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t ", "summary": "An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component", "cvss": "n/a", "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107079"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11989, "pinned": false}, {"id": "CVE-2026-113867", "publisher": "Mozilla Corporation", "title": "Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas", "summary": "Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused Thunderbird to inject arbitrary stanzas into the user's connection, which the server would then process as if sent by the user. This could be used to send messages or change contact and subscription settings on behalf of the user", "cvss": "n/a", "sev": "HIGH", "epss": 0.00179, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:36:46.950", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113867"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07131, "pinned": false}, {"id": "CVE-2026-95641", "publisher": "Adobe Systems Incorporated", "title": "Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec", "summary": "Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00195, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:35:57.540", "products": [{"name": "photoshop", "vendor": "adobe", "type": "app", "affected": ["< 26.11.8", ">= 27.0 and < 27.11"], "fixed": "26.11.8, 27.11", "safe": "before 27.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy photoshop || rpm -q photoshop || photoshop --version"}, {"label": "2. UPGRADE to 26.11.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade photoshop"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade photoshop"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 27.0 (Debian / Ubuntu)", "cmd": "apt-cache madison photoshop\nsudo apt install photoshop=<VERSION_BEFORE_27.0>\nsudo apt-mark hold photoshop"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list photoshop\nsudo dnf downgrade photoshop-<VERSION_BEFORE_27.0>\nsudo dnf versionlock add photoshop"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95641"}, {"t": "Vendor Advisory", "u": "https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08687, "pinned": false}, {"id": "CVE-2026-95695", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass", "summary": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.", "cvss": 7.4, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:34:56.190", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 20.0.0.12 and < 26.0.0.11"], "fixed": "26.0.0.11", "safe": "before 20.0.0.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 20.0.0.12 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_20.0.0.12>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_20.0.0.12>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95695"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292228"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24156, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114063", "publisher": "VulnCheck", "title": "SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview", "summary": "SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a tunnel can send crafted requests to expose source code, configuration, or credentials readable by the server process.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00405, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114063"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33606, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114138", "publisher": "GitHub, Inc.", "title": "Django REST framework is a toolkit for building Web APIs", "summary": "Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negotiation.py accepts an unbounded number and aggregate size of Accept tokens, while select_renderer in that file repeatedly invokes _MediaType parsing from rest_framework/utils/mediatypes.py for each attacker-controlled token, every renderer, and forced 406 renegotiation. A remote unauthenticated client can send", "cvss": 7.5, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114138"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36385, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "djangorestframework", "status": "fixed", "fixed": "3.18.2", "cmd": "pip install --upgrade \"djangorestframework>=3.18.2\"\npip show djangorestframework", "url": "https://github.com/advisories/GHSA-33wh-fxxf-88vv", "note": "vulnerable: < 3.18.2"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:38:17.151669+00:00", "vendor_fixed": true}, {"id": "CVE-2026-92204", "publisher": "Zero Day Initiative", "title": "Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnera", "summary": "Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing", "cvss": 7.7, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92204"}], "cwe": ["CWE-918"], "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34692, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-92210", "publisher": "Zero Day Initiative", "title": "NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability", "summary": "NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web service, which listens on UDP port 4443 by default. The issue results from the lack of proper validation of a URI prior to accessing resour", "cvss": 7.2, "sev": "HIGH", "epss": 0.00327, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92210"}], "cwe": ["CWE-918"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24571, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-92203", "publisher": "Zero Day Initiative", "title": "Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulne", "summary": "Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the _get_shared_drive_object method. The issue results from the lack of proper validation of ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92203"}], "cwe": ["CWE-918"], "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33763, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-92202", "publisher": "Zero Day Initiative", "title": "Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability", "summary": "Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of BIP files. The issue results from loading a library fr", "cvss": 7.8, "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92202"}], "cwe": ["CWE-427"], "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1887, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114099", "publisher": "VulnCheck", "title": "Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated AR", "summary": "Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST names without escaping literal dots, so distinct properties collide. Unauthenticated attackers can add a later dotted property such as account.role that overwrites a malicious nested value, hiding SQL injection payloads from OWASP CRS rules while backends still receive them.", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00198, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114099"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.0912, "pinned": false}, {"id": "CVE-2026-92205", "publisher": "Zero Day Initiative", "title": "BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability", "summary": "BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the libarchive component. The issue results from the lack of proper validation of a user-sup", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92205"}], "cwe": ["CWE-22"], "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23104, "pinned": false}, {"id": "CVE-2026-114064", "publisher": "VulnCheck", "title": "Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that", "summary": "Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114064"}], "cwe": ["CWE-203"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18184, "pinned": false}, {"id": "CVE-2026-114101", "publisher": "VulnCheck", "title": "Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores ", "summary": "Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores RFC 5987 filename* parameters whose charset is not utf-8 or us-ascii. Unauthenticated attackers can send a decoy filename with filename*=iso-8859-1''shell.php, or filename* alone, so FILES-based rules never see the real name, letting dangerous uploads reach backends that honor filename*.", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00198, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114101"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.09136, "pinned": false}, {"id": "CVE-2026-114061", "publisher": "VulnCheck", "title": "SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages beca", "summary": "SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted without escaping into a <meta http-equiv=\"cache-control\"> tag. An attacker who can influence that untrusted value at prerender time can break out of the content attribute and inject HTML or JavaScript that executes when users visit the page.", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:34:37.867", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114061"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06533, "pinned": false}, {"id": "CVE-2026-95696", "publisher": "IBM Corporation", "title": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause ", "summary": "IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:33:21.733", "products": [{"name": "websphere application server", "vendor": "ibm", "type": "app", "affected": [">= 20.0.0.12 and < 26.0.0.11"], "fixed": "26.0.0.11", "safe": "before 20.0.0.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy websphere-application-server || rpm -q websphere-application-server || websphere-application-server --version"}, {"label": "2. UPGRADE to 26.0.0.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade websphere-application-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade websphere-application-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 20.0.0.12 (Debian / Ubuntu)", "cmd": "apt-cache madison websphere-application-server\nsudo apt install websphere-application-server=<VERSION_BEFORE_20.0.0.12>\nsudo apt-mark hold websphere-application-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list websphere-application-server\nsudo dnf downgrade websphere-application-server-<VERSION_BEFORE_20.0.0.12>\nsudo dnf versionlock add websphere-application-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-95696"}, {"t": "Vendor Advisory", "u": "https://www.ibm.com/support/pages/node/7292228"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25075, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114509", "publisher": "GitHub, Inc.", "title": "Laravel is a web application framework", "summary": "Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00403, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114509"}], "cwe": ["CWE-287", "CWE-1287"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33448, "pinned": false, "pocs": [{"kind": "poc", "name": "tajulasri/-CVE-2026-114509-POC (0 stars)", "url": "https://github.com/tajulasri/-CVE-2026-114509-POC", "stars": 0}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114139", "publisher": "GitHub, Inc.", "title": "Sentry-Javascript is an official Sentry SDKs for JavaScript", "summary": "Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel rewrite serves only the exact tunnel path with valid o and p query parameters. When an application route directly collides with the tunnel path or a root dynamic segment resolves under it, an u", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00407, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114139"}], "cwe": ["CWE-693"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33843, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "@sentry/nextjs", "status": "fixed", "fixed": "9.47.2", "cmd": "npm install @sentry/nextjs@\">=9.47.2\"\nnpm ls @sentry/nextjs", "url": "https://github.com/advisories/GHSA-mchm-gjx6-7h55", "note": "vulnerable: >= 9.36.0, < 9.47.2"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-112407", "publisher": "AMZN", "title": "Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 throu", "summary": "Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline.\n\n\n\nTo remediate this issue, users should upgrade existing toolchain stac", "cvss": 8.8, "sev": "HIGH", "epss": 0.00345, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112407"}], "cwe": ["CWE-266"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.26807, "pinned": false, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/", "date": "2026-10-20"}], "buzz": 1, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-92709", "publisher": "GitHub, Inc.", "title": "Rsyslog is a rocket-fast system for log processing", "summary": "Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path ha", "cvss": 8.1, "sev": "HIGH", "epss": 0.00452, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92709"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38323, "pinned": false, "mentions": [{"src": "Amazon Linux 2023 ALAS", "group": "distro", "title": "ALAS2023-2026-3157 (important): rsyslog", "url": "https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3157.html", "date": "2026-10-12"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3967 (important): rsyslog", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3967.html", "date": "2026-10-12"}], "buzz": 2, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "rsyslog7", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "rsyslog", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3157", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-92709.html", "note": "ALAS2023-2026-3157"}, {"os": "Amazon Linux 2", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS2-2026-3967", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-92709.html", "note": "ALAS2-2026-3967"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-94482", "publisher": "GitHub, Inc.", "title": "Next.js is a React framework for building full-stack web applications", "summary": "Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption and block processing of further requests in the same process. Applications using the Pages Router and App Router applications without Server Actions are not affected. This issue is fixed in versions 15.5.28 and 16.4.1.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00365, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94482"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2922, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "next", "status": "fixed", "fixed": "15.5.28", "cmd": "npm install next@\">=15.5.28\"\nnpm ls next", "url": "https://github.com/advisories/GHSA-p3m5-59mp-jv5r", "note": "vulnerable: >= 13.0.0, <= 15.5.27"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "firefox", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "firefox", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "firefox", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "thunderbird", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113779", "publisher": "GitHub, Inc.", "title": "The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plu", "summary": "The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST API configuration secrets. This enables a non-administrative user to elevate their privileges to a full administrator. pfSense-pkg-RESTAPI 2.9.0 patches", "cvss": 8.8, "sev": "HIGH", "epss": 0.0041, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113779"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34131, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114140", "publisher": "GitHub, Inc.", "title": "The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates", "summary": "The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX, reStructuredText, or AsciiDoc exporter", "cvss": 8.8, "sev": "HIGH", "epss": 0.00313, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114140"}], "cwe": ["CWE-22"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22981, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "nbconvert", "status": "fixed", "fixed": "7.17.2", "cmd": "pip install --upgrade \"nbconvert>=7.17.2\"\npip show nbconvert", "url": "https://github.com/advisories/GHSA-pjvx-prjx-h659", "note": "vulnerable: >= 5.4.0, <= 7.17.1"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "nbconvert", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "nbconvert", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114603", "publisher": "GitHub, Inc.", "title": "OpenTelemetry Python provides the Python API and SDK for OpenTelemetry", "summary": "OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses inbound W3C tracestate headers with an unbounded optional-whitespace regular expression. A malformed header containing a long run of spaces or tabs without a following comma causes quadratic backtracking before th", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00487, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114603"}], "cwe": ["CWE-400", "CWE-1333"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41027, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "opentelemetry-api", "status": "fixed", "fixed": "1.45.1", "cmd": "pip install --upgrade \"opentelemetry-api>=1.45.1\"\npip show opentelemetry-api", "url": "https://github.com/advisories/GHSA-xcq7-p3pf-p88h", "note": "vulnerable: <= 1.45.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113730", "publisher": "GitHub, Inc.", "title": "OGNL is an Object Graph Navigation Library for Java", "summary": "OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field. An attacker-controlled expression can invoke one of these reflection objects as a proxy for a method on a blocked class, causing the real operation to ", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113730"}], "cwe": ["CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28377, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Maven", "pkg": "ognl:ognl", "status": "fixed", "fixed": "3.4.13", "cmd": "Set ognl:ognl to 3.4.13 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-crwc-vw2r-qr6m", "note": "vulnerable: <= 3.4.12"}, {"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "ognl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "ognl", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114510", "publisher": "GitHub, Inc.", "title": "Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications acr", "summary": "Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across multiple graph, vector, and search backends. From 0.6.0 until 0.8.2, the _escape() helper in flexible-graphrag/langchain/graph/pg_store_adapters/falkordb_adapter.py escapes quotes before backslashes and then interpolates the result into Cypher assembled by FalkorDBAdapter.add_graph_documents, allowing an inserted escape to be doubled ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00241, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114510"}], "cwe": ["CWE-116", "CWE-943"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14343, "pinned": false}, {"id": "CVE-2026-114121", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the requestingUrl passed to session.setPermissionRequestHandler to identify trusted content for a launch requested by untrusted content. An application that gran", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00179, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114121"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.07088, "pinned": false}, {"id": "CVE-2026-113787", "publisher": "GitHub, Inc.", "title": "odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript", "summary": "odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an `escapeHtml()` helper and applies it consistently to text content and to attribute values \u2014 `href`, `src`, `alt`, `id`, `data-author`, `data-date`, citation text all go through it. The inline CSS strings do not. In `renderTextSpan` (`dist/odt/to-htm", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00206, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113787"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10061, "pinned": false}, {"id": "CVE-2026-114606", "publisher": "GitHub, Inc.", "title": "draw.io Desktop is the official Electron build of draw.io", "summary": "draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFile actions operate on a renderer-chosen filesystem path with no blessed-path (assertWritablePath) authorization. The only gates are validateSender \u2014 a URL", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00193, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114606"}], "cwe": ["CWE-22", "CWE-200"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08533, "pinned": false}, {"id": "CVE-2026-113797", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query() returned each tab's url and title to extensions that had neither the tabs permission nor matching host permissions. An application that loaded an extension it did not fully trust through session.extensions.loadExtension could therefore allow that extension to rea", "cvss": 3.1, "sev": "LOW", "epss": 0.00486, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113797"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.40954, "pinned": false}, {"id": "CVE-2026-113798", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler() to receive the top-level frame's requestingUrl and isMainFrame values instead of those of the requesting frame. An application that embeds untrusted iframe content and grants", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113798"}], "cwe": ["CWE-346"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10301, "pinned": false}, {"id": "CVE-2026-114122", "publisher": "GitHub, Inc.", "title": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS", "summary": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscription was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could supply inconsistent frame geometry and cause the main process to read out-of-bou", "cvss": 3.9, "sev": "LOW", "epss": 0.00141, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:29:28.470", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114122"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03101, "pinned": false}, {"id": "CVE-2026-98121", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer deref", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe().", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00122, "kev": false, "added": "2026-09-25", "modified": "2026-10-22T17:23:28.030", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.14 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1", "7.3 rc2"], "fixed": "5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98121"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"}], "cwe": ["CWE-476"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.01863, "pinned": false}, {"id": "CVE-2026-112408", "publisher": "AMZN", "title": "Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker", "summary": "Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation.\n\n\n\nTo remediate this issue, users should upgrade to Amazon SageMak", "cvss": 8.1, "sev": "HIGH", "epss": 0.00719, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112408"}], "cwe": ["CWE-940"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53376, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "mentions": [{"src": "AWS Security Bulletins", "group": "vendor", "title": "CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-142-aws/", "date": "2026-10-21"}], "buzz": 1, "ssvc": null}, {"id": "CVE-2026-111074", "publisher": "Eclipse Foundation", "title": "In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remo", "summary": "In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in `MessageBuffer::computeRequiredCapacity()` causes the receiving compilation worker thread to enter an infinite loop consuming ~100% CPU. An unauthenticated remote attacker can exploit this by opening a small number o", "cvss": 8.7, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111074"}], "cwe": ["CWE-190", "CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35414, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:00:33.560831+00:00", "vendor_fixed": true}, {"id": "CVE-2026-110938", "publisher": "Eclipse Foundation", "title": "In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to imp", "summary": "In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bounds heap reads, immediately crashing the JITServer daemon or client JVM process via a segmentation fault (SIGSEGV).", "cvss": 8.7, "sev": "HIGH", "epss": 0.00415, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110938"}], "cwe": ["CWE-20", "CWE-125"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34729, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-111075", "publisher": "Eclipse Foundation", "title": "In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on", "summary": "In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields during `DataDescriptor` message deserialization. An unauthenticated remote attacker can send a crafted network payload that triggers an unsigned integer underflow in `DataDescriptor::getPayloadSize()` and `DataDescriptor::getNextDescriptor()`. This results in an out-of", "cvss": 8.7, "sev": "HIGH", "epss": 0.00372, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111075"}], "cwe": ["CWE-125", "CWE-191"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29957, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114126", "publisher": "GitHub, Inc.", "title": "Storybook is a frontend workshop for building user interface components and pages in isolation", "summary": "Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook development server can expose its WebSocket authentication token to clients able to load its HTML pages over a local network. A LAN attacker can obtain the token and invoke WebSocket-backed file-writing or testing functionality. Weak story-write validation can allow code to be p", "cvss": 8.7, "sev": "HIGH", "epss": 0.00482, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114126"}], "cwe": ["CWE-22", "CWE-94", "CWE-306"], "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40635, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "storybook", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install storybook@\">=8.6.19\"\nnpm ls storybook", "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "npm", "pkg": "@storybook/core", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install @storybook/core@\">=8.6.19\"\nnpm ls @storybook/core", "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "npm", "pkg": "@storybook/core-server", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install @storybook/core-server@\">=8.6.19\"\nnpm ls @storybook/core-server", "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87095", "publisher": "Acronis International GmbH", "title": "Sensitive information disclosure and manipulation due to improper authorization checks", "summary": "Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00242, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87095"}], "cwe": ["CWE-863"], "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.14499, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114135", "publisher": "GitHub, Inc.", "title": "Jupyter Server is the backend for Jupyter web applications", "summary": "Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which authenticated the user but did not call authorizer.is_authorized(...) for the execute action on the kernels resource. A restricted authenticated user could therefore open an upstream kernel channel and obtain kernel execution despite the configured Authorizer", "cvss": 8.8, "sev": "HIGH", "epss": 0.00386, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114135"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31514, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "jupyter-server", "status": "fixed", "fixed": "2.6.0", "cmd": "pip install --upgrade \"jupyter-server>=2.6.0\"\npip show jupyter-server", "url": "https://github.com/advisories/GHSA-354v-3q48-cv69", "note": "vulnerable: >= 2.0.0, < 2.6.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "jupyter-server", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "jupyter-server", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114125", "publisher": "GitHub, Inc.", "title": "Storybook is a frontend workshop for building user interface components and pages in isolation", "summary": "Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, a malicious website can interact with the preview of a running Storybook development server. Insufficient iframe embedding and message-origin restrictions can allow attacker-controlled events to reach the running preview. A developer must visit the malicious website and interact with the inje", "cvss": 8.6, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114125"}], "cwe": ["CWE-94", "CWE-346", "CWE-1021"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30272, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "storybook", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install storybook@\">=8.6.19\"\nnpm ls storybook", "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "npm", "pkg": "@storybook/core", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install @storybook/core@\">=8.6.19\"\nnpm ls @storybook/core", "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "npm", "pkg": "@storybook/core-server", "status": "fixed", "fixed": "8.6.19", "cmd": "npm install @storybook/core-server@\">=8.6.19\"\nnpm ls @storybook/core-server", "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8", "note": "vulnerable: >= 8.0.0, < 8.6.19"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "grafana", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114136", "publisher": "GitHub, Inc.", "title": "Django REST framework is a toolkit for building Web APIs", "summary": "Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the client-supplied Content-Type charset value with codecs.getreader, which accepts byte-transform codecs such as bz2_codec rather than only text encodings. A remote unauthenticated client can therefore cause a compressed JSON request body to be expanded after Django has enforced DATA_UPLOAD_MAX_MEMORY_SIZE against", "cvss": 7.5, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114136"}], "cwe": ["CWE-409", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26113, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "djangorestframework", "status": "fixed", "fixed": "3.18.2", "cmd": "pip install --upgrade \"djangorestframework>=3.18.2\"\npip show djangorestframework", "url": "https://github.com/advisories/GHSA-3547-9m27-7rxg", "note": "vulnerable: >= 3.6.4, < 3.18.2"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "djangorestframework", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114458", "publisher": "Fedora Project", "title": "A flaw was found in mod_qos", "summary": "A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses, allowing more connection records to be added than the allocated buffer can hold. This issue leads to heap memory corruption, which can crash the web se", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0031, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114458"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22612, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114460", "publisher": "Fedora Project", "title": "A flaw was found in mod_qos", "summary": "A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this vulnerability by submitting a crafted request that conceals prohibited values from inspection, resulting in a bypass of configured security rules.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114460"}], "cwe": ["CWE-193"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.18809, "pinned": false}, {"id": "CVE-2026-114457", "publisher": "Fedora Project", "title": "A flaw was found in mod_qos", "summary": "A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.", "cvss": 3.7, "sev": "LOW", "epss": 0.0028, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114457"}], "cwe": ["CWE-170"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19463, "pinned": false}, {"id": "CVE-2026-114459", "publisher": "Fedora Project", "title": "A flaw was found in mod_qos", "summary": "A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).", "cvss": 3.7, "sev": "LOW", "epss": 0.0028, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114459"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.19463, "pinned": false}, {"id": "CVE-2026-107692", "publisher": "CERT/CC", "title": "The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet", "summary": "The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the plaintext JSON payload. This vulnerability allows for temporary authenticated impersonation, enabling an attacker to access game services and certain user ", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00135, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107692"}], "cwe": ["CWE-319"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.02726, "pinned": false}, {"id": "CVE-2026-114129", "publisher": "GitHub, Inc.", "title": "stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footpr", "summary": "stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compiles string and regular-expression path filters into matchers that join the full key stack on every container start. Because the key stack grows with unbounded object or array nesting, a document nested to depth D causes D joins whose cost grows with the current depth, resulting in quadratic ", "cvss": 6.2, "sev": "MEDIUM", "epss": 0.00137, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114129"}], "cwe": ["CWE-407"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02809, "pinned": false}, {"id": "CVE-2026-114127", "publisher": "GitHub, Inc.", "title": "Astro is a web framework for content-driven websites", "summary": "Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application that passes attacker-controlled data into properties such as duration, delay, easing, direction, fillMode, or animation names can allow CSS delimiters to terminate the declaration and add attacker-selected rules to the server-re", "cvss": 2.3, "sev": "LOW", "epss": 0.00329, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114127"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2479, "pinned": false}, {"id": "CVE-2026-87096", "publisher": "Acronis International GmbH", "title": "Sensitive information disclosure and manipulation due to improper authorization checks", "summary": "Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.", "cvss": 3.3, "sev": "LOW", "epss": 0.00131, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87096"}], "cwe": ["CWE-863"], "vector": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02454, "pinned": false}, {"id": "CVE-2026-86409", "publisher": "curl", "title": "Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication,\ncontrary to expectations and do", "summary": "Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication,\ncontrary to expectations and documentation. A subsequent transfer on the same\nhandle still sends an `Authorization: AWS4-HMAC-SHA256` header to whatever URL\nisset next, leaking state information.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00248, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86409"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.15168, "pinned": false}, {"id": "CVE-2026-86413", "publisher": "curl", "title": "When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects,", "summary": "When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00311, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86413"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22808, "pinned": false}, {"id": "CVE-2026-92387", "publisher": "curl", "title": "By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can explo", "summary": "By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00308, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92387"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.22477, "pinned": false}, {"id": "CVE-2026-94265", "publisher": "curl", "title": "When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might er", "summary": "When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket\u2014generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypa", "cvss": "n/a", "sev": "HIGH", "epss": 0.0033, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94265"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.24956, "pinned": false}, {"id": "CVE-2026-86410", "publisher": "curl", "title": "A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting ", "summary": "A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86410"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18943, "pinned": false}, {"id": "CVE-2026-86412", "publisher": "curl", "title": "A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload", "summary": "A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86412"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20514, "pinned": false}, {"id": "CVE-2026-107929", "publisher": "curl", "title": "When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented p", "summary": "When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107929"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20513, "pinned": false}, {"id": "CVE-2026-87861", "publisher": "curl", "title": "When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connectio", "summary": "When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87861"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20513, "pinned": false}, {"id": "CVE-2026-87862", "publisher": "curl", "title": "Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child", "summary": "Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87862"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20513, "pinned": false}, {"id": "CVE-2026-87863", "publisher": "curl", "title": "An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serializati", "summary": "An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87863"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20513, "pinned": false}, {"id": "CVE-2026-92386", "publisher": "curl", "title": "When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write", "summary": "When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92386"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20515, "pinned": false}, {"id": "CVE-2026-92390", "publisher": "curl", "title": "When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protect", "summary": "When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstrai", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92390"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20514, "pinned": false}, {"id": "CVE-2026-92391", "publisher": "curl", "title": "A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl dur", "summary": "A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00281, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92391"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19489, "pinned": false}, {"id": "CVE-2026-94423", "publisher": "CPANSec", "title": "Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks t", "summary": "Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts.\n\nconnect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so the strict_hostkeycheck and knownhosts options are set on the session and then decide nothing.\n\nPassword, agent and public-key authentication, channel ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00269, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94423"}], "cwe": ["CWE-322"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18082, "pinned": false}, {"id": "CVE-2026-94140", "publisher": "CPANSec", "title": "Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync ha", "summary": "Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no.\n\nEvery remote branch of sync builds its ssh command with that option, for password authentication, for private-key authentication and for the fallback. The ssh options a caller sets through set_openssh_opt reach the OpenSSH transport but not this command, so there is no configuration that restores host ke", "cvss": "n/a", "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94140"}], "cwe": ["CWE-322"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 4, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15768, "pinned": false}, {"id": "CVE-2026-87864", "publisher": "curl", "title": "Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in\nthe `IMAP APPEND {N}` literal whi", "summary": "Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in\nthe `IMAP APPEND {N}` literal while transmitting line-ending expanded data.\nThe server reads only $N$ bytes for the payload, causing the remaining\noverflow bytes to be interpreted and executed as pipelined IMAP commands\nwithin the authenticated session.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00206, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87864"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10182, "pinned": false}, {"id": "CVE-2026-108518", "publisher": "CPANSec", "title": "DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed", "summary": "DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element.\n\nAn {attr} element names a database handle attribute, which dbi_profile reads from the handle's inner hash. It expects the inner handle as a reference and dereferences it, but a handle that is being destroyed hands back the inner hash itself, so the dereference yields the hash's bucket array. ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-108518"}], "cwe": ["CWE-843"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12911, "pinned": false}, {"id": "CVE-2026-85783", "publisher": "CPANSec", "title": "Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, e", "summary": "Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key.\n\nThe header parser accepts any number of recipient stanzas, and unwrap_file_key tries every identity against every X25519 stanza. Each attempt runs a scalar multiplication, an HKDF and a ChaCha20-Poly1305 open. The header MAC cannot be checked first, because its key comes fro", "cvss": "n/a", "sev": "HIGH", "epss": 0.00216, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85783"}], "cwe": ["CWE-405", "CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11475, "pinned": false}, {"id": "CVE-2026-112202", "publisher": "CPANSec", "title": "Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images.\n\nWit", "summary": "Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images.\n\nWith `gif_consolidate => 1`, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the bytes into output pixels. The default GIF reader is not affected.\n\nThe same code ships bundled in the Imager distribution.\n\nAn attacker supplying a crafted ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00229, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112202"}], "cwe": ["CWE-125"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13, "pinned": false}, {"id": "CVE-2026-87866", "publisher": "curl", "title": "When built with wolfSSL, curl can successfully validate a pinned public key\nhash against a key the TLS peer do", "summary": "When built with wolfSSL, curl can successfully validate a pinned public key\nhash against a key the TLS peer does not possess. During the TLS handshake,\nwolfSSL validates the connection, but curl's subsequent re-parsing of the same\ncertificate - tricked by a manipulated validity length field - extracts and\nmatches a different embedded key, incorrectly authorizing the pinned public\nkey.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00181, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87866"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07288, "pinned": false}, {"id": "CVE-2026-111879", "publisher": "CPANSec", "title": "DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does no", "summary": "DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock.\n\nopen_data creates the table's lock file and takes an exclusive flock on it for a CREATE, before the checks that can croak: a dbm_mldbm value that is not a module name, a failing tie, or a missing data file. The croak unwinds before the table object is blessed, so nothing releases the lock, and the meta data ho", "cvss": "n/a", "sev": "HIGH", "epss": 0.00176, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111879"}], "cwe": ["CWE-667"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06851, "pinned": false}, {"id": "CVE-2026-86411", "publisher": "curl", "title": "An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP\ncontrol connection that a previo", "summary": "An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP\ncontrol connection that a previous easy handle upgraded with `STARTTLS` and\nauthenticated using a client certificate. The second handle performs neither a\nnew TLS handshake nor a new FTP login, so the server continues to authorize it\nunder the first handle's certificate identity.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00139, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86411"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03, "pinned": false}, {"id": "CVE-2026-113812", "publisher": "CPANSec", "title": "Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to comp", "summary": "Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates.\n\nThe bundle includes \"emSign ECC Root CA - G3\", which provides a trust path for intermediate certificates whose private keys are publicly available.\n\nAn attacker able to intercept or redirect client traffic may use these keys to impersonate a TLS server.\n\nLWP, HTTP::Tiny and other clients normally use IO::Socket::SS", "cvss": "n/a", "sev": "HIGH", "epss": 0.00152, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:21:57.293", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113812"}], "cwe": ["CWE-295"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04045, "pinned": false}, {"id": "CVE-2026-98122", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: mdb: Fix use-after-free in vxlan_m", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()\n\nvxlan_mdb_is_valid_source(), which validates MDBE_ATTR_SOURCE and every\nMDBE_ATTR_SRC_LIST member, accepts the all-zeros address.\n\nA source list is only accepted on a (*, G) entry, whose source is the\nall-zeros address, and for each member of the list an (S, G) entry is\nderived from it by substituting the source. Entr", "cvss": 7.8, "sev": "HIGH", "epss": 0.00125, "kev": false, "added": "2026-09-25", "modified": "2026-10-22T17:19:22.093", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.4 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "7.3 rc1"], "fixed": "6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98122"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/069d5527bb0f229e528fa88c6b72f15060c373f2"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4aa61c88b4e292e10abdfd791334b8272108d68a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/71203a41d6fa2fa0ea2f3a7541987958bd3694fd"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/74e2a56c82209b0335b53e25f19f9b0590e2483d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/e12c903fd13c6261b98ca18d8f70ac26e739e2f8"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.02012, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.111-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.111-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux-6.12", "status": "fixed", "fixed": "6.12.111-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-6.12\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-6.12)\" ge \"6.12.111-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-3193", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-98122.html", "note": "ALAS2023-2026-3193"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-97237", "publisher": "Patchstack", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.", "cvss": 7.1, "sev": "HIGH", "epss": 0.0018, "kev": false, "added": "2026-09-30", "modified": "2026-10-22T17:17:01.887", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-97237"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.07181, "pinned": false}, {"id": "CVE-2026-92892", "publisher": "JFrog", "title": "Potential arbitrary code execution under specific configurations.\nUpdated October 22, 2026: Affected versions ", "summary": "Potential arbitrary code execution under specific configurations.\nUpdated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.0034, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T17:17:01.753", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92892"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2625, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87951", "publisher": "Drupal.org", "title": "Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider  allows Retrieve", "summary": "Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider  allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 3.8, "sev": "LOW", "epss": 0.00196, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:01.520", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87951"}], "cwe": ["CWE-922"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08793, "pinned": false}, {"id": "CVE-2026-87950", "publisher": "Drupal.org", "title": "Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider  allows Retrieve Embedded Se", "summary": "Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider  allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00228, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:01.360", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87950"}], "cwe": ["CWE-798"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12794, "pinned": false}, {"id": "CVE-2026-87949", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal S", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal SAML SSO - Service Provider  allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 3.3, "sev": "LOW", "epss": 0.00167, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:01.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87949"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05624, "pinned": false}, {"id": "CVE-2026-87948", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal S", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal SAML SSO - Service Provider  allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 3.5, "sev": "LOW", "epss": 0.00173, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:01.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87948"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0645, "pinned": false}, {"id": "CVE-2026-87947", "publisher": "Drupal.org", "title": "Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider  allows S", "summary": "Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider  allows Signature Spoof. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00113, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:00.883", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87947"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.01363, "pinned": false}, {"id": "CVE-2026-87946", "publisher": "Drupal.org", "title": "Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider  allows Brute Force", "summary": "Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider  allows Brute Force. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00177, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:00.723", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87946"}], "cwe": ["CWE-208"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.06926, "pinned": false}, {"id": "CVE-2026-87945", "publisher": "Drupal.org", "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider  allow", "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider  allows Fake the Source of Data. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:00.570", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87945"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06225, "pinned": false}, {"id": "CVE-2026-87944", "publisher": "Drupal.org", "title": "Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider  allows Adversary in the M", "summary": "Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider  allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00113, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:00.410", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87944"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.01337, "pinned": false}, {"id": "CVE-2026-87943", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal SAML SSO - Service Provider  allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal SAML SSO - Service Provider  allows Forceful Browsing. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00194, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:17:00.250", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87943"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.08607, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76066", "publisher": "VulnCheck", "title": "IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the exe", "summary": "IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting, memory-write, and call-agent to execute without any human-in-the-loop or approval gate. An unauthenticated or public", "cvss": 7.5, "sev": "HIGH", "epss": 0.00441, "kev": false, "added": "2026-10-15", "modified": "2026-10-22T17:17:00.093", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76066"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37329, "pinned": false, "pocs": [{"kind": "writeup", "name": "www.lasso.security/vulnerability-database/cve-2026-76066", "url": "https://www.lasso.security/vulnerability-database/cve-2026-76066"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115513", "publisher": "VulnCheck", "title": "OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authe", "summary": "OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in the 'Recent' (MRU) navigation panel displayed on nearly every page via lib/MRU.php's getFormatted() function. Attackers can exploit this by crafting a m", "cvss": 8.7, "sev": "HIGH", "epss": 0.00236, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T17:16:59.340", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115513"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1384, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93856", "publisher": "MITRE", "title": "In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API", "summary": "In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 \"List messages\" call finds the non-expired user messages for other projects included in the response, resulting in the leakage of UUIDs of resources owned by other projects, in addition to the user message about the other projects' resources (wh", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00314, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:16:02.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93856"}], "cwe": ["CWE-669"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23101, "pinned": false}, {"id": "CVE-2025-60475", "publisher": "MITRE", "title": "A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2", "summary": "A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00226, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T17:16:02.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60475"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12662, "pinned": false}, {"id": "CVE-2025-60493", "publisher": "MITRE", "title": "A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before ", "summary": "A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00209, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:16:02.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-60493"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 3, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.105, "pinned": false}, {"id": "CVE-2026-70880", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact a", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70880"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 54, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42441, "pinned": false, "pocs": [], "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}}, {"id": "CVE-2026-70817", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confid", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70817"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42443, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70871", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70871"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42443, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70873", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70873"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42469, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70905", "publisher": "Oracle", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructur", "summary": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle Access Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, In", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "access manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy access-manager || rpm -q access-manager || access-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison access-manager\nsudo apt install access-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold access-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list access-manager\nsudo dnf downgrade access-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add access-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70905"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42455, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70926", "publisher": "Oracle", "title": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail", "summary": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow.  Successful attacks of this vulnerability can result in takeover of Oracle Workflow. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availabilit", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "workflow", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy workflow || rpm -q workflow || workflow --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade workflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade workflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison workflow\nsudo apt install workflow=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold workflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list workflow\nsudo dnf downgrade workflow-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add workflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70926"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42455, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70953", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framew", "summary": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Commerce Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce platform", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-platform || rpm -q commerce-platform || commerce-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-platform\nsudo apt install commerce-platform=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-platform\nsudo dnf downgrade commerce-platform-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70953"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42456, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70954", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framew", "summary": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Commerce Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity an", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce platform", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-platform || rpm -q commerce-platform || commerce-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-platform\nsudo apt install commerce-platform=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-platform\nsudo dnf downgrade commerce-platform-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70954"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42456, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71074", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.19 and  3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  C", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71074"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42507, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71152", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17 and  4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CV", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71152"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42482, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71164", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71164"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42498, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73905", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73905"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42457, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73912", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73912"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42457, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73921", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.20"], "fixed": null, "safe": "before 1.4.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73921"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 53, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42497, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:06:44.936171+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70921", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). ", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70921"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35751, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71166", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00455, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71166"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38499, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71167", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unaut", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00455, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71167"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38499, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73920", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unaut", "cvss": 9.4, "sev": "CRITICAL", "epss": 0.00455, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73920"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.385, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70970", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)", "summary": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.  Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Int", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "webcenter portal", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-portal || rpm -q webcenter-portal || webcenter-portal --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-portal\nsudo apt install webcenter-portal=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-portal"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-portal\nsudo dnf downgrade webcenter-portal-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-portal"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70970"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42444, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70995", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in takeove", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00508, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70995"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42444, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52854", "publisher": "GitHub, Inc.", "title": "Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps", "summary": "Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the overlay name as a Leaflet layer-control label without escaping it. A wiki user with the edit permission can store malicious wikitext that causes script ex", "cvss": 8.6, "sev": "HIGH", "epss": 0.00578, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52854"}], "cwe": ["CWE-79", "CWE-80"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46863, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Composer (PHP)", "pkg": "mediawiki/maps", "status": "fixed", "fixed": "12.1.3", "cmd": "composer require \"mediawiki/maps:>=12.1.3\"", "url": "https://github.com/advisories/GHSA-4h7g-5542-v3fc", "note": "vulnerable: < 12.1.3"}], "vendors_checked": "2026-10-23T16:53:39.649538+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70862", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Application Testing Suite accessible data as well as  unauth", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70862"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35759, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70872", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification acces", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70872"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35762, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70978", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70978"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35753, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71015", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauth", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71015"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35756, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71036", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized crea", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71036"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35751, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73865", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73865"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35757, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73866", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unaut", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73866"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35758, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73916", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73916"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35761, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73917", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unaut", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73917"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35752, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73922", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.19"], "fixed": null, "safe": "before 1.4.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73922"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35752, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73924", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.19"], "fixed": null, "safe": "before 1.4.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73924"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 49, "tier": "P2", "why": ["Critical severity", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35753, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70994", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauth", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70994"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41534, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70997", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized acce", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00494, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70997"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.41534, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73930", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.19 and  4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can resu", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00371, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73930"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29841, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70854", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all O", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70854"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3787, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70976", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70976"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3787, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70977", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70977"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37868, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70979", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70979"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37869, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70981", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70981"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37869, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70984", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70984"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37869, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71026", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauth", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00425, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71026"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35764, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71102", "publisher": "Oracle", "title": "Vulnerability in the Portable Clusterware component of Oracle Database Server", "summary": "Vulnerability in the Portable Clusterware component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32, 21.3-21.23 and  23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Portable Clusterware.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Portable Clusterwar", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00447, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "database server", "vendor": "oracle", "type": "app", "affected": [">= 19.3 and <= 19.32", ">= 21.3 and <= 21.23", ">= 23.4.0 and <= 23.26.3"], "fixed": "newer than 23.26.3", "safe": "before 19.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy database-server || rpm -q database-server || database-server --version"}, {"label": "2. UPGRADE to newer than 23.26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade database-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade database-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.3 (Debian / Ubuntu)", "cmd": "apt-cache madison database-server\nsudo apt install database-server=<VERSION_BEFORE_19.3>\nsudo apt-mark hold database-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list database-server\nsudo dnf downgrade database-server-<VERSION_BEFORE_19.3>\nsudo dnf versionlock add database-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71102"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37871, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:57:04.804695+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50186", "publisher": "GitHub, Inc.", "title": "4gaBoards is a boards system for realtime project management", "summary": "4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is passed to path.join() beneath private/exports/<user_id>/ without containment validation. A crafted value such as ../ can select an arbitrary file readab", "cvss": 8.8, "sev": "HIGH", "epss": 0.00586, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50186"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.47346, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/RARgames/4gaBoards/security/advisories/GHSA-rv7w-hhqv-65cf", "url": "https://github.com/RARgames/4gaBoards/security/advisories/GHSA-rv7w-hhqv-65cf"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52877", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal without validating its protocol. A compromised renderer can submit file: URIs or operating-system-specific custom schemes, causing the host to open local files, access remote resources through registered handl", "cvss": 8.3, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52877"}], "cwe": ["CWE-20", "CWE-749"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 46, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33896, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-j2vw-gg3g-wwqr", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-j2vw-gg3g-wwqr"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70980", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / O", "cvss": 9.0, "sev": "CRITICAL", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70980"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32223, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70920", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change).  ", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70920"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70996", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / ", "cvss": 8.6, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70996"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34651, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70998", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / ", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70998"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27736, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71059", "publisher": "Oracle", "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)", "summary": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).  Supported versions that are affected are 8.2.0.0.0 and  26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher.  While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change).  Successful attacks of this vulne", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "bi publisher", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-publisher || rpm -q bi-publisher || bi-publisher --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-publisher\nsudo apt install bi-publisher=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold bi-publisher"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-publisher\nsudo dnf downgrade bi-publisher-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add bi-publisher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71059"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71065", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71065"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27733, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76036", "publisher": "Chrome", "title": "Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to ex", "summary": "Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00506, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76036"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.42353, "pinned": false, "pocs": [{"kind": "poc", "name": "Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android (1 stars)", "url": "https://github.com/Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android", "stars": 1}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50142", "publisher": "GitHub, Inc.", "title": "libheif is a HEIF and AVIF file format decoder and encoder", "summary": "libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seq_boxes.cc, Box_stsz::parse() applies max_sequence_frames only to variable-size samples, so fixed-size mode accepts an attacker-controlled sample_count without a bound. In libheif/sequences/track.cc, Track::", "cvss": 7.5, "sev": "HIGH", "epss": 0.00655, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50142"}], "cwe": ["CWE-190", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 44, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.50787, "pinned": false, "pocs": [{"kind": "poc", "name": "MuhammedHussein17/libheif-cve-2026-50142 (0 stars)", "url": "https://github.com/MuhammedHussein17/libheif-cve-2026-50142", "stars": 0}, {"kind": "writeup", "name": "github.com/strukturag/libheif/security/advisories/GHSA-jvmp-j3cw-84mh", "url": "https://github.com/strukturag/libheif/security/advisories/GHSA-jvmp-j3cw-84mh"}], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "libheif", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libheif", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "libheif", "status": "fixed", "fixed": "1.20.2-1ubuntu0.6", "cmd": "sudo apt update && sudo apt install --only-upgrade libheif\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libheif)\" ge \"1.20.2-1ubuntu0.6\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libheif", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libheif", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "libheif", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.23", "pkg": "libheif", "status": "fixed", "fixed": "libheif-1.23.0-r0", "cmd": "apk add --upgrade libheif\napk info -v libheif", "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "libheif", "status": "fixed", "fixed": "libheif-1.23.0-r0", "cmd": "apk add --upgrade libheif\napk info -v libheif", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:17:03.603085+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70870", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web C", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode).   The supported version that is affected is 11.2.23.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acc", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70870"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37452, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70909", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70909"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37452, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70952", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70952"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37453, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71024", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critica", "cvss": 8.2, "sev": "HIGH", "epss": 0.00443, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71024"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37453, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76035", "publisher": "Chrome", "title": "Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote atta", "summary": "Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00462, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76035"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.39051, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/536439844", "url": "https://issues.chromium.org/issues/536439844"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70876", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70876"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.40899, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70900", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impac", "cvss": 8.7, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70900"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26241, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70958", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker and while the vulnera", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00416, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70958"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-601"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.3482, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71063", "publisher": "Oracle", "title": "Vulnerability in the Portable Clusterware component of Oracle Database Server", "summary": "Vulnerability in the Portable Clusterware component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32, 21.3-21.23 and  23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Portable Clusterware executes to compromise Portable Clusterware.  While the vulnerability is in Portable Clusterware, attacks may sign", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "database server", "vendor": "oracle", "type": "app", "affected": [">= 19.3 and <= 19.32", ">= 21.3 and <= 21.23", ">= 23.4.0 and <= 23.26.3"], "fixed": "newer than 23.26.3", "safe": "before 19.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy database-server || rpm -q database-server || database-server --version"}, {"label": "2. UPGRADE to newer than 23.26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade database-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade database-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.3 (Debian / Ubuntu)", "cmd": "apt-cache madison database-server\nsudo apt install database-server=<VERSION_BEFORE_19.3>\nsudo apt-mark hold database-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list database-server\nsudo dnf downgrade database-server-<VERSION_BEFORE_19.3>\nsudo dnf versionlock add database-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71063"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.32582, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71064", "publisher": "Oracle", "title": "Vulnerability in the Portable Clusterware component of Oracle Database Server", "summary": "Vulnerability in the Portable Clusterware component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32, 21.3-21.23 and  23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Portable Clusterware executes to compromise Portable Clusterware.  While the vulnerability is in Portable Clusterware, attacks may sign", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00395, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "database server", "vendor": "oracle", "type": "app", "affected": [">= 19.3 and <= 19.32", ">= 21.3 and <= 21.23", ">= 23.4.0 and <= 23.26.3"], "fixed": "newer than 23.26.3", "safe": "before 19.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy database-server || rpm -q database-server || database-server --version"}, {"label": "2. UPGRADE to newer than 23.26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade database-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade database-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.3 (Debian / Ubuntu)", "cmd": "apt-cache madison database-server\nsudo apt install database-server=<VERSION_BEFORE_19.3>\nsudo apt-mark hold database-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list database-server\nsudo dnf downgrade database-server-<VERSION_BEFORE_19.3>\nsudo dnf versionlock add database-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71064"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.32581, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73937", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon and  unauthorized read ac", "cvss": 8.2, "sev": "HIGH", "epss": 0.00403, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73937"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33425, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73939", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 8.6, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.20"], "fixed": null, "safe": "before 3.2.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73939"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27927, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76034", "publisher": "Chrome", "title": "Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitra", "summary": "Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00573, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76034"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.46657, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76040", "publisher": "Chrome", "title": "Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leverag", "summary": "Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00533, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76040"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}, {"t": "Vendor Advisory", "u": "https://issues.chromium.org/issues/534862220"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.44222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76045", "publisher": "Chrome", "title": "Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrar", "summary": "Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00523, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76045"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.43541, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70814", "publisher": "Oracle", "title": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Call Center Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 8.1 (Confide", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70814"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32221, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70846", "publisher": "Oracle", "title": "Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations)", "summary": "Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).  Supported versions that are affected are 12.1 and  12.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Planning.  While the vulnerability is in Oracle Demand Planning, attacks may significantly impact additional products (scope change).  Successful attacks of this ", "cvss": 9.6, "sev": "CRITICAL", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "demand planning", "vendor": "oracle", "type": "app", "affected": ["12.1", "12.2"], "fixed": null, "safe": "before 12.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy demand-planning || rpm -q demand-planning || demand-planning --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.1 (Debian / Ubuntu)", "cmd": "apt-cache madison demand-planning\nsudo apt install demand-planning=<VERSION_BEFORE_12.1>\nsudo apt-mark hold demand-planning"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list demand-planning\nsudo dnf downgrade demand-planning-<VERSION_BEFORE_12.1>\nsudo dnf versionlock add demand-planning"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70846"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.28855, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70852", "publisher": "Oracle", "title": "Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations)", "summary": "Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).  Supported versions that are affected are 12.1 and  12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Demand Planning accessib", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "demand planning", "vendor": "oracle", "type": "app", "affected": ["12.1", "12.2"], "fixed": null, "safe": "before 12.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy demand-planning || rpm -q demand-planning || demand-planning --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.1 (Debian / Ubuntu)", "cmd": "apt-cache madison demand-planning\nsudo apt install demand-planning=<VERSION_BEFORE_12.1>\nsudo apt-mark hold demand-planning"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list demand-planning\nsudo dnf downgrade demand-planning-<VERSION_BEFORE_12.1>\nsudo dnf versionlock add demand-planning"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70852"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27736, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70868", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70868"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32218, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70887", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70887"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27737, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70897", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acc", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70897"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27736, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70906", "publisher": "Oracle", "title": "Vulnerability in Oracle Java SE (component: 2D)", "summary": "Vulnerability in Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 25.0.4 and  26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability ca", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70906"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38937, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "openjdk-8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "openjdk-8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "openjdk-8", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "openjdk-lts", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "openjdk-lts", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "openjdk-17", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-21", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "openjdk-25", "status": "fixed", "fixed": "25.0.4.1+1-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade openjdk-25\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' openjdk-25)\" ge \"25.0.4.1+1-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-25-openjdk", "status": "fixed", "fixed": "java-25-openjdk-25.0.4.1.1-1.1.el10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55798\nrpm -q java-25-openjdk", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "java-25-openjdk", "status": "fixed", "fixed": "java-25-openjdk-25.0.4.1.1-1.1.el9", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:55798\nrpm -q java-25-openjdk", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-ibm-semeru-certified-jdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "java-21-openjdk", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "java-1.6.0-openjdk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-2102", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-70906.html", "note": "ALAS2023-2026-2102"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70908", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (", "cvss": 7.5, "sev": "HIGH", "epss": 0.0047, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70908"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3973, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70924", "publisher": "Oracle", "title": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services ", "summary": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Web Services Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Web Services Manager. CVSS 3.1 Base Score 8.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "web services manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy web-services-manager || rpm -q web-services-manager || web-services-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison web-services-manager\nsudo apt install web-services-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold web-services-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list web-services-manager\nsudo dnf downgrade web-services-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add web-services-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70924"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32223, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70927", "publisher": "Oracle", "title": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail", "summary": "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Wor", "cvss": 7.5, "sev": "HIGH", "epss": 0.0047, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "workflow", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy workflow || rpm -q workflow || workflow --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade workflow"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade workflow"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison workflow\nsudo apt install workflow=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold workflow"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list workflow\nsudo dnf downgrade workflow-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add workflow"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70927"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39733, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70993", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in unauthoriz", "cvss": 8.2, "sev": "HIGH", "epss": 0.00379, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70993"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3071, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71035", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Commerce G", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71035"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32224, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71053", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web S", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71053"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32225, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71068", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 8.1 (Confidentiality, Integr", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71068"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32215, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71112", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Securit", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects. CVSS 3.1 Base Score 8.1 (", "cvss": 8.1, "sev": "HIGH", "epss": 0.00392, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "peoplesoft enterprise fin common objects", "vendor": "oracle", "type": "app", "affected": ["9.2"], "fixed": null, "safe": "before 9.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-enterprise-fin-common-objects || rpm -q peoplesoft-enterprise-fin-common-objects || peoplesoft-enterprise-fin-common-objects --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-enterprise-fin-common-objects\nsudo apt install peoplesoft-enterprise-fin-common-objects=<VERSION_BEFORE_9.2>\nsudo apt-mark hold peoplesoft-enterprise-fin-common-objects"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-enterprise-fin-common-objects\nsudo dnf downgrade peoplesoft-enterprise-fin-common-objects-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add peoplesoft-enterprise-fin-common-objects"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71112"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.32215, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71130", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data as well as  unauth", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71130"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27732, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71159", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data as well as  unauthorized update,", "cvss": 8.2, "sev": "HIGH", "epss": 0.00353, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71159"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27732, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73882", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (", "cvss": 7.5, "sev": "HIGH", "epss": 0.0047, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73882"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39734, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-21582", "publisher": "Atlassian", "title": "This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was", "summary": "This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center.\r\n\r\nThis BASM (Broken Authentication & Session Management) vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perform actions as another user.\r\n\t\r\n\tAtlassian recommends that Crowd Data Center customers upgrade to latest version, if you are unable to do so, upgra", "cvss": 8.8, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21582"}], "cwe": ["CWE-287"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3915, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-50191", "publisher": "GitHub, Inc.", "title": "4gaBoards is a boards system for realtime project management", "summary": "4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The POST /api/register endpoint permits creation of an unverified local account with a victim's email address, and POST /api/access-tokens permits that account to authenticate", "cvss": 8.8, "sev": "HIGH", "epss": 0.00473, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-50191"}], "cwe": ["CWE-287", "CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39996, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/RARgames/4gaBoards/security/advisories/GHSA-f3p6-chc6-pc77", "url": "https://github.com/RARgames/4gaBoards/security/advisories/GHSA-f3p6-chc6-pc77"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70813", "publisher": "Oracle", "title": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 8.8 (Confidenti", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70813"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36436, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70818", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70818"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36468, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70819", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70819"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36459, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70821", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70821"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70822", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70822"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34647, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70832", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70832"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70855", "publisher": "Oracle", "title": "Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training)", "summary": "Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Self Service, attack", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00364, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70855"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.29072, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70863", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Av", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70863"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70874", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70874"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36419, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70877", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70877"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70886", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70886"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36412, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70889", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70889"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34658, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70890", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70890"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3466, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70891", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70891"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3466, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70896", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete acce", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70896"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34649, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70899", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managemen", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70899"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70910", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70910"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70918", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub.  Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impac", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "product hub", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy product-hub || rpm -q product-hub || product-hub --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade product-hub"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade product-hub"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison product-hub\nsudo apt install product-hub=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold product-hub"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list product-hub\nsudo dnf downgrade product-hub-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add product-hub"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70918"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36423, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70922", "publisher": "Oracle", "title": "Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services", "summary": "Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web UI).  Supported versions that are affected are 8.0.8.2 and  8.1.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Enterprise Case Management.  Successful attacks of this vulnerability can result in takeover of Oracle Fina", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "financial services enterprise case management", "vendor": "oracle", "type": "app", "affected": ["8.0.8.2", "8.1.2.11"], "fixed": null, "safe": "before 8.0.8.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy financial-services-enterprise-case-management || rpm -q financial-services-enterprise-case-management || financial-services-enterprise-case-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.0.8.2 (Debian / Ubuntu)", "cmd": "apt-cache madison financial-services-enterprise-case-management\nsudo apt install financial-services-enterprise-case-management=<VERSION_BEFORE_8.0.8.2>\nsudo apt-mark hold financial-services-enterprise-case-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list financial-services-enterprise-case-management\nsudo dnf downgrade financial-services-enterprise-case-management-<VERSION_BEFORE_8.0.8.2>\nsudo dnf versionlock add financial-services-enterprise-case-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70922"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36428, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70928", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70928"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36474, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70940", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confide", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70940"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36455, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70944", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confiden", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70944"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70947", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 B", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "purchasing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purchasing || rpm -q purchasing || purchasing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade purchasing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade purchasing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison purchasing\nsudo apt install purchasing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold purchasing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list purchasing\nsudo dnf downgrade purchasing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add purchasing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70947"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3465, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70948", "publisher": "Oracle", "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue)", "summary": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.  Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "purchasing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy purchasing || rpm -q purchasing || purchasing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade purchasing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade purchasing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison purchasing\nsudo apt install purchasing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold purchasing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list purchasing\nsudo dnf downgrade purchasing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add purchasing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70948"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36422, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70949", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70949"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36451, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70951", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management).  Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User.  Successful attacks of this vulnerability can result in takeover of Siebel CRM End User. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70951"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36451, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70956", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technol", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70956"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36421, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70965", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technol", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70965"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36445, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70966", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technol", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70966"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36428, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70985", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70985"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34652, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70986", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70986"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34652, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70987", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthori", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70987"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34652, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71034", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critica", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71034"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34655, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71037", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71037"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.31142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71043", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.5 (Co", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile product lifecycle management", "vendor": "oracle", "type": "app", "affected": ["9.3.6"], "fixed": null, "safe": "before 9.3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-product-lifecycle-management || rpm -q agile-product-lifecycle-management || agile-product-lifecycle-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-product-lifecycle-management\nsudo apt install agile-product-lifecycle-management=<VERSION_BEFORE_9.3.6>\nsudo apt-mark hold agile-product-lifecycle-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-product-lifecycle-management\nsudo dnf downgrade agile-product-lifecycle-management-<VERSION_BEFORE_9.3.6>\nsudo dnf versionlock add agile-product-lifecycle-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71043"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34654, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71052", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web S", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security).   The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Ba", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile engineering data management", "vendor": "oracle", "type": "app", "affected": ["6.2.1.0"], "fixed": null, "safe": "before 6.2.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-engineering-data-management || rpm -q agile-engineering-data-management || agile-engineering-data-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 6.2.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-engineering-data-management\nsudo apt install agile-engineering-data-management=<VERSION_BEFORE_6.2.1.0>\nsudo apt-mark hold agile-engineering-data-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-engineering-data-management\nsudo dnf downgrade agile-engineering-data-management-<VERSION_BEFORE_6.2.1.0>\nsudo dnf versionlock add agile-engineering-data-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71052"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3646, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71055", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise E", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71055"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36407, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71058", "publisher": "Oracle", "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)", "summary": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).  Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and  26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher.  Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "bi publisher", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "12.2.1.4.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-publisher || rpm -q bi-publisher || bi-publisher --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-publisher\nsudo apt install bi-publisher=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold bi-publisher"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-publisher\nsudo dnf downgrade bi-publisher-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add bi-publisher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71058"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71061", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: B", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).  Supported versions that are affected are 8.2.0.0.0 and  26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical da", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71061"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:39:47.061720+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71067", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71067"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36461, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71106", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (", "summary": "Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet).  Supported versions that are affected are 5.6.28.0-5.6.28.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services.  Successful attacks require human interaction from a person other than the attacker. Successful at", "cvss": 8.8, "sev": "HIGH", "epss": 0.00416, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hospitality opera 5 property services", "vendor": "oracle", "type": "app", "affected": ["5.6.28.0", "5.6.28.1"], "fixed": null, "safe": "before 5.6.28.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hospitality-opera-5-property-services || rpm -q hospitality-opera-5-property-services || hospitality-opera-5-property-services --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 5.6.28.0 (Debian / Ubuntu)", "cmd": "apt-cache madison hospitality-opera-5-property-services\nsudo apt install hospitality-opera-5-property-services=<VERSION_BEFORE_5.6.28.0>\nsudo apt-mark hold hospitality-opera-5-property-services"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hospitality-opera-5-property-services\nsudo dnf downgrade hospitality-opera-5-property-services-<VERSION_BEFORE_5.6.28.0>\nsudo dnf versionlock add hospitality-opera-5-property-services"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71106"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3482, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71107", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: A", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).  Supported versions that are affected are 8.2.0.0.0 and  26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data o", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71107"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34638, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71113", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Ba", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71113"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36743, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71142", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (comp", "summary": "Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component).  Supported versions that are affected are 7.5.0-7.5.1, 7.6.0-7.8.0 and  8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management.  Successful attacks of this vulnerability can result in  unauthorized acc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "communications unified inventory management", "vendor": "oracle", "type": "app", "affected": [">= 7.6.0 and <= 7.8.0", "7.5.0", "7.5.1", "8.0.1"], "fixed": "newer than 7.8.0", "safe": "before 7.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy communications-unified-inventory-management || rpm -q communications-unified-inventory-management || communications-unified-inventory-management --version"}, {"label": "2. UPGRADE to newer than 7.8.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade communications-unified-inventory-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade communications-unified-inventory-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison communications-unified-inventory-management\nsudo apt install communications-unified-inventory-management=<VERSION_BEFORE_7.5.0>\nsudo apt-mark hold communications-unified-inventory-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list communications-unified-inventory-management\nsudo dnf downgrade communications-unified-inventory-management-<VERSION_BEFORE_7.5.0>\nsudo dnf versionlock add communications-unified-inventory-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71142"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71150", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confide", "cvss": 8.8, "sev": "HIGH", "epss": 0.00432, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71150"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36437, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71153", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.20"], "fixed": null, "safe": "before 1.4.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71153"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36743, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71158", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confid", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71158"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34661, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73878", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confid", "cvss": 7.5, "sev": "HIGH", "epss": 0.00437, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73878"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36964, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73883", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confid", "cvss": 7.5, "sev": "HIGH", "epss": 0.00437, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73883"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36961, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73884", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confide", "cvss": 7.5, "sev": "HIGH", "epss": 0.00437, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73884"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36963, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73887", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73887"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34645, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73890", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73890"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36746, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73902", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73902"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36745, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73907", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confid", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73907"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73908", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confide", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73908"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.3464, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73915", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (A", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73915"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36745, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73925", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as  unau", "cvss": 8.2, "sev": "HIGH", "epss": 0.00328, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.19"], "fixed": null, "safe": "before 1.4.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73925"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24704, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73927", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.20"], "fixed": null, "safe": "before 3.2.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73927"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36746, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73929", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 8.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73929"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22377, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73931", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 8.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73931"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22374, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73934", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73934"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36745, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73935", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73935"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36744, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73936", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (A", "cvss": 7.5, "sev": "HIGH", "epss": 0.00435, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73936"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36744, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73938", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 7.5 (Confide", "cvss": 7.5, "sev": "HIGH", "epss": 0.00414, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73938"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.34656, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76038", "publisher": "Chrome", "title": "Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary c", "summary": "Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76038"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38201, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/541926503", "url": "https://issues.chromium.org/issues/541926503"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76047", "publisher": "Chrome", "title": "Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary c", "summary": "Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00451, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76047"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.38199, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/541251902", "url": "https://issues.chromium.org/issues/541251902"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71050", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installatio", "summary": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).   The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Product Lifecycle Analytics.  While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may significantly impact additional products (scope c", "cvss": 8.7, "sev": "HIGH", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "product lifecycle analytics", "vendor": "oracle", "type": "app", "affected": ["3.6.1"], "fixed": null, "safe": "before 3.6.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy product-lifecycle-analytics || rpm -q product-lifecycle-analytics || product-lifecycle-analytics --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6.1 (Debian / Ubuntu)", "cmd": "apt-cache madison product-lifecycle-analytics\nsudo apt install product-lifecycle-analytics=<VERSION_BEFORE_3.6.1>\nsudo apt-mark hold product-lifecycle-analytics"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list product-lifecycle-analytics\nsudo dnf downgrade product-lifecycle-analytics-<VERSION_BEFORE_3.6.1>\nsudo dnf versionlock add product-lifecycle-analytics"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71050"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33873, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76043", "publisher": "Chrome", "title": "Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbi", "summary": "Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.00413, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76043"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-682"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.34533, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/539350801", "url": "https://issues.chromium.org/issues/539350801"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71023", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauth", "cvss": 7.5, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71023"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27926, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73879", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data. CVSS 3.1 Base Sc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73879"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27927, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73903", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon accessible data. CVSS 3.1 Base Sc", "cvss": 7.5, "sev": "HIGH", "epss": 0.00354, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73903"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27927, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53958", "publisher": "GitHub, Inc.", "title": "4gaBoards is a boards system for realtime project management", "summary": "4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id. The whitelist in server/api/controllers/users/update.js mass assigns these backend-managed identity attributes from user input. An attacker can place a v", "cvss": 7.6, "sev": "HIGH", "epss": 0.00396, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53958"}], "cwe": ["CWE-287", "CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.32658, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/RARgames/4gaBoards/security/advisories/GHSA-j2fw-r2gj-hfr3", "url": "https://github.com/RARgames/4gaBoards/security/advisories/GHSA-j2fw-r2gj-hfr3"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70823", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or al", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70823"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26245, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70898", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification acc", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70898"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2624, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70903", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerabilit", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70903"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24437, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71000", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the ", "cvss": 8.7, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71000"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24439, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71009", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized cr", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71009"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26238, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71057", "publisher": "Oracle", "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)", "summary": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).  Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and  26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher.  While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change).  Successful atta", "cvss": 8.5, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "bi publisher", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "12.2.1.4.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bi-publisher || rpm -q bi-publisher || bi-publisher --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bi-publisher\nsudo apt install bi-publisher=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold bi-publisher"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bi-publisher\nsudo dnf downgrade bi-publisher-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add bi-publisher"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71057"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30437, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71095", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: B", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification a", "cvss": 8.3, "sev": "HIGH", "epss": 0.00387, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71095"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71143", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (comp", "summary": "Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party).  Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0-7.8.0 and  8.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management.  Successful attacks of this vulnerability can result in  unauthorized creatio", "cvss": 7.4, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "communications unified inventory management", "vendor": "oracle", "type": "app", "affected": [">= 7.6.0 and <= 7.8.0", "7.5.0", "7.5.1", "8.0.1"], "fixed": "newer than 7.8.0", "safe": "before 7.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy communications-unified-inventory-management || rpm -q communications-unified-inventory-management || communications-unified-inventory-management --version"}, {"label": "2. UPGRADE to newer than 7.8.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade communications-unified-inventory-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade communications-unified-inventory-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison communications-unified-inventory-management\nsudo apt install communications-unified-inventory-management=<VERSION_BEFORE_7.5.0>\nsudo apt-mark hold communications-unified-inventory-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list communications-unified-inventory-management\nsudo dnf downgrade communications-unified-inventory-management-<VERSION_BEFORE_7.5.0>\nsudo dnf versionlock add communications-unified-inventory-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71143"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26239, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52875", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes settings.path from a renderer-supplied object and uses the resulting directory for fs.mkdirSync, fs.writeFileSync, fs.readdirSync, and fs.unlinkSync operations without checking that it is inside an authorized backup location. A compromised renderer can choose an absolute pat", "cvss": 8.4, "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52875"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 37, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept", "CISA SSVC: automatable with total technical impact"], "fix": true, "watched": false, "epss_pct": 0.05359, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-c64m-cx97-6rc9", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-c64m-cx97-6rc9"}], "ssvc": {"exploitation": "poc", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70815", "publisher": "Oracle", "title": "Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Inte", "summary": "Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Internet Procurement Connector.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to cri", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "internet procurement connector", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy internet-procurement-connector || rpm -q internet-procurement-connector || internet-procurement-connector --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70815"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28856, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70830", "publisher": "Oracle", "title": "Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Inter", "summary": "Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to criti", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "process manufacturing systems", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy process-manufacturing-systems || rpm -q process-manufacturing-systems || process-manufacturing-systems --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade process-manufacturing-systems"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade process-manufacturing-systems"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison process-manufacturing-systems\nsudo apt install process-manufacturing-systems=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold process-manufacturing-systems"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list process-manufacturing-systems\nsudo dnf downgrade process-manufacturing-systems-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add process-manufacturing-systems"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70830"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28823, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70835", "publisher": "Oracle", "title": "Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle iRecruitmen", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "irecruitment", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy irecruitment || rpm -q irecruitment || irecruitment --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade irecruitment"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade irecruitment"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison irecruitment\nsudo apt install irecruitment=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold irecruitment"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list irecruitment\nsudo dnf downgrade irecruitment-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add irecruitment"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70835"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28832, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70859", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST)", "summary": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration.  While the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can re", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70859"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25553, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70878", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70878"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28854, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70881", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70881"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28824, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70901", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of thi", "cvss": 8.1, "sev": "HIGH", "epss": 0.00383, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70901"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31142, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70904", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management. ", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70904"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30222, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70925", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Ora", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70925"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28851, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:15:04.477408+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70929", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70929"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28852, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70943", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnera", "cvss": 8.1, "sev": "HIGH", "epss": 0.00374, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70943"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-200"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30223, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70957", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification a", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70957"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28845, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70959", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification a", "cvss": 8.1, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70959"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.308, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70990", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / O", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00349, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70990"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.27352, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70999", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized creat", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70999"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28851, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71042", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin)", "summary": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data and", "cvss": 8.1, "sev": "HIGH", "epss": 0.0038, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile product lifecycle management", "vendor": "oracle", "type": "app", "affected": ["9.3.6"], "fixed": null, "safe": "before 9.3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-product-lifecycle-management || rpm -q agile-product-lifecycle-management || agile-product-lifecycle-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-product-lifecycle-management\nsudo apt install agile-product-lifecycle-management=<VERSION_BEFORE_9.3.6>\nsudo apt-mark hold agile-product-lifecycle-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-product-lifecycle-management\nsudo dnf downgrade agile-product-lifecycle-management-<VERSION_BEFORE_9.3.6>\nsudo dnf versionlock add agile-product-lifecycle-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71042"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30801, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71062", "publisher": "Oracle", "title": "Vulnerability in the RDBMS component of Oracle Database Server", "summary": "Vulnerability in the RDBMS component of Oracle Database Server.  Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS.  While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeove", "cvss": 8.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "database server", "vendor": "oracle", "type": "app", "affected": [">= 23.4.0 and <= 23.26.3"], "fixed": "newer than 23.26.3", "safe": "before 23.4.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy database-server || rpm -q database-server || database-server --version"}, {"label": "2. UPGRADE to newer than 23.26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade database-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade database-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 23.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison database-server\nsudo apt install database-server=<VERSION_BEFORE_23.4.0>\nsudo apt-mark hold database-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list database-server\nsudo dnf downgrade database-server-<VERSION_BEFORE_23.4.0>\nsudo dnf versionlock add database-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71062"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25551, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71110", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.18, 3.0.0-3.2.17 and  4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Helidon a", "cvss": 8.1, "sev": "HIGH", "epss": 0.00362, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71110"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.28823, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71122", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).   The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly", "cvss": 8.0, "sev": "HIGH", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["26.01.0.0.0"], "fixed": null, "safe": "before 26.01.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.01.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_26.01.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_26.01.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71122"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30329, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73891", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73891"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22375, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73894", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73894"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22377, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73918", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73918"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22374, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73933", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73933"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22376, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76046", "publisher": "Chrome", "title": "Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who ", "summary": "Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00366, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76046"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.29333, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/536581050", "url": "https://issues.chromium.org/issues/536581050"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "webkit2gtk3", "status": "fixed", "fixed": "webkit2gtk3-2.54.0-1.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:74084\nrpm -q webkit2gtk3", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "webkit2gtk3", "status": "fixed", "fixed": "webkit2gtk3-2.54.0-1.el9_8", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:69098\nrpm -q webkit2gtk3", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "firefox", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 10", "pkg": "thunderbird", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "webkitgtk", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52872", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reached through the run-download IPC channel, accepts a renderer-supplied subtitle url using the file: URI scheme and passes its decoded pathname to fs.copyFileSync. The renderer also controls downloadPath, which determines the destination path. A compromised renderer can therefore cop", "cvss": 8.8, "sev": "HIGH", "epss": 0.00183, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52872"}], "cwe": ["CWE-22", "CWE-73"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.07515, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-v74h-2468-rxhh", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-v74h-2468-rxhh"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70820", "publisher": "Oracle", "title": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Call Center Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 7.2 (Confident", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "complex maintenance repair and overhaul", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy complex-maintenance-repair-and-overhaul || rpm -q complex-maintenance-repair-and-overhaul || complex-maintenance-repair-and-overhaul --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade complex-maintenance-repair-and-overhaul"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade complex-maintenance-repair-and-overhaul"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison complex-maintenance-repair-and-overhaul\nsudo apt install complex-maintenance-repair-and-overhaul=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold complex-maintenance-repair-and-overhaul"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list complex-maintenance-repair-and-overhaul\nsudo dnf downgrade complex-maintenance-repair-and-overhaul-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add complex-maintenance-repair-and-overhaul"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70820"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40907, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70834", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confid", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70834"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40907, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70861", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).   The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Braz", "cvss": 7.2, "sev": "HIGH", "epss": 0.00462, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70861"}], "cwe": ["CWE-284", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.39086, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70939", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confid", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70939"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40899, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70950", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confid", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70950"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40897, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70982", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / O", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70982"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25039, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70983", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / O", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70983"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2504, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71002", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / Oracle Comme", "cvss": 8.5, "sev": "HIGH", "epss": 0.00279, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71002"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19331, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71016", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person oth", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71016"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23462, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71018", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person oth", "cvss": 8.2, "sev": "HIGH", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71018"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23462, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71029", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthor", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": [">= 3.0.0 and <= 3.2.17"], "fixed": "newer than 3.2.17", "safe": "before 3.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. UPGRADE to newer than 3.2.17 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade helidon"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade helidon"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.0.0>\nsudo apt-mark hold helidon"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.0.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71029"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2504, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71030", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71030"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71032", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / ", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71032"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18577, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71049", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installatio", "summary": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).   The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Product Lifecycle Analytics.  While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may significantly impact additional products (scope ch", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "product lifecycle analytics", "vendor": "oracle", "type": "app", "affected": ["3.6.1"], "fixed": null, "safe": "before 3.6.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy product-lifecycle-analytics || rpm -q product-lifecycle-analytics || product-lifecycle-analytics --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6.1 (Debian / Ubuntu)", "cmd": "apt-cache madison product-lifecycle-analytics\nsudo apt install product-lifecycle-analytics=<VERSION_BEFORE_3.6.1>\nsudo apt-mark hold product-lifecycle-analytics"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list product-lifecycle-analytics\nsudo dnf downgrade product-lifecycle-analytics-<VERSION_BEFORE_3.6.1>\nsudo dnf versionlock add product-lifecycle-analytics"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71049"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21554, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71079", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0037, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "mysql connector\\/odbc", "vendor": "oracle", "type": "app", "affected": ["26.7.0"], "fixed": null, "safe": "before 26.7.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mysql-connectorodbc || rpm -q mysql-connectorodbc || mysql-connectorodbc --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mysql-connectorodbc\nsudo apt install mysql-connectorodbc=<VERSION_BEFORE_26.7.0>\nsudo apt-mark hold mysql-connectorodbc"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mysql-connectorodbc\nsudo dnf downgrade mysql-connectorodbc-<VERSION_BEFORE_26.7.0>\nsudo dnf versionlock add mysql-connectorodbc"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71079"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.29728, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 6", "pkg": "mysql-connector-odbc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "mysql-connector-odbc", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71099", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: A", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers).   The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterp", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["26.01.0.0.0"], "fixed": null, "safe": "before 26.01.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.01.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_26.01.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_26.01.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71099"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40904, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71104", "publisher": "Oracle", "title": "Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payr", "summary": "Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (Netherlands).  Successful attacks of this vulnerability can result in takeover of Oracle HRMS (Netherlands). CVSS 3.1 Base Score 7.2 (Confidentiality, Inte", "cvss": 7.2, "sev": "HIGH", "epss": 0.00486, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "human resources management system", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy human-resources-management-system || rpm -q human-resources-management-system || human-resources-management-system --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade human-resources-management-system"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade human-resources-management-system"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison human-resources-management-system\nsudo apt install human-resources-management-system=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold human-resources-management-system"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list human-resources-management-system\nsudo dnf downgrade human-resources-management-system-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add human-resources-management-system"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71104"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.40906, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71155", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 8.5, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71155"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21559, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73875", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73875"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18579, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73876", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73876"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18579, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:20:48.622539+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73885", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthoriz", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73885"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73886", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73886"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73896", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data and unauthorized ability to cause a partial denial of ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00361, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73896"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28726, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73914", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data and unauthorized ability to cause a partial denial of se", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00361, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73914"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.28727, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73928", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorize", "cvss": 7.2, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73928"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18575, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76044", "publisher": "Chrome", "title": "Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised t", "summary": "Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.3, "sev": "HIGH", "epss": 0.00323, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76044"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-367"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24099, "pinned": false, "pocs": [{"kind": "writeup", "name": "issues.chromium.org/issues/522732244", "url": "https://issues.chromium.org/issues/522732244"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "151.0.7922.169-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"151.0.7922.169-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70827", "publisher": "Oracle", "title": "Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Inter", "summary": "Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing.  While the vulnerability is in Oracle MES for Process Manufacturing, attacks may significantly impact additional product", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "mes for process manufacturing", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mes-for-process-manufacturing || rpm -q mes-for-process-manufacturing || mes-for-process-manufacturing --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade mes-for-process-manufacturing"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade mes-for-process-manufacturing"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison mes-for-process-manufacturing\nsudo apt install mes-for-process-manufacturing=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold mes-for-process-manufacturing"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mes-for-process-manufacturing\nsudo dnf downgrade mes-for-process-manufacturing-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add mes-for-process-manufacturing"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70827"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27679, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70828", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70828"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2768, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70892", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70892"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2038, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70893", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact ", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70893"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2038, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70942", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). ", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70942"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27676, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70945", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll.  While the vulnerability is in Oracle Payroll, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can re", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "payroll", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payroll || rpm -q payroll || payroll --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payroll"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payroll"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payroll\nsudo apt install payroll=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payroll"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payroll\nsudo dnf downgrade payroll-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payroll"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70945"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27676, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70964", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impa", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70964"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20383, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70988", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / Orac", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70988"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27678, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71017", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unau", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00342, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71017"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26535, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71056", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: B", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).  Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and  26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may", "cvss": 7.7, "sev": "HIGH", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "12.2.1.4.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71056"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.27685, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71096", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: B", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).  Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and  26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  While the vulnerability is in Oracle Business Intelligence Enterprise Edition", "cvss": 8.2, "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["8.2.0.0.0", "12.2.1.4.0", "26.01.0.0.0"], "fixed": null, "safe": "before 8.2.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 8.2.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_8.2.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_8.2.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71096"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2038, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71121", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financia", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71121"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26178, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-21584", "publisher": "Atlassian", "title": "This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.", "summary": "This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. \n\t\n\tThis Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead to the exposure of resources or functionality, possibly providing attackers with sensitive information or even execute arbitrary code. \n\t\n\tAtlassian", "cvss": 8.1, "sev": "HIGH", "epss": 0.00309, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "bamboo", "vendor": "atlassian", "type": "app", "affected": [">= 10.0.0 and < 10.2.22", ">= 11.0.0 and < 12.1.10"], "fixed": "10.2.22, 12.1.10", "safe": "before 10.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bamboo || rpm -q bamboo || bamboo --version"}, {"label": "2. UPGRADE to 10.2.22 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bamboo"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bamboo"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bamboo\nsudo apt install bamboo=<VERSION_BEFORE_10.0.0>\nsudo apt-mark hold bamboo"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bamboo\nsudo dnf downgrade bamboo-<VERSION_BEFORE_10.0.0>\nsudo dnf versionlock add bamboo"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21584"}, {"t": "Vendor Advisory", "u": "https://confluence.atlassian.com/pages/viewpage.action?pageId=1821999768"}, {"t": "Issue Tracking, Vendor Advisory", "u": "https://jira.atlassian.com/browse/BAM-26468"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22552, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52873", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the Content-Security-Policy header from every response in that session. The redeem window also lacks a setWindowOpenHandler restriction, so script injection in sub.wyzie", "cvss": 6.9, "sev": "MEDIUM", "epss": 0.00359, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52873"}], "cwe": ["CWE-79", "CWE-693"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["CISA SSVC: public proof of concept"], "fix": true, "watched": false, "epss_pct": 0.28435, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-2j2q-qvpf-wh43", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-2j2q-qvpf-wh43"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70829", "publisher": "Oracle", "title": "Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Inter", "summary": "Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems.  Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Systems. CVSS 3.1 Bas", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "process manufacturing systems", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy process-manufacturing-systems || rpm -q process-manufacturing-systems || process-manufacturing-systems --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade process-manufacturing-systems"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade process-manufacturing-systems"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison process-manufacturing-systems\nsudo apt install process-manufacturing-systems=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold process-manufacturing-systems"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list process-manufacturing-systems\nsudo dnf downgrade process-manufacturing-systems-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add process-manufacturing-systems"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70829"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25549, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70849", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00473, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70849"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39952, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70865", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70865"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25559, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70875", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Managem", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70875"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70930", "publisher": "Oracle", "title": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic", "summary": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management.  Successful attacks of this vulnerability can result in takeover of Oracle Order Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Inte", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "order management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy order-management || rpm -q order-management || order-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade order-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade order-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison order-management\nsudo apt install order-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold order-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list order-management\nsudo dnf downgrade order-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add order-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70930"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25561, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70937", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70937"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2556, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70946", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70946"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25554, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70973", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Techn", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70973"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71048", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installatio", "summary": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).   The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Product ", "cvss": 7.6, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "product lifecycle analytics", "vendor": "oracle", "type": "app", "affected": ["3.6.1"], "fixed": null, "safe": "before 3.6.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy product-lifecycle-analytics || rpm -q product-lifecycle-analytics || product-lifecycle-analytics --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6.1 (Debian / Ubuntu)", "cmd": "apt-cache madison product-lifecycle-analytics\nsudo apt install product-lifecycle-analytics=<VERSION_BEFORE_3.6.1>\nsudo apt-mark hold product-lifecycle-analytics"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list product-lifecycle-analytics\nsudo dnf downgrade product-lifecycle-analytics-<VERSION_BEFORE_3.6.1>\nsudo dnf versionlock add product-lifecycle-analytics"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71048"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.23852, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71069", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 7.5 (Confidentiality, Integri", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71069"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25559, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71160", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.18 and  3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71160"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25561, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71162", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data as well as  unauthorized updat", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71162"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19646, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-52876", "publisher": "GitHub, Inc.", "title": "Streambert is a cross-platform Electron Desktop App to stream and download video content", "summary": "Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or fail, the handler passes filePath to Electron's shell.openPath. A compromised renderer can provide the path of a local executable, script, shortcut, or ", "cvss": 8.8, "sev": "HIGH", "epss": 0.002, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-52876"}], "cwe": ["CWE-20", "CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.09268, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/truelockmc/streambert/security/advisories/GHSA-85vf-2qwc-qpm4", "url": "https://github.com/truelockmc/streambert/security/advisories/GHSA-85vf-2qwc-qpm4"}], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70856", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration)", "summary": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deplo", "cvss": 7.5, "sev": "HIGH", "epss": 0.00329, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70856"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24753, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70934", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70934"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70935", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70935"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30438, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70941", "publisher": "Oracle", "title": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll.  While the vulnerability is in Oracle Payroll, attacks may significantly impact additional products (scope change).  Successful at", "cvss": 8.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "payroll", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy payroll || rpm -q payroll || payroll --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade payroll"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade payroll"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison payroll\nsudo apt install payroll=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold payroll"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list payroll\nsudo dnf downgrade payroll-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add payroll"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70941"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04902, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70955", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framew", "summary": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Commerce Platform executes to compromise Oracle Commerce Platform.  Successful attacks of this vulnerability can result in ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce platform", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-platform || rpm -q commerce-platform || commerce-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-platform\nsudo apt install commerce-platform=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-platform\nsudo dnf downgrade commerce-platform-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70955"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24977, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71003", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized acces", "cvss": 7.1, "sev": "HIGH", "epss": 0.00376, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71003"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.30439, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71007", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / Oracle Comm", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71007"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.32653, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71008", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  While the vulnerability is in Oracle Commerce Guided Search / Oracle Comm", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71008"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.32654, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71051", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installatio", "summary": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).   The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes to compromise Oracle Product Lifecycle Analytics.  While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may si", "cvss": 8.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "product lifecycle analytics", "vendor": "oracle", "type": "app", "affected": ["3.6.1"], "fixed": null, "safe": "before 3.6.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy product-lifecycle-analytics || rpm -q product-lifecycle-analytics || product-lifecycle-analytics --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6.1 (Debian / Ubuntu)", "cmd": "apt-cache madison product-lifecycle-analytics\nsudo apt install product-lifecycle-analytics=<VERSION_BEFORE_3.6.1>\nsudo apt-mark hold product-lifecycle-analytics"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list product-lifecycle-analytics\nsudo dnf downgrade product-lifecycle-analytics-<VERSION_BEFORE_3.6.1>\nsudo dnf versionlock add product-lifecycle-analytics"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71051"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04909, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71131", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM Virtua", "cvss": 8.6, "sev": "HIGH", "epss": 0.00182, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71131"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07442, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71161", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availabilit", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00389, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71161"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31886, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73867", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73867"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18577, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73868", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73868"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18577, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73892", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73892"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73893", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73893"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18579, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73897", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73897"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73904", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00272, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73904"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.18576, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73909", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 5.9 (Conf", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73909"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25039, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-73932", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00389, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.3"], "fixed": null, "safe": "before 4.5.3", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.3 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.3>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.3>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73932"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31886, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70840", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may s", "cvss": 8.4, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70840"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04644, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70842", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may s", "cvss": 8.4, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70842"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.04643, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70845", "publisher": "Oracle", "title": "Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Loans accessible data and", "cvss": 7.1, "sev": "HIGH", "epss": 0.0034, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "loans", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy loans || rpm -q loans || loans --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70845"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.26288, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70857", "publisher": "Oracle", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)", "summary": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).  Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Siebel CRM End User.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel CRM End User, attacks may significantly impact ad", "cvss": 7.7, "sev": "HIGH", "epss": 0.0026, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "siebel crm", "vendor": "oracle", "type": "app", "affected": [">= 17.0 and <= 26.6"], "fixed": "newer than 26.6", "safe": "before 17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siebel-crm || rpm -q siebel-crm || siebel-crm --version"}, {"label": "2. UPGRADE to newer than 26.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siebel-crm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siebel-crm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison siebel-crm\nsudo apt install siebel-crm=<VERSION_BEFORE_17.0>\nsudo apt-mark hold siebel-crm"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siebel-crm\nsudo dnf downgrade siebel-crm-<VERSION_BEFORE_17.0>\nsudo dnf versionlock add siebel-crm"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70857"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.16816, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70864", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Testing Suite, attacks m", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70864"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18198, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70867", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete", "cvss": 7.1, "sev": "HIGH", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70867"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25584, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70888", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Manage", "cvss": 6.6, "sev": "MEDIUM", "epss": 0.00375, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70888"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.30331, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70960", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Fina", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70960"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.182, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71020", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person othe", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71020"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18202, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71021", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person othe", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71021"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18199, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71022", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the attacker ", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71022"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18201, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71027", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person othe", "cvss": 7.6, "sev": "HIGH", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71027"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18201, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71091", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Or", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00407, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71091"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.33876, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71129", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 8.2, "sev": "HIGH", "epss": 0.00181, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71129"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.07272, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70816", "publisher": "Oracle", "title": "Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operat", "summary": "Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for EMEA.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Financials fo", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "financials for emea", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy financials-for-emea || rpm -q financials-for-emea || financials-for-emea --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade financials-for-emea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade financials-for-emea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison financials-for-emea\nsudo apt install financials-for-emea=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold financials-for-emea"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list financials-for-emea\nsudo dnf downgrade financials-for-emea-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add financials-for-emea"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70816"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21558, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70824", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70824"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2769, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70825", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70825"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2769, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70826", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70826"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27681, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70831", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70831"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2768, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70833", "publisher": "Oracle", "title": "Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Ope", "summary": "Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed Cost Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Landed ", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "landed cost management", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy landed-cost-management || rpm -q landed-cost-management || landed-cost-management --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade landed-cost-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade landed-cost-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison landed-cost-management\nsudo apt install landed-cost-management=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold landed-cost-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list landed-cost-management\nsudo dnf downgrade landed-cost-management-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add landed-cost-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70833"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70837", "publisher": "Oracle", "title": "Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Interna", "summary": "Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for Asia/Pacific.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00279, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "e-business suite", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy e-business-suite || rpm -q e-business-suite || e-business-suite --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade e-business-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade e-business-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison e-business-suite\nsudo apt install e-business-suite=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold e-business-suite"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list e-business-suite\nsudo dnf downgrade e-business-suite-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add e-business-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70837"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19332, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70839", "publisher": "Oracle", "title": "Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operat", "summary": "Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for EMEA.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Financials fo", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "financials for emea", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy financials-for-emea || rpm -q financials-for-emea || financials-for-emea --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade financials-for-emea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade financials-for-emea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison financials-for-emea\nsudo apt install financials-for-emea=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold financials-for-emea"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list financials-for-emea\nsudo dnf downgrade financials-for-emea-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add financials-for-emea"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70839"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21554, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70844", "publisher": "Oracle", "title": "Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Loans accessible data as well as  unautho", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "loans", "vendor": "oracle", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy loans || rpm -q loans || loans --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70844"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21557, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70911", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Management acc", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00337, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70911"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25913, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70938", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70938"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27675, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70968", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70968"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27675, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70969", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70969"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.27683, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70971", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete ", "cvss": 7.1, "sev": "HIGH", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70971"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21555, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:09:02.300915+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70975", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Fi", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70975"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27675, "pinned": false}, {"id": "CVE-2026-71001", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks of this vulnerability can result in  unauthorized acces", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71001"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27682, "pinned": false}, {"id": "CVE-2026-71070", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00352, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71070"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.27674, "pinned": false}, {"id": "CVE-2026-71084", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MyS", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00169, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "mysql connector\\/odbc", "vendor": "oracle", "type": "app", "affected": ["26.7.0"], "fixed": null, "safe": "before 26.7.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mysql-connectorodbc || rpm -q mysql-connectorodbc || mysql-connectorodbc --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mysql-connectorodbc\nsudo apt install mysql-connectorodbc=<VERSION_BEFORE_26.7.0>\nsudo apt-mark hold mysql-connectorodbc"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mysql-connectorodbc\nsudo dnf downgrade mysql-connectorodbc-<VERSION_BEFORE_26.7.0>\nsudo dnf versionlock add mysql-connectorodbc"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71084"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.06, "pinned": false}, {"id": "CVE-2026-71087", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00337, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71087"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25913, "pinned": false}, {"id": "CVE-2026-76037", "publisher": "Chrome", "title": "Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local at", "summary": "Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)", "cvss": 8.4, "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76037"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.03491, "pinned": false}, {"id": "CVE-2026-70843", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulne", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00303, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70843"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21856, "pinned": false}, {"id": "CVE-2026-70866", "publisher": "Oracle", "title": "Vulnerability in Oracle Application Testing Suite", "summary": "Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "application testing suite", "vendor": "oracle", "type": "app", "affected": ["13.3.0.1"], "fixed": null, "safe": "before 13.3.0.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy application-testing-suite || rpm -q application-testing-suite || application-testing-suite --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 13.3.0.1 (Debian / Ubuntu)", "cmd": "apt-cache madison application-testing-suite\nsudo apt install application-testing-suite=<VERSION_BEFORE_13.3.0.1>\nsudo apt-mark hold application-testing-suite"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list application-testing-suite\nsudo dnf downgrade application-testing-suite-<VERSION_BEFORE_13.3.0.1>\nsudo dnf versionlock add application-testing-suite"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70866"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04907, "pinned": false}, {"id": "CVE-2026-70972", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70972"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20384, "pinned": false}, {"id": "CVE-2026-71028", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerc", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71028"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04908, "pinned": false}, {"id": "CVE-2026-71076", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71076"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23712, "pinned": false}, {"id": "CVE-2026-71097", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).   The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["26.01.0.0.0"], "fixed": null, "safe": "before 26.01.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.01.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_26.01.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_26.01.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71097"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04901, "pinned": false}, {"id": "CVE-2026-71100", "publisher": "Oracle", "title": "Vulnerability in the RDBMS component of Oracle Database Server", "summary": "Vulnerability in the RDBMS component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32, 21.3-21.23 and  23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Ve", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "database server", "vendor": "oracle", "type": "app", "affected": [">= 19.3 and <= 19.32", ">= 21.3 and <= 21.23", ">= 23.4.0 and <= 23.26.3"], "fixed": "newer than 23.26.3", "safe": "before 19.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy database-server || rpm -q database-server || database-server --version"}, {"label": "2. UPGRADE to newer than 23.26.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade database-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade database-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 19.3 (Debian / Ubuntu)", "cmd": "apt-cache madison database-server\nsudo apt install database-server=<VERSION_BEFORE_19.3>\nsudo apt-mark hold database-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list database-server\nsudo dnf downgrade database-server-<VERSION_BEFORE_19.3>\nsudo dnf versionlock add database-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71100"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23718, "pinned": false}, {"id": "CVE-2026-71101", "publisher": "Oracle", "title": "Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues)", "summary": "Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle HRMS (US).  Successful attacks of this vulnerability can result in takeover of Oracle HRMS (US). CVSS 3.1 Base Score 7.8 (Confidentia", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "human resources management system", "vendor": "oracle", "type": "app", "affected": [">= 12.2.3 and <= 12.2.15"], "fixed": "newer than 12.2.15", "safe": "before 12.2.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy human-resources-management-system || rpm -q human-resources-management-system || human-resources-management-system --version"}, {"label": "2. UPGRADE to newer than 12.2.15 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade human-resources-management-system"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade human-resources-management-system"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.2.3 (Debian / Ubuntu)", "cmd": "apt-cache madison human-resources-management-system\nsudo apt install human-resources-management-system=<VERSION_BEFORE_12.2.3>\nsudo apt-mark hold human-resources-management-system"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list human-resources-management-system\nsudo dnf downgrade human-resources-management-system-<VERSION_BEFORE_12.2.3>\nsudo dnf versionlock add human-resources-management-system"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71101"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.0491, "pinned": false}, {"id": "CVE-2026-71111", "publisher": "Oracle", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer)", "summary": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager executes to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00161, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "identity manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-manager || rpm -q identity-manager || identity-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-manager\nsudo apt install identity-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold identity-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-manager\nsudo dnf downgrade identity-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add identity-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71111"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0491, "pinned": false}, {"id": "CVE-2026-71148", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Management acc", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71148"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23714, "pinned": false}, {"id": "CVE-2026-71156", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Integrity imp", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.003, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71156"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21619, "pinned": false}, {"id": "CVE-2026-71157", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17 and  4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidential", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71157"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23713, "pinned": false}, {"id": "CVE-2026-73871", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CV", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73871"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23714, "pinned": false}, {"id": "CVE-2026-73872", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73872"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23715, "pinned": false}, {"id": "CVE-2026-73877", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CV", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73877"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23716, "pinned": false}, {"id": "CVE-2026-73888", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73888"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23715, "pinned": false}, {"id": "CVE-2026-73889", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73889"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23713, "pinned": false}, {"id": "CVE-2026-73895", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CV", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73895"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23715, "pinned": false}, {"id": "CVE-2026-73899", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CV", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73899"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23714, "pinned": false}, {"id": "CVE-2026-73900", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73900"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23717, "pinned": false}, {"id": "CVE-2026-73906", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73906"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23717, "pinned": false}, {"id": "CVE-2026-73910", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVS", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00319, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73910"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.23717, "pinned": false}, {"id": "CVE-2026-76039", "publisher": "Chrome", "title": "Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote", "summary": "Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00324, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76039"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}, {"t": "Vendor Advisory", "u": "https://issues.chromium.org/issues/525167753"}], "cwe": ["CWE-706"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.24252, "pinned": false}, {"id": "CVE-2026-70858", "publisher": "Oracle", "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)", "summary": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter ", "cvss": 7.1, "sev": "HIGH", "epss": 0.00241, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "webcenter content", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy webcenter-content || rpm -q webcenter-content || webcenter-content --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison webcenter-content\nsudo apt install webcenter-content=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold webcenter-content"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list webcenter-content\nsudo dnf downgrade webcenter-content-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add webcenter-content"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70858"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.14378, "pinned": false}, {"id": "CVE-2026-70879", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperio", "cvss": 7.8, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70879"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02376, "pinned": false}, {"id": "CVE-2026-70894", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can ", "cvss": 7.7, "sev": "HIGH", "epss": 0.0016, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70894"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04859, "pinned": false}, {"id": "CVE-2026-70907", "publisher": "Oracle", "title": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac", "summary": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00278, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70907"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1919, "pinned": false, "mentions": [{"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3878 (medium): java-17-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3878.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3879 (medium): java-11-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3879.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2-2026-3888 (medium): java-1.8.0-openjdk", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3888.html", "date": "2026-08-31"}, {"src": "Amazon Linux 2 ALAS", "group": "distro", "title": "ALAS2CORRETTO8-2026-025 (medium): java-1.8.0-amazon-corretto", "url": "https://alas.aws.amazon.com/AL2/ALAS2CORRETTO8-2026-025.html", "date": "2026-08-31"}], "buzz": 1}, {"id": "CVE-2026-71126", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful", "cvss": 7.8, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71126"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02377, "pinned": false}, {"id": "CVE-2026-71141", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM Virtua", "cvss": 7.7, "sev": "HIGH", "epss": 0.00165, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71141"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.05415, "pinned": false}, {"id": "CVE-2026-47699", "publisher": "GitHub, Inc.", "title": "Confidential Containers Guest Components provides guest tools and components for confidential container worklo", "summary": "Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make image_rs::stream::unpack::unpack() create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs, try_hardlink_fallback() validates the hardlink source but computes the destination with destination.join(&entry_rel). Rust Path::join replaces the base ", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.0029, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-47699"}], "cwe": ["CWE-22", "CWE-59"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20464, "pinned": false}, {"id": "CVE-2026-71092", "publisher": "Oracle", "title": "Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: L", "summary": "Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease Administration).   The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Lease Administration executes to compromise PeopleSoft Enterprise FIN Lease Administration.  While the vulnerability is in PeopleSoft Ente", "cvss": 7.5, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "peoplesoft lease administration", "vendor": "oracle", "type": "app", "affected": ["9.2"], "fixed": null, "safe": "before 9.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy peoplesoft-lease-administration || rpm -q peoplesoft-lease-administration || peoplesoft-lease-administration --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 9.2 (Debian / Ubuntu)", "cmd": "apt-cache madison peoplesoft-lease-administration\nsudo apt install peoplesoft-lease-administration=<VERSION_BEFORE_9.2>\nsudo apt-mark hold peoplesoft-lease-administration"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list peoplesoft-lease-administration\nsudo dnf downgrade peoplesoft-lease-administration-<VERSION_BEFORE_9.2>\nsudo dnf versionlock add peoplesoft-lease-administration"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71092"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0224, "pinned": false}, {"id": "CVE-2026-71094", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human inte", "cvss": 7.3, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71094"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04311, "pinned": false}, {"id": "CVE-2026-71116", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successfu", "cvss": 7.5, "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71116"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0353, "pinned": false}, {"id": "CVE-2026-71117", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks ma", "cvss": 7.5, "sev": "HIGH", "epss": 0.00146, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71117"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0353, "pinned": false}, {"id": "CVE-2026-71136", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00158, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71136"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04609, "pinned": false}, {"id": "CVE-2026-71138", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 7.3, "sev": "HIGH", "epss": 0.00158, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71138"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04609, "pinned": false}, {"id": "CVE-2026-70902", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management.  Successful attacks of this vulnerability can r", "cvss": 7.1, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70902"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04641, "pinned": false}, {"id": "CVE-2026-70936", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized creation, de", "cvss": 7.1, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70936"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04641, "pinned": false}, {"id": "CVE-2026-70967", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 7.1, "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70967"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04643, "pinned": false}, {"id": "CVE-2026-71073", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unaut", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "mysql connector\\/odbc", "vendor": "oracle", "type": "app", "affected": ["26.7.0"], "fixed": null, "safe": "before 26.7.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy mysql-connectorodbc || rpm -q mysql-connectorodbc || mysql-connectorodbc --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison mysql-connectorodbc\nsudo apt install mysql-connectorodbc=<VERSION_BEFORE_26.7.0>\nsudo apt-mark hold mysql-connectorodbc"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list mysql-connectorodbc\nsudo dnf downgrade mysql-connectorodbc-<VERSION_BEFORE_26.7.0>\nsudo dnf versionlock add mysql-connectorodbc"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71073"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-404"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.05166, "pinned": false}, {"id": "CVE-2026-71090", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DO", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71090"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13132, "pinned": false}, {"id": "CVE-2026-71103", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financial", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00262, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71103"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17028, "pinned": false}, {"id": "CVE-2026-15316", "publisher": "TPLink", "title": "An improper input\nvalidation vulnerability in the configuration service for processing encrypted\ncredential da", "summary": "An improper input\nvalidation vulnerability in the configuration service for processing encrypted\ncredential data has been identified in Tapo C200 v5.\u00a0 An attacker can send oversized crypted\nciphertext values that may trigger exception handling failures, due to insufficient\nvalidation, causing the affected device to crash or restart.\n\n\n\n\n\nSuccessful\nexploitation may temporarily disrupt HTTPS management and monitoring\nfunctionality, resulting in a ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00239, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "tapo c200 firmware", "vendor": "tp-link", "type": "os", "affected": ["< 1.4.6"], "fixed": "1.4.6", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-15316"}, {"t": "Vendor Advisory", "u": "https://www.tp-link.com/us/support/faq/5248/"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.14163, "pinned": false}, {"id": "CVE-2026-70914", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the atta", "cvss": 7.0, "sev": "HIGH", "epss": 0.00148, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70914"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03646, "pinned": false}, {"id": "CVE-2026-70923", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional produ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.19"], "fixed": null, "safe": "before 3.2.19", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.19 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.19>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.19>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70923"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-285"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14852, "pinned": false}, {"id": "CVE-2026-70961", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks require human interaction from a person other than the attacker and while the vulnera", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70961"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14852, "pinned": false}, {"id": "CVE-2026-70992", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70992"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02377, "pinned": false}, {"id": "CVE-2026-71004", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71004"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14849, "pinned": false}, {"id": "CVE-2026-71005", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71005"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14849, "pinned": false}, {"id": "CVE-2026-71006", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than the", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71006"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1485, "pinned": false}, {"id": "CVE-2026-71019", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person other than th", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71019"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14848, "pinned": false}, {"id": "CVE-2026-71025", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person oth", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71025"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14849, "pinned": false}, {"id": "CVE-2026-71031", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.  Successful attacks require human interaction from a person oth", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71031"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14849, "pinned": false}, {"id": "CVE-2026-71075", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.0027, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71075"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18193, "pinned": false}, {"id": "CVE-2026-71085", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion F", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.00396, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71085"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.32654, "pinned": false}, {"id": "CVE-2026-71098", "publisher": "Oracle", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: P", "summary": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).   The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerabili", "cvss": 7.0, "sev": "HIGH", "epss": 0.0013, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "business intelligence", "vendor": "oracle", "type": "app", "affected": ["26.01.0.0.0"], "fixed": null, "safe": "before 26.01.0.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy business-intelligence || rpm -q business-intelligence || business-intelligence --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 26.01.0.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison business-intelligence\nsudo apt install business-intelligence=<VERSION_BEFORE_26.01.0.0.0>\nsudo apt-mark hold business-intelligence"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list business-intelligence\nsudo dnf downgrade business-intelligence-<VERSION_BEFORE_26.01.0.0.0>\nsudo dnf versionlock add business-intelligence"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71098"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02377, "pinned": false}, {"id": "CVE-2026-71109", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hyperi", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00181, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71109"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07272, "pinned": false}, {"id": "CVE-2026-71118", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hyperion Financ", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00222, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71118"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1211, "pinned": false}, {"id": "CVE-2026-73869", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional produ", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73869"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1485, "pinned": false}, {"id": "CVE-2026-73870", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional produc", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73870"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1485, "pinned": false}, {"id": "CVE-2026-73898", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional produc", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00245, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73898"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14851, "pinned": false}, {"id": "CVE-2026-73901", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access t", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00222, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73901"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12109, "pinned": false}, {"id": "CVE-2026-70847", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may s", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70847"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04227, "pinned": false}, {"id": "CVE-2026-70895", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Acces", "summary": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management.  While the vulnerability is in Oracle Hyperion ", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion data relationship management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-data-relationship-management || rpm -q hyperion-data-relationship-management || hyperion-data-relationship-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-data-relationship-management\nsudo apt install hyperion-data-relationship-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-data-relationship-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-data-relationship-management\nsudo dnf downgrade hyperion-data-relationship-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-data-relationship-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70895"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04231, "pinned": false}, {"id": "CVE-2026-70989", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce E", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70989"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0423, "pinned": false}, {"id": "CVE-2026-70991", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce ", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00173, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70991"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06456, "pinned": false}, {"id": "CVE-2026-71120", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DO", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00295, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71120"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21004, "pinned": false}, {"id": "CVE-2026-70974", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70974"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19615, "pinned": false}, {"id": "CVE-2026-71077", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00276, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71077"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19038, "pinned": false}, {"id": "CVE-2026-71108", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00282, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71108"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19614, "pinned": false}, {"id": "CVE-2026-71114", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71114"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0651, "pinned": false}, {"id": "CVE-2026-71115", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71115"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06511, "pinned": false}, {"id": "CVE-2026-71119", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in takeover of Oracle Hype", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00146, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71119"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0353, "pinned": false}, {"id": "CVE-2026-70838", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to cr", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00151, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70838"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03924, "pinned": false}, {"id": "CVE-2026-70848", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Management a", "cvss": 3.7, "sev": "LOW", "epss": 0.00261, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70848"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16865, "pinned": false}, {"id": "CVE-2026-71125", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can resu", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00127, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71125"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-363"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02165, "pinned": false}, {"id": "CVE-2026-71127", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71127"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04457, "pinned": false}, {"id": "CVE-2026-71128", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71128"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0548, "pinned": false}, {"id": "CVE-2026-71135", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71135"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04457, "pinned": false}, {"id": "CVE-2026-71137", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00157, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71137"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04456, "pinned": false}, {"id": "CVE-2026-71154", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data as well", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00151, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71154"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03923, "pinned": false}, {"id": "CVE-2026-71165", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71165"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13241, "pinned": false}, {"id": "CVE-2026-73874", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to a", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73874"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13245, "pinned": false}, {"id": "CVE-2026-73881", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to a", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73881"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13245, "pinned": false}, {"id": "CVE-2026-73911", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to a", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73911"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1324, "pinned": false}, {"id": "CVE-2026-73913", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to a", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.0"], "fixed": null, "safe": "before 4.5.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73913"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13239, "pinned": false}, {"id": "CVE-2026-73919", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access to ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00231, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73919"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13246, "pinned": false}, {"id": "CVE-2026-73923", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 1.0.0-1.4.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Integrity i", "cvss": 3.7, "sev": "LOW", "epss": 0.00248, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["1.4.20"], "fixed": null, "safe": "before 1.4.20", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.4.20 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_1.4.20>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_1.4.20>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73923"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15158, "pinned": false}, {"id": "CVE-2026-71060", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00317, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71060"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23392, "pinned": false}, {"id": "CVE-2026-71088", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthori", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00253, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71088"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15947, "pinned": false}, {"id": "CVE-2026-71124", "publisher": "Oracle", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engin", "summary": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Access Manager.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00331, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "access manager", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.2.1.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy access-manager || rpm -q access-manager || access-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison access-manager\nsudo apt install access-manager=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold access-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list access-manager\nsudo dnf downgrade access-manager-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add access-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71124"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.25091, "pinned": false}, {"id": "CVE-2026-71134", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful ", "cvss": 5.7, "sev": "MEDIUM", "epss": 0.00155, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71134"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04335, "pinned": false}, {"id": "CVE-2026-76041", "publisher": "Chrome", "title": "Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially byp", "summary": "Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00334, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76041"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.2553, "pinned": false}, {"id": "CVE-2026-70836", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized access to cr", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70836"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04232, "pinned": false}, {"id": "CVE-2026-70841", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  While the vulnerability is in Oracle Hyperion Financial Management, attacks may", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70841"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02011, "pinned": false}, {"id": "CVE-2026-71033", "publisher": "Oracle", "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm", "summary": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).   The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerc", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00154, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "commerce experience manager", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-experience-manager || rpm -q commerce-experience-manager || commerce-experience-manager --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-experience-manager\nsudo apt install commerce-experience-manager=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-experience-manager"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-experience-manager\nsudo dnf downgrade commerce-experience-manager-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-experience-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "commerce guided search", "vendor": "oracle", "type": "app", "affected": ["11.4.0"], "fixed": null, "safe": "before 11.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-guided-search || rpm -q commerce-guided-search || commerce-guided-search --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison commerce-guided-search\nsudo apt install commerce-guided-search=<VERSION_BEFORE_11.4.0>\nsudo apt-mark hold commerce-guided-search"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list commerce-guided-search\nsudo dnf downgrade commerce-guided-search-<VERSION_BEFORE_11.4.0>\nsudo dnf versionlock add commerce-guided-search"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71033"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04228, "pinned": false}, {"id": "CVE-2026-71071", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71071"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "A", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15571, "pinned": false}, {"id": "CVE-2026-71123", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71123"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02572, "pinned": false}, {"id": "CVE-2026-71151", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful", "cvss": 5.6, "sev": "MEDIUM", "epss": 0.00125, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71151"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0201, "pinned": false}, {"id": "CVE-2026-70912", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attac", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00112, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70912"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01336, "pinned": false}, {"id": "CVE-2026-71132", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successfu", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0014, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71132"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03092, "pinned": false}, {"id": "CVE-2026-71147", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can resul", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00217, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71147"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11503, "pinned": false}, {"id": "CVE-2026-76033", "publisher": "Chrome", "title": "Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who ha", "summary": "Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00218, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76033"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.11663, "pinned": false}, {"id": "CVE-2026-70963", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00189, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70963"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0808, "pinned": false}, {"id": "CVE-2026-71105", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in unauthorized ability to ", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00116, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71105"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-269", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01539, "pinned": false}, {"id": "CVE-2026-71139", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete ", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00165, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71139"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0548, "pinned": false}, {"id": "CVE-2026-71145", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Fi", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.0017, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71145"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06054, "pinned": false}, {"id": "CVE-2026-73873", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data as well as  unauthorized read access t", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00189, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["3.2.18"], "fixed": null, "safe": "before 3.2.18", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2.18 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_3.2.18>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_3.2.18>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73873"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08079, "pinned": false}, {"id": "CVE-2026-73880", "publisher": "Oracle", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)", "summary": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).  Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Helidon accessible data. CVSS ", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "helidon", "vendor": "oracle", "type": "app", "affected": ["4.5.1"], "fixed": null, "safe": "before 4.5.1", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy helidon || rpm -q helidon || helidon --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 4.5.1 (Debian / Ubuntu)", "cmd": "apt-cache madison helidon\nsudo apt install helidon=<VERSION_BEFORE_4.5.1>\nsudo apt-mark hold helidon"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list helidon\nsudo dnf downgrade helidon-<VERSION_BEFORE_4.5.1>\nsudo dnf versionlock add helidon"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-73880"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0651, "pinned": false}, {"id": "CVE-2026-70853", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Hyperion Financial Management a", "cvss": 3.3, "sev": "LOW", "epss": 0.00273, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70853"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18647, "pinned": false}, {"id": "CVE-2026-70916", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70916"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06822, "pinned": false}, {"id": "CVE-2026-70917", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized read access", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70917"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06821, "pinned": false}, {"id": "CVE-2026-71066", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful at", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00126, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71066"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02103, "pinned": false}, {"id": "CVE-2026-71080", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a", "cvss": 3.7, "sev": "LOW", "epss": 0.00226, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71080"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "A", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12662, "pinned": false}, {"id": "CVE-2026-70851", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracl", "cvss": 3.1, "sev": "LOW", "epss": 0.00264, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70851"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1736, "pinned": false}, {"id": "CVE-2026-71078", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful att", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00107, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71078"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01106, "pinned": false}, {"id": "CVE-2026-71149", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the attac", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00107, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71149"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01106, "pinned": false}, {"id": "CVE-2026-76042", "publisher": "Chrome", "title": "Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who ha", "summary": "Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 3.1, "sev": "LOW", "epss": 0.00251, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 151.0.7922.169"], "fixed": "151.0.7922.169", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76042"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"}], "cwe": ["CWE-908"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.15573, "pinned": false}, {"id": "CVE-2026-71089", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful atta", "cvss": 3.3, "sev": "LOW", "epss": 0.0016, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71089"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0475, "pinned": false}, {"id": "CVE-2026-71140", "publisher": "Oracle", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)", "summary": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).   The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle VM VirtualBox ", "cvss": 3.4, "sev": "LOW", "epss": 0.00156, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "vm virtualbox", "vendor": "oracle", "type": "app", "affected": ["7.2.14"], "fixed": null, "safe": "before 7.2.14", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-virtualbox || rpm -q vm-virtualbox || vm-virtualbox --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.2.14 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-virtualbox\nsudo apt install vm-virtualbox=<VERSION_BEFORE_7.2.14>\nsudo apt-mark hold vm-virtualbox"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-virtualbox\nsudo dnf downgrade vm-virtualbox-<VERSION_BEFORE_7.2.14>\nsudo dnf versionlock add vm-virtualbox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71140"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04403, "pinned": false}, {"id": "CVE-2026-70962", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installa", "summary": "Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology.  Successful attacks of this vulnerability can", "cvss": 3.3, "sev": "LOW", "epss": 0.00142, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion infrastructure technology", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-infrastructure-technology || rpm -q hyperion-infrastructure-technology || hyperion-infrastructure-technology --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-infrastructure-technology\nsudo apt install hyperion-infrastructure-technology=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-infrastructure-technology"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-infrastructure-technology\nsudo dnf downgrade hyperion-infrastructure-technology-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-infrastructure-technology"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70962"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03228, "pinned": false}, {"id": "CVE-2026-71072", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denia", "cvss": 3.3, "sev": "LOW", "epss": 0.00137, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71072"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02826, "pinned": false}, {"id": "CVE-2026-70850", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized update, i", "cvss": 3.0, "sev": "LOW", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70850"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02238, "pinned": false}, {"id": "CVE-2026-71144", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in  unauthorized update, i", "cvss": 3.0, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71144"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02299, "pinned": false}, {"id": "CVE-2026-70919", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks require human interaction from a person other than the atta", "cvss": 2.5, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70919"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0228, "pinned": false}, {"id": "CVE-2026-71082", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Or", "cvss": 2.5, "sev": "LOW", "epss": 0.00117, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71082"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01604, "pinned": false}, {"id": "CVE-2026-71081", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete acc", "cvss": 1.9, "sev": "LOW", "epss": 0.00129, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71081"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02297, "pinned": false}, {"id": "CVE-2026-71083", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful at", "cvss": 1.8, "sev": "LOW", "epss": 0.00126, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "agile plm mcad connector", "vendor": "oracle", "type": "app", "affected": ["3.6"], "fixed": null, "safe": "before 3.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy agile-plm-mcad-connector || rpm -q agile-plm-mcad-connector || agile-plm-mcad-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)", "cmd": "apt-cache madison agile-plm-mcad-connector\nsudo apt install agile-plm-mcad-connector=<VERSION_BEFORE_3.6>\nsudo apt-mark hold agile-plm-mcad-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list agile-plm-mcad-connector\nsudo dnf downgrade agile-plm-mcad-connector-<VERSION_BEFORE_3.6>\nsudo dnf versionlock add agile-plm-mcad-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71083"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02107, "pinned": false}, {"id": "CVE-2026-71146", "publisher": "Oracle", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)", "summary": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).   The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.  Successful attacks of this vulnerability can result in unauthorized ability to", "cvss": 1.9, "sev": "LOW", "epss": 0.00128, "kev": false, "added": "2026-08-18", "modified": "2026-10-22T17:09:59.477", "products": [{"name": "hyperion financial management", "vendor": "oracle", "type": "app", "affected": ["11.2.25.0.000"], "fixed": null, "safe": "before 11.2.25.0.000", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy hyperion-financial-management || rpm -q hyperion-financial-management || hyperion-financial-management --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 11.2.25.0.000 (Debian / Ubuntu)", "cmd": "apt-cache madison hyperion-financial-management\nsudo apt install hyperion-financial-management=<VERSION_BEFORE_11.2.25.0.000>\nsudo apt-mark hold hyperion-financial-management"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list hyperion-financial-management\nsudo dnf downgrade hyperion-financial-management-<VERSION_BEFORE_11.2.25.0.000>\nsudo dnf versionlock add hyperion-financial-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71146"}, {"t": "Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cspuaug2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "L", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0224, "pinned": false}, {"id": "CVE-2020-37286", "publisher": "VulnCheck", "title": "Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip po", "summary": "Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested calls. Contracts using such calls as tuple elements, call arguments, or builtin arguments like concat or ecrecover can return corrupted values or pass wrong arguments to external calls.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00284, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2020-37286"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19859, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2021-48020", "publisher": "VulnCheck", "title": "Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip po", "summary": "Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or raw_log topics can have memory corrupted, producing incorrect contract behavior.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00284, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48020"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.19859, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2020-37287", "publisher": "VulnCheck", "title": "Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when ", "summary": "Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex types with non-base members are passed as arguments. Contracts passing multi-dimensional arrays or structs to internal or external functions receive corrupted values because the compiler assumed each subtype size is 32.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2020-37287"}], "cwe": ["CWE-131"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1569, "pinned": false}, {"id": "CVE-2026-114117", "publisher": "VulnCheck", "title": "Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | ", "summary": "Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where K is any nonzero integer literal, is compiled to the constant 1 when used as a ternary expression branch under -O gas (the default) or -O codesize. Affected contracts use the wrong value in storage writes, arithmetic, indexes, return values, or events without warning or revert, which can record deposits incorrectly and lock fund", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00207, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114117"}], "cwe": ["CWE-682"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.10206, "pinned": false}, {"id": "CVE-2021-48019", "publisher": "VulnCheck", "title": "Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a f", "summary": "Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-byte RETURNDATASIZE rather than the actual return data size. Calls through these proxies can yield corrupted data when a function returns more than 4096 bytes without return data sanitation, and fail strict return-size checks such as SafeERC20.safeTransfer.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00248, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-48019"}], "cwe": ["CWE-805"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.15176, "pinned": false}, {"id": "CVE-2026-114118", "publisher": "VulnCheck", "title": "Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtract", "summary": "Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking that code_offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code_offset can make a factory deploy contracts with no runtime code, potentially trapping ETH and tokens.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00201, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114118"}], "cwe": ["CWE-681"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.09469, "pinned": false}, {"id": "CVE-2020-37289", "publisher": "VulnCheck", "title": "Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decim", "summary": "Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to be stored in uint256 variables without bounds checking. Malicious contracts can return values greater than 255 to manipulate or bypass contract logic that relies on these values.", "cvss": 3.7, "sev": "LOW", "epss": 0.00261, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2020-37289"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16989, "pinned": false}, {"id": "CVE-2026-114114", "publisher": "VulnCheck", "title": "Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Pytho", "summary": "Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8 byte col_offset values in vyper/ast/parse.py, so multi-byte characters shift the source slices used to reconstruct later numeric literals. An attacker contributing source with non-ASCII identifiers that NFKC-normalize to ASCII, or an invisible byte-order mark, can silently substitute addresses, integers or other constants in com", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00183, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114114"}], "cwe": ["CWE-176"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07475, "pinned": false}, {"id": "CVE-2026-114116", "publisher": "VulnCheck", "title": "Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), wh", "summary": "Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing source code can hide these characters in comments, strings or indentation to silently change address, integer or decimal constants.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00183, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114116"}], "cwe": ["CWE-436"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07474, "pinned": false}, {"id": "CVE-2026-114048", "publisher": "VulnCheck", "title": "WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistS", "summary": "WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist videos, or forge video suggestions.", "cvss": 3.5, "sev": "LOW", "epss": 0.00126, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T17:00:33.203", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114048"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02123, "pinned": false}, {"id": "CVE-2026-70386", "publisher": "ENISA", "title": "Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authori", "summary": "Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared \nand no user interaction beyond launching it, can execute arbitrary shell\n commands as uid 0 in the u:r:dumpstate:s0 SELinux domain. Two defects \ncombine: (a) OnePlus's atlasservice binder interface accepts \nsetEven", "cvss": 8.5, "sev": "HIGH", "epss": 0.01221, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70386"}], "cwe": ["CWE-78", "CWE-862"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 47, "tier": "P2", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.68493, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "rubygem-eventmachine", "status": "fixed", "fixed": "1.2.7-37.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-7194c202a2", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7194c202a2", "note": "FEDORA-2026-7194c202a2"}], "vendors_checked": "2026-10-24T07:53:07.433273+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93471", "publisher": "EEF", "title": "Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an u", "summary": "Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang VM via a crafted compressed SAMLResponse.\n\nesaml_binding:decode_response/2 base64-decodes the attacker-supplied SAMLResponse, inflates it with zlib:unzip/1 with no bound on the output, then converts the result to a charlist with binary_to_list/1 before parsing. This run", "cvss": 8.7, "sev": "HIGH", "epss": 0.00438, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93471"}], "cwe": ["CWE-409"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37052, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-86696", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthe", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages.\n\nesaml:status_code_map/1 in src/esaml.erl maps any StatusCode value it does not recognize to an atom with list_to_atom/1 on the last colon-separated segment of the URN. esaml_sp:validate_logout_response/2 verifies a signature onl", "cvss": 8.2, "sev": "HIGH", "epss": 0.00438, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86696"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37052, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:20:06.595246+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105270", "publisher": "EEF", "title": "Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse.\n\nesaml_binding:decode_response/2 parses the decoded SAMLResponse with xmerl_scan:string/2, which interns every element name, attribute name, and namespace prefix it reads as a permanent atom. The SAML consume (ACS) and single-logou", "cvss": 8.7, "sev": "HIGH", "epss": 0.00344, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105270"}], "cwe": ["CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26706, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-70387", "publisher": "ENISA", "title": "Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android", "summary": "Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork()'s and calls execl(\"/vendor/bin/sh\", \"sh\", \"-c\", cmd, NULL) with a caller-supplied command string. The only authorization check is getCallingUid() == 0. Because SELinux policy grants binder access to this HAL to a wide client attribute, any uid-0 process in any of those domains (inc", "cvss": 8.4, "sev": "HIGH", "epss": 0.00128, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-70387"}], "cwe": ["CWE-749", "CWE-863"], "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.02218, "pinned": false}, {"id": "CVE-2026-104948", "publisher": "EnterpriseDB Corporation", "title": "WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulne", "summary": "WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version(). Any authenticated database role can run them, and neither checks privileges. A low-privileged user can call gp_expand_lock_catalog() inside an open transaction to block all catalog changes across the cluster for every user", "cvss": 7.1, "sev": "HIGH", "epss": 0.00216, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104948"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.11449, "pinned": false}, {"id": "CVE-2026-104947", "publisher": "EnterpriseDB Corporation", "title": "WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the b", "summary": "WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the underlying pg_log_backend_memory_contexts() function. A low-privileged user can force the segment backends of any other session, superuser ses", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00216, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104947"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11448, "pinned": false}, {"id": "CVE-2026-104949", "publisher": "EnterpriseDB Corporation", "title": "WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulne", "summary": "WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby(). The function is named gp_add_master_standby() in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, it does not require superuser privileges. A low-privileged user who can open a utility-mode connection can use it to add a fake standby coor", "cvss": 2.3, "sev": "LOW", "epss": 0.00216, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:58:51.997", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104949"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11448, "pinned": false}, {"id": "CVE-2026-86414", "publisher": "curl", "title": "An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos", "summary": "An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86414"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20514, "pinned": false}, {"id": "CVE-2026-87865", "publisher": "curl", "title": "When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key vali", "summary": "When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87865"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18943, "pinned": false}, {"id": "CVE-2026-92388", "publisher": "curl", "title": "When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings,", "summary": "When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a t", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92388"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20515, "pinned": false}, {"id": "CVE-2026-92389", "publisher": "curl", "title": "libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, acc", "summary": "libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noper", "cvss": "n/a", "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92389"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20514, "pinned": false}, {"id": "CVE-2026-94266", "publisher": "curl", "title": "libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing", "summary": "libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00275, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94266"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18943, "pinned": false}, {"id": "CVE-2026-107928", "publisher": "curl", "title": "When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer", "summary": "When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00259, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-107928"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 4, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16703, "pinned": false}, {"id": "CVE-2026-86415", "publisher": "curl", "title": "libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached", "summary": "libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00173, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:57:53.407", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86415"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06391, "pinned": false}, {"id": "CVE-2026-76302", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00378, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76302"}], "cwe": ["CWE-707"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.30574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76531", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00378, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76531"}], "cwe": ["CWE-552"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.30574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76290", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated r", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potentially stop responding.\nThe vulnerability is possible because the endpoint accepts package download requests without authentication and reads and base64-enco", "cvss": 7.5, "sev": "HIGH", "epss": 0.00406, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76290"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.33786, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76288", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a ", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint and cause Splunk Web to stop responding to requests. Splunk Web remains unavailable until Splunk Enterprise is restarted.\nThe vulnerability is possible because Splunk Web does not limit request-header parsing before processing the request.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00372, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76288"}], "cwe": ["CWE-400"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.29948, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76299", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76299 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00253, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76299"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P2", "why": ["Critical severity"], "fix": true, "watched": false, "epss_pct": 0.15856, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76530", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76530 are related to use of non-canonical URL paths for authorization decisions and are grouped under the Common Weakness Enumeration (CWE) CWE-647.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00222, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76530"}], "cwe": ["CWE-647"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.12131, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76406", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an ", "summary": "In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer (REST) API to expose and decrypt that encrypted credential data.\nThe vulnerability is possible because Splunk SOAR decrypts encrypted Basic authentication values before completing authentication checks.\nThe attack requires the unaut", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00321, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76406"}], "cwe": ["CWE-203"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23961, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:48:19.908904+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76306", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, a user that has the \"Observer\" role could use query filters in the Repres", "summary": "In Splunk SOAR versions below 8.7.0, a user that has the \"Observer\" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and authorization tokens for other users.\nThe information disclosure is possible because Splunk SOAR applies REST API query filters to user records before it protects sensitive fields from query processing.\nFor more information see Using the REST API reference for Splunk SOAR (", "cvss": 7.5, "sev": "HIGH", "epss": 0.00222, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76306"}], "cwe": ["CWE-200"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.12154, "pinned": false}, {"id": "CVE-2026-76289", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" ", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" or \"power\" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transfer (REST) API endpoint for lookup table files. The affected instance requires a restart to restore service.\nThe vulnerability is possible because the endpoint does not limit resource use whe", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76289"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20392, "pinned": false}, {"id": "CVE-2026-76292", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions be", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the \"admin\" Splunk role or the \"sc_admin\" Splunk Secure Gateway role could read mobile alert notification data for other users through Splunk Secure Gateway App Key Value Store (KV Store) Representational State Transfer (REST) API endpoints.\nThe vulnerability is pos", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76292"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17412, "pinned": false}, {"id": "CVE-2026-76305", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view ap", "summary": "In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed app. This could expose all data in the app archive, including proprietary source code and sensitive information.\nThe vulnerability is possible because Splunk SOAR does not verify permission to view apps before it returns the app archive.\nFor more information see Export or import an app (https:/", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00274, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76305"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.18825, "pinned": false}, {"id": "CVE-2026-76308", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition throug", "summary": "In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk SOAR to apply the license change.\nThe vulnerability is possible because Splunk SOAR authenticates requests to manage the Enterprise Security edition but does not authorize the caller before it applies the license change.\nFor more information see Using the REST API reference", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00174, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76308"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06578, "pinned": false}, {"id": "CVE-2026-76294", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" ", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" or \"power\" Splunk roles could move field extractions or field transformations to apps for which the user does not have read access.\nThe vulnerability is possible because the Representational State Transfer (REST) API does not validate destination app access before it processes field extraction and field transformation move operations.\nFor", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76294"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09945, "pinned": false}, {"id": "CVE-2026-76296", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" ", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the \"admin\" or \"power\" Splunk roles could create, move, edit, or delete sourcetype renaming configurations that they own in apps that they do not have permission to access.\nThe vulnerability is possible when Splunk Web is turned on because Splunk Web does not verify the required app permissions before it performs sourcetype renaming operations.\nFor m", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00205, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76296"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09945, "pinned": false}, {"id": "CVE-2026-76295", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions be", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the \"admin\" or \"power\" Splunk roles could view dashboard and report listings beyond the requested filter scope while remaining within objects that the user can access.\nThe vulnerability is possible because Splunk Secure Gateway does not neutralize special characters in values befor", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00201, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76295"}], "cwe": ["CWE-943"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09428, "pinned": false}, {"id": "CVE-2026-76304", "publisher": "Cisco Systems, Inc.", "title": "In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Au", "summary": "In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Docker Compose configuration file. The file contains the Uniform Resource Locator (URL) of the Splunk SOAR instance, the container image location, and the Splunk SOAR Automation Broker version.\nThe vulnerability is possible because Splunk SOAR returns the configuration file", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00162, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76304"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04988, "pinned": false}, {"id": "CVE-2026-76297", "publisher": "Cisco Systems, Inc.", "title": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a", "summary": "In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches from retrieving data from remote datasets.\nThe vulnerability is possible because the federated provider Representational State Transfer (REST) API accept", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00107, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76297"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01114, "pinned": false}, {"id": "CVE-2026-76300", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76300 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76300"}], "cwe": ["CWE-664"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06042, "pinned": false}, {"id": "CVE-2026-76301", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76301 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76301"}], "cwe": ["CWE-693"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06042, "pinned": false}, {"id": "CVE-2026-76408", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76408 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76408"}], "cwe": ["CWE-664"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06043, "pinned": false}, {"id": "CVE-2026-76526", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76526 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76526"}], "cwe": ["CWE-707"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06043, "pinned": false}, {"id": "CVE-2026-76529", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76529 are related to improper protection of alternate path and are grouped under the Common Weakness Enumeration (CWE) CWE-424.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0017, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76529"}], "cwe": ["CWE-424"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06042, "pinned": false}, {"id": "CVE-2026-76407", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00127, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76407"}], "cwe": ["CWE-284"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0215, "pinned": false}, {"id": "CVE-2026-76527", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76527 are related to improper check or handling of exceptional conditions and are grouped under the Common Weakness Enumeration (CWE) CWE-703.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00134, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76527"}], "cwe": ["CWE-703"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02639, "pinned": false}, {"id": "CVE-2026-76528", "publisher": "Cisco Systems, Inc.", "title": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh", "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76528 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00134, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:57:10.180", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76528"}], "cwe": ["CWE-693"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02639, "pinned": false}, {"id": "CVE-2026-105869", "publisher": "Apache Software Foundation", "title": "Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of i", "summary": "Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The provider is intended for use with token authentication, which verifies the token before authorization. The provider did not verify the token itself: it parsed the token's claims with the signature removed and trusted that authentication had already checked it.\n\nWhen authentication and authorization are enabled", "cvss": 9.2, "sev": "CRITICAL", "epss": 0.00303, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105869"}], "cwe": ["CWE-347"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21935, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-111809", "publisher": "Apache Software Foundation", "title": "Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encodin", "summary": "Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding.\n\n\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0.\n\n\n\nUsers are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.", "cvss": 9.3, "sev": "CRITICAL", "epss": 0.00218, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111809"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.11648, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "trafficserver", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105930", "publisher": "Apache Software Foundation", "title": "When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a pa", "summary": "When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stored in the Pulsar Packages Management Service by supplying a package URL. The Pulsar Functions worker authorized these requests only against the namespace in which the component was being registered or updated. It did not check whether the requesting user was permitted to access packages in the namespace that the package URL refe", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00452, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105930"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.38355, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105926", "publisher": "Apache Software Foundation", "title": "The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema regis", "summary": "The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was authenticated. Unlike the broker's other topic commands, such as those for creating producers and consumers or for looking up topics, these two commands d", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00408, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105926"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.33926, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-105931", "publisher": "Apache Software Foundation", "title": "The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions", "summary": "The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are enabled, most of the read endpoints of this API verify only that the request is authenticated and that the broker serves the requested topic or transaction coordinator. They do not check whether the caller is permitted to access the tenant, namespace or topic whose data is returned. The endpoints that modi", "cvss": 2.3, "sev": "LOW", "epss": 0.00504, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105931"}], "cwe": ["CWE-862"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.42205, "pinned": false}, {"id": "CVE-2026-105927", "publisher": "Apache Software Foundation", "title": "The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through quer", "summary": "The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query parameters of the consumer endpoint, including the deadLetterTopic parameter that names the topic to which messages are written after the maximum number of redeliveries is exceeded. When authorization is enabled, the WebSocket service checks only that the connecting user holds the CONSUME permission on the subscribed topic. It does not ", "cvss": 2.3, "sev": "LOW", "epss": 0.00437, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105927"}], "cwe": ["CWE-863"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.36987, "pinned": false}, {"id": "CVE-2026-58663", "publisher": "Apache Software Foundation", "title": "An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service\n\n\n\nThis issue affects Apach", "summary": "An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service\n\n\n\nThis issue affects Apache IoTDB: from 2.0.0 before 2.0.11.\n\n\n\nUsers are recommended to upgrade to version 2.0.11, which fixes the issue.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00276, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58663"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.18983, "pinned": false}, {"id": "CVE-2026-59562", "publisher": "Apache Software Foundation", "title": "Missing authentication for critical function vulnerability in Apache IoTDB.\n\n\n\nThis issue affects Apache IoTDB", "summary": "Missing authentication for critical function vulnerability in Apache IoTDB.\n\n\n\nThis issue affects Apache IoTDB: from 2.0.0 before 2.0.11.\n\n\n\nUsers are recommended to upgrade to version 2.0.11, which fixes the issue.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00283, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59562"}], "cwe": ["CWE-306"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.1977, "pinned": false}, {"id": "CVE-2026-41114", "publisher": "Apache Software Foundation", "title": "Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.\n\n\n\nThis issue affects Apache IoTD", "summary": "Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.\n\n\n\nThis issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11.\n\n\n\nUsers are recommended to upgrade to version 2.0.11, which fixes the issue.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00247, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-41114"}], "cwe": ["CWE-400"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.15156, "pinned": false}, {"id": "CVE-2026-59229", "publisher": "Apache Software Foundation", "title": "The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a\nhardcoded SUPER_USER (root) identity when ", "summary": "The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a\nhardcoded SUPER_USER (root) identity when executing data loading and\ndeletion operations. A user with only SYSTEM-level privileges (such as\nUSE_PIPE or MAINTAIN) who does NOT have WRITE_DATA or DELETE_DATA\npermissions on target databases can send specially crafted PipeData\nmessages through the Legacy Pipe API, resulting in data loading/deletion\noperations executed as root \u2014 effec", "cvss": "n/a", "sev": "HIGH", "epss": 0.00255, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59229"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.16192, "pinned": false}, {"id": "CVE-2026-103634", "publisher": "Apache Software Foundation", "title": "Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: dataske", "summary": "Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).\n\ncount_min_sketch::deserialize() did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In addition, the table size was computed from the serialized number of buckets and number of hash functions in 32-bit arithmetic. A crafted sketch could ma", "cvss": "n/a", "sev": "HIGH", "epss": 0.00198, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:56:52.840", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-103634"}], "cwe": ["CWE-190", "CWE-787"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09046, "pinned": false}, {"id": "CVE-2026-56386", "publisher": "Apache Software Foundation", "title": "Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unaut", "summary": "Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload.\n\nRoot Cause:\nThe HTTP/2 DATA frame handler computed the fragment size from the attacker-controlled payload length and, when the PADDED flag was present, decremented the fragment size before ensuring t", "cvss": 7.5, "sev": "HIGH", "epss": 0.00732, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56386"}], "cwe": ["CWE-125", "CWE-191"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 50, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.53817, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-fontconfig", "status": "fixed", "fixed": "0.6.3-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f92ca8b01f", "note": "FEDORA-2026-f92ca8b01f"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:21:53.545176+00:00", "vendor_fixed": true}, {"id": "CVE-2026-82230", "publisher": "Apache Software Foundation", "title": "Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows re", "summary": "Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server crash via sending deeply nested mcpack data.\n\nRoot Cause:\nThe bRPC mcpack2pb parser (used to serve nshead_mcpack / ubrpc / public_pbrpc requests) recursively parses nested objects and arrays without any depth limit. For a protobuf message that references itself (e.g. a repeated message field), the generat", "cvss": 7.5, "sev": "HIGH", "epss": 0.0055, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82230"}], "cwe": ["CWE-674"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.453, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "python-trimesh", "status": "fixed", "fixed": "5.2.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-429b4bad4c", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-429b4bad4c", "note": "FEDORA-2026-429b4bad4c"}], "vendors_checked": "2026-10-24T06:36:02.290507+00:00", "vendor_fixed": true}, {"id": "CVE-2026-84727", "publisher": "Apache Software Foundation", "title": "Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a", "summary": "Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a malicious RTMP peer to crash the process or potentially corrupt memory via a crafted Abort message.\n\nRoot Cause:\nWhen processing an RTMP Abort (protocol control message type 2), the RTMP policy implementation deleted the target RtmpChunkStream object. The send path (RtmpUnsentMessage::AppendAndDestroySelf -> RtmpChunkStream::SerializeMes", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00323, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84727"}], "cwe": ["CWE-416"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.24062, "pinned": false}, {"id": "CVE-2026-78058", "publisher": "Apache Software Foundation", "title": "Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all pla", "summary": "Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms allows a remote unauthenticated attacker to crash the server or grow its memory without bound by sending crafted HTTP/2 frames.\n\nRoot Cause:\nThe h2 parser, enabled by default on every bRPC server port and used by h2/gRPC clients, trusts the peer to respect receive-side limits that bRPC advertises but never enforces:\n1. SETTINGS_MAX", "cvss": "n/a", "sev": "HIGH", "epss": 0.00307, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78058"}], "cwe": ["CWE-400", "CWE-476"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.22372, "pinned": false}, {"id": "CVE-2026-86249", "publisher": "Apache Software Foundation", "title": "On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service", "summary": "On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption on internal_port can be abused to bypass authentication entirely. VerifyHttpRequest() returns true without checking any credential when a built-in service is requested on internal_port, and this verdict is not per - request: verification runs only for the first message of a connection and the result latches the connection. Send", "cvss": "n/a", "sev": "HIGH", "epss": 0.00325, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86249"}], "cwe": ["CWE-287"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 11, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.24337, "pinned": false}, {"id": "CVE-2026-56387", "publisher": "Apache Software Foundation", "title": "The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input", "summary": "The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessive memory allocation or resource consumption before the parser rejects the incomplete payload.\n\nRoot Cause:\nThe AMF long string parser resized the destina", "cvss": "n/a", "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56387"}], "cwe": ["CWE-770", "CWE-789"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.18748, "pinned": false}, {"id": "CVE-2026-56388", "publisher": "Apache Software Foundation", "title": "The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header", "summary": "The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and crashing the process.\n\nRoot Cause:\nRedisCommandParser::ConsumeImpl rejected negative RESP array counts but accepted zero. It resized the command argument vect", "cvss": "n/a", "sev": "HIGH", "epss": 0.00289, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-56388"}], "cwe": ["CWE-252", "CWE-617", "CWE-787"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 10, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.20411, "pinned": false}, {"id": "CVE-2026-48830", "publisher": "Apache Software Foundation", "title": "Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authe", "summary": "Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a builtin HTTP request on the same HTTP/1.1 keep-alive connection.\n\nWhen ServerOptions.auth is enabled and builtin HTTP services are exposed on the public listener, a builtin request received as the first message on a socket may cause the connection to be treated as authe", "cvss": "n/a", "sev": "HIGH", "epss": 0.00263, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48830"}], "cwe": ["CWE-287"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.17248, "pinned": false}, {"id": "CVE-2026-54425", "publisher": "Apache Software Foundation", "title": "Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cau", "summary": "Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sending a crafted HTTP/2 header block containing many consecutive Dynamic Table Size Update entries. Each update was decoded by recursively invoking the HPACK decoder, which could exhaust the thread stack before a header field or end of input was reached.\n\nRoot Cause:\nThe bRPC HPACK decoder recursively decoded the ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00257, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54425"}], "cwe": ["CWE-674"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.16413, "pinned": false}, {"id": "CVE-2026-74757", "publisher": "Apache Software Foundation", "title": "Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms", "summary": "Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count.\n\nRoot Cause:\nThe bRPC\u00a0mcpack2pb parser trusts the item count stored in the mcpack array header without validating it against the actual payload size. The code generated by the mcpack2pb protoc pl", "cvss": "n/a", "sev": "HIGH", "epss": 0.00242, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74757"}], "cwe": ["CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.1454, "pinned": false}, {"id": "CVE-2026-74758", "publisher": "Apache Software Foundation", "title": "A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attack", "summary": "A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required.\n\nRoot Cause:\nWhen an RTMP Abort control message names the chunk stream that is currently being parsed (the chunk stream carrying the message itself), RtmpChunkStream::OnAbortMessage calls RtmpContext::Clea", "cvss": "n/a", "sev": "HIGH", "epss": 0.00243, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74758"}], "cwe": ["CWE-416"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.14672, "pinned": false}, {"id": "CVE-2026-78048", "publisher": "Apache Software Foundation", "title": "A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRP", "summary": "A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a crafted sequence of HPACK headers, resulting in a denial of service.\n\nRoot Cause:\nIn src/brpc/details/hpack.cpp, IndexTable::Init sizes the dynamic-table ring buffer as num_headers = max_size / (32 + 2), i.e. it assumes a minimum table ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00242, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78048"}], "cwe": ["CWE-617"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.1454, "pinned": false}, {"id": "CVE-2026-78334", "publisher": "Apache Software Foundation", "title": "Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a r", "summary": "Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to bypass server authentication and inject or deliver streaming frames, when a server is configured with an Authenticator.\n\nRoot Cause:\nWhen authentication is configured, streaming RPC frames are consumed directly by the streaming parser (ParseStreamingMessage) and never pass through InputMessenger's authentication hook, so", "cvss": "n/a", "sev": "HIGH", "epss": 0.00261, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78334"}], "cwe": ["CWE-306"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 9, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.16899, "pinned": false}, {"id": "CVE-2026-81755", "publisher": "Apache Software Foundation", "title": "Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a re", "summary": "Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote attacker to exhaust server memory and cause denial of service by sending a single RPC request that declares an excessive number of streams.\n\nRoot Cause:\nIn the streaming RPC feature, a client can declare multiple streams in one RPC request by putting extra stream identifiers into the repeated field `stream_settings.extra_stream_ids` ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00233, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-81755"}], "cwe": ["CWE-400"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.13359, "pinned": false}, {"id": "CVE-2026-82953", "publisher": "Apache Software Foundation", "title": "NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platform", "summary": "NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash the server (denial of service) via a crafted createStream command.\n\nRoot Cause:\nWhen an RTMP service rejects a createStream request by returning a null stream from RtmpService::NewStream(), the server sends an error response to the client. If writing this rejection response fails (for example, because th", "cvss": "n/a", "sev": "HIGH", "epss": 0.00221, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82953"}], "cwe": ["CWE-476"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.12022, "pinned": false}, {"id": "CVE-2026-84747", "publisher": "Apache Software Foundation", "title": "Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms", "summary": "Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to bypass access control rules enforced by a front proxy.\n\nRoot Cause:\nThe method dispatch function FindMethodPropertyByURI() in bRPC's HTTP protocol splits the request path with a string splitter that skips empty fields, so paths containing empty path segments (consecutive slashes), such as //flags, /flags// and ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00215, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84747"}], "cwe": ["CWE-436"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 8, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.11359, "pinned": false}, {"id": "CVE-2026-58064", "publisher": "Apache Software Foundation", "title": "The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full ", "summary": "The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminating CRLF to increase memory usage and CPU copy overhead, potentially causing denial of service.\n\n\nRoot Cause:\nThe Redis inline command parser allocated me", "cvss": "n/a", "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58064"}], "cwe": ["CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09612, "pinned": false}, {"id": "CVE-2026-61916", "publisher": "Apache Software Foundation", "title": "Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on ", "summary": "Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote attackers to cause a process crash and denial of service by sending crafted input containing bytes with the high bit set.\n\nRoot Cause:\nTwo 256-entry lookup tables are accessed through pointers biased by 128 so that valid indices are in the range -128 to 127. Input bytes a", "cvss": "n/a", "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61916"}], "cwe": ["CWE-125"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09613, "pinned": false}, {"id": "CVE-2026-74755", "publisher": "Apache Software Foundation", "title": "An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remo", "summary": "An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero value_size. The UnparsedValue::as_string() function computes `_size - 1` without validating `_size`; when value_size is 0 the expression underflows to SIZE_MAX, resize() throws std::length_error, and because the exception is not caught on the re", "cvss": "n/a", "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-74755"}], "cwe": ["CWE-191"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09612, "pinned": false}, {"id": "CVE-2026-80463", "publisher": "Apache Software Foundation", "title": "Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all p", "summary": "Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to exhaust the memory of a server (denial of service) by sending an endless sequence of continuation data frames.\n\nRoot Cause:\nThe streaming RPC protocol bounds every single data frame by max_body_size, but a fragmented stream message accumulates continuation frames into one buffer (_pending_buf) without a", "cvss": "n/a", "sev": "HIGH", "epss": 0.00202, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-80463"}], "cwe": ["CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09613, "pinned": false}, {"id": "CVE-2026-82210", "publisher": "Apache Software Foundation", "title": "Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a rem", "summary": "Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed stream feedback frame.\n\nRoot Cause:\nWhen handling FRAME_TYPE_FEEDBACK frames, bRPC calls Stream::SetRemoteConsumed() which contains CHECK(_cur_buf_size > 0) and unconditionally asserts CHECK(buf.IsEmpty()) on the frame payload. A feedback frame that carries an unexpected payl", "cvss": "n/a", "sev": "HIGH", "epss": 0.00188, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82210"}], "cwe": ["CWE-617"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.07995, "pinned": false}, {"id": "CVE-2026-84748", "publisher": "Apache Software Foundation", "title": "Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access b", "summary": "Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port.\n\nRoot Cause:\nServerOptions.internal_port is documented to make builtin services (and Tabbed services) reachable only from the internal port, and the HTTP/h2 dispatch path enforced this. However, all protobuf-based protocol dispatch paths (baidu_std, hulu_pbrpc, sofa_pbrpc, and the nshead-based prot", "cvss": "n/a", "sev": "HIGH", "epss": 0.00178, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84748"}], "cwe": ["CWE-285"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.07035, "pinned": false}, {"id": "CVE-2026-86146", "publisher": "Apache Software Foundation", "title": "Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser ", "summary": "Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to smuggle requests and inject headers when bRPC is deployed behind a proxy or load balancer that parses the same bytes differently.\n\nRoot Cause:\nThe bRPC fork of http-parser accepts and acts on several HTTP/1.1 header forms that a conforming front-end either rejec", "cvss": "n/a", "sev": "HIGH", "epss": 0.00203, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86146"}], "cwe": ["CWE-444"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09754, "pinned": false}, {"id": "CVE-2026-86147", "publisher": "Apache Software Foundation", "title": "External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) ", "summary": "External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers who can reach the builtin service port to create directories and truncate/overwrite files with the privileges of the server process, or to hold the process-wide CPU/contention profiler for an arbitrarily long time.\n\nRoot Cause:\n1. The builtin /flags service allows gflags carrying a validator to be ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00203, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86147"}], "cwe": ["CWE-73", "CWE-400"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 7, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.09754, "pinned": false}, {"id": "CVE-2026-54426", "publisher": "Apache Software Foundation", "title": "Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to ", "summary": "Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a configurable Redis reply depth limit with default value 128 and rejects replies exceeding that limit.\u00a0\n\nAffected Scenarios:\nApplications using bRPC as a Redis", "cvss": "n/a", "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54426"}], "cwe": ["CWE-674"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.04633, "pinned": false}, {"id": "CVE-2026-54427", "publisher": "Apache Software Foundation", "title": "Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC pro", "summary": "Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack.\n\nAffected Scenarios:\nApplications using bRPC RTMP support and parsing AMF data from an untrusted RTMP peer. This includes RTMP servers parsing client command mes", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-54427"}], "cwe": ["CWE-674"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.05361, "pinned": false}, {"id": "CVE-2026-61902", "publisher": "Apache Software Foundation", "title": "Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progr", "summary": "Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing.\n\nA remote unauthenticated peer can cause an affected process to buffer message data beyond the configured limit, which may lead to memory exhaustion and denial of service. \nUsers should upgrade to 1.18.0 or apply the patch from PR  https://github.com/apache/b", "cvss": "n/a", "sev": "HIGH", "epss": 0.00158, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-61902"}], "cwe": ["CWE-400"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.04557, "pinned": false}, {"id": "CVE-2026-78066", "publisher": "Apache Software Foundation", "title": "Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-cont", "summary": "Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process.\n\nRoot Cause:\n1) The gzip/zlib/snappy decompressors enforce no output limit: -max_body_size is checked against the compressed bytes only, so a cap-compliant body (e.g", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-78066"}], "cwe": ["CWE-770"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.05361, "pinned": false}, {"id": "CVE-2026-79704", "publisher": "Apache Software Foundation", "title": "An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through", "summary": "An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through\u00a0 1.17.0) on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra_stream_id for every additional stream. The response handling path indexed the returned identifiers using the locally created stream count without first validating the size of the returned list, so a mal", "cvss": "n/a", "sev": "HIGH", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-79704"}], "cwe": ["CWE-125"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.05361, "pinned": false}, {"id": "CVE-2026-82231", "publisher": "Apache Software Foundation", "title": "A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crash", "summary": "A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the server peer it talks to. When the server returns a T_EXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws (TProtocolException, TTransportException or std::length_error). The exception unwinds out of the bthread task function and the process calls std::terminate(), ", "cvss": "n/a", "sev": "HIGH", "epss": 0.00147, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82231"}], "cwe": ["CWE-248"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.03602, "pinned": false}, {"id": "CVE-2026-82425", "publisher": "Apache Software Foundation", "title": "A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to cra", "summary": "A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service.\n\nRoot Cause:\nWhen a Socket with health checking enabled fails, Socket::WaitAndReset closes its file descriptor while the event dispatcher may still be delivering an input event (EPOLLIN/EVFILT_READ) that was fetched for the just-closed fd. If the health check then succeeds and revives the So", "cvss": "n/a", "sev": "HIGH", "epss": 0.00147, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82425"}], "cwe": ["CWE-617"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.03602, "pinned": false}, {"id": "CVE-2026-82942", "publisher": "Apache Software Foundation", "title": "A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the serve", "summary": "A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA is enabled at build time and runtime.\n\nRoot Cause:\nWhen a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server kept parsing that fd afterwards as if it were still an RPC channel. The TCP-fd input stream and the RDMA QP input stream (driven by CQ events) sh", "cvss": "n/a", "sev": "HIGH", "epss": 0.0014, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82942"}], "cwe": ["CWE-362"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.03084, "pinned": false}, {"id": "CVE-2026-87849", "publisher": "Apache Software Foundation", "title": "The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only acces", "summary": "The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values without first validating that those values are objects. A malformed Discovery response whose data/service members or instances list contain non-object entries (e.g. a bare integer) triggers the RapidJSON object-access precondition on the client, reading memory out of bounds and potentially crashing the bRP", "cvss": "n/a", "sev": "HIGH", "epss": 0.00159, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87849"}], "cwe": ["CWE-125"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.04712, "pinned": false}, {"id": "CVE-2026-90484", "publisher": "Apache Software Foundation", "title": "The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-", "summary": "The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check (is_full_package), after which the parser reads the response type byte via an unbounded 5-byte fetch that returns nullptr, and type = p[4] dereferences it, crashing the client process.\n\n\n\nRoot Cause: In brpc::polic", "cvss": "n/a", "sev": "HIGH", "epss": 0.00153, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-90484"}], "cwe": ["CWE-476"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 6, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.04067, "pinned": false}, {"id": "CVE-2026-66392", "publisher": "Apache Software Foundation", "title": "Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is ", "summary": "Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or IP address. A network attacker who can redirect or intercept a connection and who possesses a certificate issued by a CA trusted by the client for another name may impersonate the requested TLS endpoint.\n\n\nAffected Scenarios:\nApplications use a bRPC client Channel to conn", "cvss": "n/a", "sev": "HIGH", "epss": 0.00101, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:56:37.023", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-66392"}], "cwe": ["CWE-297"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 5, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.00863, "pinned": false}, {"id": "CVE-2026-96365", "publisher": "Drupal.org", "title": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocati", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0046, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96365"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38928, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96386", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00266, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96386"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.17574, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96356", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96356"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26249, "pinned": false}, {"id": "CVE-2026-96366", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.0034, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96366"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.26249, "pinned": false}, {"id": "CVE-2026-96385", "publisher": "Drupal.org", "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authenticatio", "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0021, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96385"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.10676, "pinned": false}, {"id": "CVE-2026-96380", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00159, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96380"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.04714, "pinned": false}, {"id": "CVE-2026-96364", "publisher": "Drupal.org", "title": "Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse", "summary": "Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96364"}], "cwe": ["CWE-799"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.12593, "pinned": false}, {"id": "CVE-2026-96377", "publisher": "Drupal.org", "title": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Exces", "summary": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7.", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96377"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.13981, "pinned": false}, {"id": "CVE-2026-96370", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery", "summary": "Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96370"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15473, "pinned": false}, {"id": "CVE-2026-96372", "publisher": "Drupal.org", "title": "Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing", "summary": "Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96372"}], "cwe": ["CWE-1220"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15474, "pinned": false}, {"id": "CVE-2026-96375", "publisher": "Drupal.org", "title": "Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM)", "summary": "Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.", "cvss": 4.8, "sev": "MEDIUM", "epss": 0.00092, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96375"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.00501, "pinned": false}, {"id": "CVE-2026-96371", "publisher": "Drupal.org", "title": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS", "summary": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00182, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96371"}], "cwe": ["CWE-267"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07441, "pinned": false}, {"id": "CVE-2026-96378", "publisher": "Drupal.org", "title": "Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerc", "summary": "Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00302, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96378"}], "cwe": ["CWE-915"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21749, "pinned": false}, {"id": "CVE-2026-96358", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96358"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12573, "pinned": false}, {"id": "CVE-2026-96361", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00218, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96361"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11635, "pinned": false}, {"id": "CVE-2026-96367", "publisher": "Drupal.org", "title": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS", "summary": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00225, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96367"}], "cwe": ["CWE-267"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12519, "pinned": false}, {"id": "CVE-2026-96368", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00226, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96368"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.12572, "pinned": false}, {"id": "CVE-2026-96388", "publisher": "Drupal.org", "title": "Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Re", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live chat application versions: from 0.0.0 to 3.0.4.", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00091, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96388"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00466, "pinned": false}, {"id": "CVE-2026-87954", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00206, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87954"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10037, "pinned": false}, {"id": "CVE-2026-96357", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00172, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96357"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06243, "pinned": false}, {"id": "CVE-2026-96359", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00175, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96359"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06703, "pinned": false}, {"id": "CVE-2026-96398", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0023, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96398"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13112, "pinned": false}, {"id": "CVE-2026-84912", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00148, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84912"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03719, "pinned": false}, {"id": "CVE-2026-84913", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00148, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84913"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0372, "pinned": false}, {"id": "CVE-2026-96382", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal D", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2.", "cvss": 4.6, "sev": "MEDIUM", "epss": 0.00133, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96382"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02561, "pinned": false}, {"id": "CVE-2026-84910", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00149, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84910"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03738, "pinned": false}, {"id": "CVE-2026-96362", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.0016, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96362"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.0485, "pinned": false}, {"id": "CVE-2026-96384", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.", "cvss": 3.5, "sev": "LOW", "epss": 0.00243, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96384"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14658, "pinned": false}, {"id": "CVE-2026-96387", "publisher": "Drupal.org", "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allo", "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login versions: from 1.0 to 1.6.", "cvss": 3.8, "sev": "LOW", "epss": 0.00201, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96387"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.09489, "pinned": false}, {"id": "CVE-2026-96390", "publisher": "Drupal.org", "title": "Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privile", "summary": "Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00152, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96390"}], "cwe": ["CWE-267"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04018, "pinned": false}, {"id": "CVE-2026-96374", "publisher": "Drupal.org", "title": "Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery", "summary": "Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5.", "cvss": 4.2, "sev": "MEDIUM", "epss": 0.00079, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96374"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.00134, "pinned": false}, {"id": "CVE-2026-87952", "publisher": "Drupal.org", "title": "Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider  allows Remote Ser", "summary": "Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider  allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 3.1, "sev": "LOW", "epss": 0.00219, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87952"}], "cwe": ["CWE-294"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11746, "pinned": false}, {"id": "CVE-2026-96360", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal W", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 3.5, "sev": "LOW", "epss": 0.00184, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96360"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.07589, "pinned": false}, {"id": "CVE-2026-96369", "publisher": "Drupal.org", "title": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting In", "summary": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 3.1, "sev": "LOW", "epss": 0.0024, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96369"}], "cwe": ["CWE-525"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14323, "pinned": false}, {"id": "CVE-2026-87953", "publisher": "Drupal.org", "title": "Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider  allows Server Side Req", "summary": "Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider  allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.", "cvss": 3.3, "sev": "LOW", "epss": 0.00168, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87953"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05778, "pinned": false}, {"id": "CVE-2026-96373", "publisher": "Drupal.org", "title": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing", "summary": "Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": 3.3, "sev": "LOW", "epss": 0.00178, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96373"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06994, "pinned": false}, {"id": "CVE-2026-96392", "publisher": "Drupal.org", "title": "Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allo", "summary": "Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.", "cvss": 3.5, "sev": "LOW", "epss": 0.00156, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96392"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04373, "pinned": false}, {"id": "CVE-2026-84911", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal A", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.", "cvss": 3.1, "sev": "LOW", "epss": 0.0015, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84911"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "H", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 12, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03851, "pinned": false}, {"id": "CVE-2026-114485", "publisher": "Devolutions Inc.", "title": "Insufficient protection of sensitive information in the user list endpoint in Devolutions Server\u00a0\n2026.3.10.0\u00a0", "summary": "Insufficient protection of sensitive information in the user list endpoint in Devolutions Server\u00a0\n2026.3.10.0\u00a0and earlier allows an authenticated attacker with delegated user view permissions to obtain the MFA secrets of all users via the user list API response.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0014, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114485"}], "cwe": ["CWE-201"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03032, "pinned": false}, {"id": "CVE-2026-114486", "publisher": "Devolutions Inc.", "title": "Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0\u00a0\u00a0and ear", "summary": "Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0\u00a0\u00a0and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00141, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114486"}], "cwe": ["CWE-863"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03099, "pinned": false}, {"id": "CVE-2026-114487", "publisher": "Devolutions Inc.", "title": "Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.1", "summary": "Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00132, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:54:17.390", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114487"}], "cwe": ["CWE-862"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.02538, "pinned": false}, {"id": "CVE-2026-115330", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to e", "summary": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary SQL by appending stacked statements to custom metric queries. Attackers can submit semicolon-separated SQL through POST /app/metrics/, bypassing first-statement-only validation, to read or modify data across all tenants.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00298, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115330"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21353, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115331", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to i", "summary": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate metric queries to access the database shared by all tenants.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00284, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115331"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.19842, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115332", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to i", "summary": "Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscription_filter_keys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted group-by identifier, to inject SQL into usage aggregation queries against the shared multi-tenant database.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00304, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115332"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.22031, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114112", "publisher": "VulnCheck", "title": "Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote c", "summary": "Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif decoding flaws to execute code.", "cvss": 8.9, "sev": "HIGH", "epss": 0.00192, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114112"}], "cwe": ["CWE-122"], "vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.08378, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-115334", "publisher": "VulnCheck", "title": "Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that al", "summary": "Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any organization by supplying its UUID. Self-registered attackers who know another organization's UUID can send a POST request to /app/switch_organization/ to access that tenant's data and billing configuration.", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00236, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115334"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13779, "pinned": false}, {"id": "CVE-2012-20005", "publisher": "VulnCheck", "title": "SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allo", "summary": "SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and malicious msg values to execute script and steal session cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2012-20005"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1079, "pinned": false}, {"id": "CVE-2014-125132", "publisher": "VulnCheck", "title": "Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that al", "summary": "Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious 'k' values that are echoed unsanitized, executing JavaScript in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundat", "cvss": 6.1, "sev": "MEDIUM", "epss": 0.00211, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2014-125132"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10791, "pinned": false}, {"id": "CVE-2026-115411", "publisher": "VulnCheck", "title": "crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where", "summary": "crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additionally fails to pin the validated address for the actual outbound connection, allowing a TOCTOU DNS rebinding bypass. An authenticated attacker can add a malicious domain that resolves to an ", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00214, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:53:20.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-115411"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11171, "pinned": false}, {"id": "CVE-2026-114142", "publisher": "GitHub, Inc.", "title": "toml-node is a TOML parser for Node.js and the browser", "summary": "toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because quoteDottedString() in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray() to clear another key's guard. The assign() path then descends through an unowned Date value without applying the owned-container check and can reach the prototype c", "cvss": 8.8, "sev": "HIGH", "epss": 0.00315, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:48:25.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114142"}], "cwe": ["CWE-1321"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.23185, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "tome", "status": "fixed", "fixed": "5.0.1", "cmd": "npm install tome@\">=5.0.1\"\nnpm ls tome", "url": "https://github.com/advisories/GHSA-h895-cgqg-jf52", "note": "vulnerable: <= 5.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114143", "publisher": "GitHub, Inc.", "title": "toml-node is a TOML parser for Node.js and the browser", "summary": "toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted keys, table headers, array-of-tables headers, and inline-table keys in assign(), deepRef(), and setNestedKey(). The resulting quadratic work can block the Node.js event loop for several seconds, and sufficiently long paths can terminate the process through memory exhau", "cvss": 8.7, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:48:25.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114143"}], "cwe": ["CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20607, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "toml", "status": "fixed", "fixed": "5.0.1", "cmd": "npm install toml@\">=5.0.1\"\nnpm ls toml", "url": "https://github.com/advisories/GHSA-9j65-hcg3-gc64", "note": "vulnerable: <= 5.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "cockpit-image-builder", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:29:06.173406+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114144", "publisher": "GitHub, Inc.", "title": "toml-node is a TOML parser for Node.js and the browser", "summary": "toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt() before reduceInteger() in lib/compiler.js checks whether the resulting value fits the TOML 64-bit integer range. Converting a sufficiently long integer string consumes super-linear CPU time and synchronously blocks the Node.js event loop, allowing one attacker-", "cvss": 7.5, "sev": "HIGH", "epss": 0.00339, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:48:25.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114144"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.26113, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "toml", "status": "fixed", "fixed": "5.0.1", "cmd": "npm install toml@\">=5.0.1\"\nnpm ls toml", "url": "https://github.com/advisories/GHSA-9qmh-m7c6-f92p", "note": "vulnerable: <= 5.0.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "cockpit-image-builder", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113728", "publisher": "GitHub, Inc.", "title": "Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server", "summary": "Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then passes the URL to fetch, which performs a separate lookup for the socket connection. An attacker controlling authoritative DNS can return a public address during validation and then rebind the hostname to a loopback, private, link-local, or clo", "cvss": 7.5, "sev": "HIGH", "epss": 0.00507, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113728"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.42401, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-111758", "publisher": "GitHub, Inc.", "title": "markdown-it is a Markdown parser", "summary": "markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n\u00b2) with default options. Continuation lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and the subsequent charCodeAt and slice calls flatten the V8 cons-string, copying everything collected so far; this runs before the rule decides the definitio", "cvss": 7.5, "sev": "HIGH", "epss": 0.00455, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111758"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.38547, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "markdown-it", "status": "fixed", "fixed": "14.3.3", "cmd": "npm install markdown-it@\">=14.3.3\"\nnpm ls markdown-it", "url": "https://github.com/advisories/GHSA-gfr2-rv44-r23c", "note": "vulnerable: >= 14.1.0, < 14.3.3"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "node-markdown-it", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "node-markdown-it", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113729", "publisher": "GitHub, Inc.", "title": "Moov signedxml is a pure Go library for processing signed XML documents", "summary": "Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks. Attacker-controlled XML containing deeply nested elements with many unused namespace declarations causes quadratic allocation growth with depth and linear growth with prefixes per level, a", "cvss": 7.5, "sev": "HIGH", "epss": 0.00465, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113729"}], "cwe": ["CWE-400", "CWE-407", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39326, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Go", "pkg": "github.com/moov-io/signedxml", "status": "fixed", "fixed": "1.4.1", "cmd": "go get github.com/moov-io/signedxml@v1.4.1\ngo list -m github.com/moov-io/signedxml", "url": "https://github.com/advisories/GHSA-5588-rp99-5fjh", "note": "vulnerable: <= 1.4.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113726", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION is set, so zsh receives the raw value. The script assigns that value to PS1. In zsh with PROMPT_SUBST, an attacker-influenced environment directory, --prompt, or VIRTUALEN", "cvss": 7.8, "sev": "HIGH", "epss": 0.00234, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113726"}], "cwe": ["CWE-78", "CWE-116"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.13551, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "virtualenv", "status": "fixed", "fixed": "21.14.4", "cmd": "pip install --upgrade \"virtualenv>=21.14.4\"\npip show virtualenv", "url": "https://github.com/advisories/GHSA-5vjq-rrrf-7h2q", "note": "vulnerable: <= 21.14.3"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "python-virtualenv", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-virtualenv", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113776", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the complete activation template, so trigger names such as __VIRTUAL_NAME__, __VIRTUAL_ENV__, or __VIRTUAL_PROMPT__ inside an already substituted and quoted environment path or prompt can be replaced during a later pass. The later value's quoting can close th", "cvss": 7.8, "sev": "HIGH", "epss": 0.00247, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113776"}], "cwe": ["CWE-78", "CWE-94"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.15098, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "virtualenv", "status": "fixed", "fixed": "21.14.2", "cmd": "pip install --upgrade \"virtualenv>=21.14.2\"\npip show virtualenv", "url": "https://github.com/advisories/GHSA-8rjx-v5ww-45pp", "note": "vulnerable: >= 20.26.6, <= 21.14.1"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "python-virtualenv", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "python-virtualenv", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113732", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or VIRTUALENV_PROMPT value containing a backslash before a quote can therefore terminate the generated fish literal and execute command substitution when ", "cvss": 7.8, "sev": "HIGH", "epss": 0.00211, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113732"}], "cwe": ["CWE-78", "CWE-116"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10776, "pinned": false}, {"id": "CVE-2026-113725", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing \\$(...) runs as commands in the user's shell each time bash draws the prompt. This issue is fixed in version 21.14.7.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00155, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113725"}], "cwe": ["CWE-78", "CWE-116"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04247, "pinned": false}, {"id": "CVE-2026-113718", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSH_ENCODING. Under a legacy multibyte codec such as GBK or Big5, a UTF-8 trail byte can consume the backslash before an adjacent quote, allowing the literal to close and attacker-influenced sta", "cvss": 7.1, "sev": "HIGH", "epss": 0.00142, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113718"}], "cwe": ["CWE-94"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03226, "pinned": false}, {"id": "CVE-2026-113723", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. This vulnerability is fixed in 21.14.9.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00142, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113723"}], "cwe": ["CWE-78"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "A"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.03226, "pinned": false}, {"id": "CVE-2026-113716", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an existing symlink to a directory because exists() follows it. Interpreter creation, seed installation, and activation generation then write through the linked parent outside the requested destination when another local account prepared the tree", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00117, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113716"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01572, "pinned": false}, {"id": "CVE-2026-113719", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous_version() accepts existing seed-package metadata and _uninstall_dist() joins entries from top_level.txt and RECORD to site-packages without checking containment. When a reused destination contains distribution metadata influenced by another account, relative traversal, absolute entries, or linked parents can cause app-data rese", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00117, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113719"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01571, "pinned": false}, {"id": "CVE-2026-113720", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can therefore produce files writable by another local account in a later traversable environment, allowing package code such as pip/__init__.py to be modi", "cvss": 4.4, "sev": "MEDIUM", "epss": 0.00105, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113720"}], "cwe": ["CWE-732"], "vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01041, "pinned": false}, {"id": "CVE-2026-113721", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write() opens pyvenv.cfg without first replacing an existing symbolic or hard link. Another local account that prepares final entries inside the destination can therefore", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00117, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113721"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01571, "pinned": false}, {"id": "CVE-2026-113724", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds to a failed removal by reading mode bits with os.lstat(path) and applying owner-write permission with os.chmod(path, ...), which follows a symlink. A planted link inside a read-only directory can therefore cause a victim-owned target outside the destination that is initially not writable by the invoking user ", "cvss": 4.5, "sev": "MEDIUM", "epss": 0.00117, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113724"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01571, "pinned": false}, {"id": "CVE-2026-113717", "publisher": "GitHub, Inc.", "title": "virtualenv is a tool for creating isolated virtual python environments", "summary": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd() handles --seeder pip --download by calling get_wheel(download=False) and then allowing pip to consult the configured index, bypassing virtualenv's download_wheel() and verify_wheel_digest() path. When virtualenv's default-index PyPI digest comparison remains enabled, an index candidate matching the bundled package and version ", "cvss": 2.3, "sev": "LOW", "epss": 0.00297, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:47:38.403", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113717"}], "cwe": ["CWE-494"], "vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21215, "pinned": false}, {"id": "CVE-2026-98123", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix soft lockup from unpadded ASCON", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration\n\nsctp_verify_asconf() walks ASCONF-ACK parameters with\nsctp_walk_params(), which advances by SCTP_PAD4(length), while the\nconsumer sctp_get_asconf_response() iterates the same parameters\nadvancing by the raw length, without padding. A single odd-length\nparameter desynchronises the two walks and makes the consumer", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00095, "kev": false, "added": "2026-09-25", "modified": "2026-10-22T16:46:55.180", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 2.6.12.1 and < 5.10.271", ">= 5.11 and < 5.15.222", ">= 5.16 and < 6.1.189", ">= 6.2 and < 6.6.158", ">= 6.7 and < 6.12.111", ">= 6.13 and < 6.18.53", ">= 6.19 and < 7.2.7", "2.6.12"], "fixed": "5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98123"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2cb0b0b1ed69430bf73740377ea0a1c44c50db63"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3be02999ab9131a4b96eb1eda4ca48b1cea80f03"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/4548d843e7b29f6d150d8caae4e64015fa226b0c"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/5fbc6a778d5fce7628821236972596acb18e1065"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7ba84e2971d208a2d6413a334ec28a8a32cdce0f"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7d8e7ab6a0665888beee91f7ad77ac805963c4fd"}], "cwe": ["CWE-667"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.0061, "pinned": false}, {"id": "CVE-2026-96639", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00565, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96639"}], "cwe": ["CWE-125", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 51, "tier": "P2", "why": ["Critical severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.46227, "pinned": false, "pocs": [], "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-v9pv-5gc8-w2m6", "note": "vulnerable: >= 11.0.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true, "ssvc": null}, {"id": "CVE-2026-96640", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format=\"PDF\", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can theref", "cvss": 8.2, "sev": "HIGH", "epss": 0.00421, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96640"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.35383, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-mrfp-p49p-3hf2", "note": "vulnerable: >= 5.1.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96778", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed image data to overwrite adjacent heap memory. Re-sa", "cvss": 7.7, "sev": "HIGH", "epss": 0.00401, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96778"}], "cwe": ["CWE-787"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.33191, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-g7cr-3p24-7wf7", "note": "vulnerable: >= 9.4.0, < 13.0.0"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114501", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLOW_ALIGNMENT makes aligned_linesize include row padding or an aligned offset before the first row. The resulting Arrow buffer can include uninitialized padding, bytes preceding the first row, or stale heap contents from previously freed images. Applications that configure a", "cvss": 6.3, "sev": "MEDIUM", "epss": 0.00384, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114501"}], "cwe": ["CWE-226", "CWE-908"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.31246, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114131", "publisher": "GitHub, Inc.", "title": "Nuxt is an open-source web development framework for Vue.js", "summary": "Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rule keys with the raw request path while route resolution decodes dynamic and catch-all parameters, allowing a percent-encoded segment to resolve to a protected page without matching the routeRules entry intended for that path. As a result, appMiddleware can be skipped during server rendering and an unauthenticated requester can r", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00289, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114131"}], "cwe": ["CWE-436", "CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20411, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "npm", "pkg": "nuxt", "status": "fixed", "fixed": "4.4.4", "cmd": "npm install nuxt@\">=4.4.4\"\nnpm ls nuxt", "url": "https://github.com/advisories/GHSA-6gq8-jgmh-3ffp", "note": "vulnerable: >= 4.0.0, < 4.4.4"}, {"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113793", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113793"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39376, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "pypdf", "status": "fixed", "fixed": "6.20.1", "cmd": "pip install --upgrade \"pypdf>=6.20.1\"\npip show pypdf", "url": "https://github.com/advisories/GHSA-9mx8-4j7g-633p", "note": "vulnerable: < 6.20.1"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "pypdf2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113794", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113794"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39376, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "pypdf", "status": "fixed", "fixed": "6.20.0", "cmd": "pip install --upgrade \"pypdf>=6.20.0\"\npip show pypdf", "url": "https://github.com/advisories/GHSA-39mj-jf6j-2qj3", "note": "vulnerable: < 6.20.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "pypdf2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-113795", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00466, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113795"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.39377, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "pypdf", "status": "fixed", "fixed": "6.20.0", "cmd": "pip install --upgrade \"pypdf>=6.20.0\"\npip show pypdf", "url": "https://github.com/advisories/GHSA-7mh2-4gg2-979f", "note": "vulnerable: < 6.20.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pypdf", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "pypdf2", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/disk-image-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96642", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consumes a full CPU core, and never returns. TarIO is reached only when an application directly uses PIL.TarIO.TarIO rather than the default Image.open() path.", "cvss": 7.1, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96642"}], "cwe": ["CWE-835"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25364, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-3j72-p6qg-6xp7", "note": "vulnerable: < 13.0.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96644", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read be", "cvss": 7.1, "sev": "HIGH", "epss": 0.00333, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96644"}], "cwe": ["CWE-125"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.25364, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Python (pip)", "pkg": "Pillow", "status": "fixed", "fixed": "13.0.0", "cmd": "pip install --upgrade \"Pillow>=13.0.0\"\npip show Pillow", "url": "https://github.com/advisories/GHSA-9v9v-9qvf-h2hj", "note": "vulnerable: < 13.0.0"}, {"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "pillow", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "pillow", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "python-pillow", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-aws-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-cuda-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-96636", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can use a tiny first frame to pass Image.open() and then declare an over-limit later frame. Normal frame iteration through seek(), load(), or ImageSequence.Iterator can decode that frame and commit hundreds of megabyt", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0028, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96636"}], "cwe": ["CWE-400", "CWE-409"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19461, "pinned": false}, {"id": "CVE-2026-96638", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest_length without a per-branch cap. A delta can add roughly 255 image rows in one iteration, so a kilobyte-sized file with a large but permitted width can expand the data bytearray to hundreds of megabytes or more, causing memory-exhaustion de", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0028, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96638"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19461, "pinned": false}, {"id": "CVE-2026-96641", "publisher": "GitHub, Inc.", "title": "Pillow is a Python imaging library", "summary": "Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative advances against INT_MIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in xsize += dx, producing a large positive width from a negative mathematical result. Applications that use getlength(), getsize(), or derived layout, q", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.0028, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96641"}], "cwe": ["CWE-190"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.19461, "pinned": false}, {"id": "CVE-2026-113789", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00317, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113789"}], "cwe": ["CWE-400", "CWE-407"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23438, "pinned": false}, {"id": "CVE-2026-113790", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00317, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113790"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23438, "pinned": false}, {"id": "CVE-2026-113791", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.00317, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113791"}], "cwe": ["CWE-400", "CWE-770"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.23438, "pinned": false}, {"id": "CVE-2026-114133", "publisher": "GitHub, Inc.", "title": "Nuxt is an open-source web development framework for Vue.js", "summary": "Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes raw useHeadSafe entry input into the island response without preserving the safe-input marker, and NuxtIsland later inserts that input into the page head as an ordinary entry. An application that passes attacker-controlled data to useHeadSafe in a .server.vue component or page, or in a component rendered through NuxtIsland, ", "cvss": 5.4, "sev": "MEDIUM", "epss": 0.00176, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114133"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06727, "pinned": false}, {"id": "CVE-2026-113786", "publisher": "GitHub, Inc.", "title": "pypdf is a free and open-source pure-python PDF library", "summary": "pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow dependency are not affected. This issue is fixed in version 6.21.1.", "cvss": 2.3, "sev": "LOW", "epss": 0.00375, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-113786"}], "cwe": ["CWE-20", "CWE-183"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.3029, "pinned": false}, {"id": "CVE-2026-114130", "publisher": "GitHub, Inc.", "title": "Nuxt is an open-source web development framework for Vue.js", "summary": "Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a script-capable URL through NuxtLink when attacker-controlled input bound to to is prefixed with an ASCII C0 control character. The no-pages router classifies the value as an internal route before the earlier protocol check and passes it to the rendered anchor href; browsers remove ", "cvss": 2.3, "sev": "LOW", "epss": 0.00329, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:46:48.920", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114130"}], "cwe": ["CWE-79"], "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "P"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.2479, "pinned": false}, {"id": "CVE-2026-114720", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this via CRLF sequences injected into the _flag parameter of the mail/mark action to execute arbitrary IMAP commands. Upstream fixed this in the commit \u201cFix IMAP command injection via CRLF in `_flag` parameter of mail/mark action\u201d, which rejects flags containing control, whitespace and IMAP-spe", "cvss": 7.1, "sev": "HIGH", "epss": 0.00805, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114720"}], "cwe": ["CWE-93"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.56363, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114716", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the media type taken from an inline image data URI without validating it, so a remote authenticated attacker could inject arbitrary MIME part headers into the outgoing message by placing CRLF sequences in that media type. Upstream fixed this in the commit \u201cFix mail header injection via media ty", "cvss": 8.5, "sev": "HIGH", "epss": 0.0039, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114716"}], "cwe": ["CWE-99"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 38, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.31978, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114730", "publisher": "MITRE", "title": "Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery fil", "summary": "Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified address ::/128, so URLs such as http://[64:ff9b::7f00:1]/ passed the filter and reached loopback, link-local and cloud metadata addresses. Upstream fix", "cvss": 7.2, "sev": "HIGH", "epss": 0.00312, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114730"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.22839, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114727", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types for contact photo upload and conversion, and both formats can reference external resources and invoke ImageMagick delegates when processed. Upstream fixed this in the commit \u201cFix passing potentally unsafe attachment content into ImageMagick on image resize\u201d, which removes sv", "cvss": 8.3, "sev": "HIGH", "epss": 0.00331, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114727"}], "cwe": ["CWE-829"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 35, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.2513, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:24:56.572136+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114731", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vul", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (the utils/modcss action). The fetched stylesheet was read into memory in full, with no size limit and no read timeout, so a stylesheet URL referencing an attacker-controlled host could be used to exhaust server memory. Upstream fixed this in the commit \u201cAdd a size limit to the CSS proxy content processing\u201d, wh", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00431, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114731"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36356, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114722", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule were left unscoped and applied to the whole Roundcube interface instead of being confined to the message body. This allows an HTML message to restyle app", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00252, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114722"}], "cwe": ["CWE-669"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.15776, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114726", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did not strip control characters from the decoded display name, so a received message whose From display-name carries CRLF sequences in an encoded word could inject arbitrary headers into the message emitted when the user bounces it. Upstream fixed this in the commit \u201cFix mail", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.0033, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114726"}], "cwe": ["CWE-99"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.24962, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114728", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the ", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url() token with a pattern that enumerated only some of its escaped spellings, so values using other CSS escape sequences, for example \\000075rl( or u\\72 l(, were not recognized and remote content was loaded from an HTML message without the user's consent. Upstream fixed this ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00379, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114728"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30722, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114729", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml inspected the SVG SMIL animation attributes `to`, `from` and values for URIs, but not `by`; so markup such as in an HTML message caused remote content to be loaded without the user's consent, disclosing the client IP address and confirming that the message was opened. Upstream fixed this in the commit \u201cFix remote-content blocker b", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00375, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114729"}], "cwe": ["CWE-184"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30322, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114732", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in with an alias address, rcube_user::query() matched the address against identity records without qualifying the lookup by IMAP host, so a login could be resolved to a user account belonging to a different IMAP host. Upstream fixed this in the commit \u201cFix bug where an alias login wasn\u2019t qual", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00358, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114732"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": [], "fix": true, "watched": false, "epss_pct": 0.28418, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}, {"os": "Debian 12", "pkg": "roundcube", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "roundcube", "status": "fixed", "fixed": "1.6.20+dfsg-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade roundcube\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' roundcube)\" ge \"1.6.20+dfsg-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T19:06:04.164241+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114715", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin. The driver took the first entry of the account search result returned by the Modoboa API instead of matching the authenticated user, so a password change could be applied to a different account. Upstream fixed this in the commit \u201cFix bug where Password Modoboa driver could change password for", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00341, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114715"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.26382, "pinned": false}, {"id": "CVE-2026-114724", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with \u201c!\u201d was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing the remainder of the input so that following session data was interpreted as a serialized value. This yields a PHP object injection primitive for an att", "cvss": 7.4, "sev": "HIGH", "epss": 0.00262, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114724"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.17037, "pinned": false}, {"id": "CVE-2026-114714", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the sq", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path separators, so a login name containing a slash could cause files outside the configured squirrelmail_data_dir to be read and imported. Upstream fixed this in the commit \u201cFix unsafe use of a login name in SquirrelMa", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00367, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114714"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.29373, "pinned": false}, {"id": "CVE-2026-114717", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability wh", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forwarded message was used verbatim to generate the attachment name, so a received message whose subject contains CRLF sequences could inject arbitrary MIME part headers into the outgoing message. Upstream fixed this in the commit \u201cFix mail header injection via subject of a me", "cvss": 4.0, "sev": "MEDIUM", "epss": 0.00298, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114717"}], "cwe": ["CWE-99"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21373, "pinned": false}, {"id": "CVE-2026-114723", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed d", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was processed by GD without any resource limit and could exhaust server memory. Upstream fixed this in the commit \u201cFix ImageMagick resource limits bypass by GD f", "cvss": 3.7, "sev": "LOW", "epss": 0.00332, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114723"}], "cwe": ["CWE-770"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.25207, "pinned": false}, {"id": "CVE-2026-114725", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated attacker could inject arbitrary headers into an outgoing message via the References, In-Reply-To, Message-ID and From parameters. Upstream fixed this in", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00286, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114725"}], "cwe": ["CWE-99"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.20002, "pinned": false}, {"id": "CVE-2026-114719", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid parameter from POST data but passed it to rcmail::get_uids() without constraining the input mode, so values re-read inside that helper could be taken from the query string and the action carried out without a valid CSRF token. Upstream fixed this in the commit \u201cFix CSRF valida", "cvss": 3.7, "sev": "LOW", "epss": 0.00246, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114719"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.1503, "pinned": false}, {"id": "CVE-2026-114718", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in ", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was concatenated into the message presented to the user without HTML escaping, so a backend able to influence that text, such as the DirectAdmin API, could inject script into the Roundcube interface. Upstream fixed this in the commit \u201cFix XSS issue in handling of password drive", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00241, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114718"}], "cwe": ["CWE-79"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14362, "pinned": false}, {"id": "CVE-2026-114721", "publisher": "MITRE", "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be", "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action name as requested, so a remote authenticated attacker could reach an action listed in disabled_actions by requesting it through its deprecated alias instead. Upstream fixed this in the commit \u201cFix bug where deprecated action aliases bypassed `disabled_actions` setting\u201d, which moves the check i", "cvss": 3.1, "sev": "LOW", "epss": 0.00296, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:45:49.550", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114721"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.21117, "pinned": false}, {"id": "CVE-2026-98124", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: invalidate fscache for falloc", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: invalidate fscache for fallocate range operations\n\nsmb3_zero_range(), smb3_punch_hole(), smb3_insert_range(), and\nsmb3_collapse_range() modify file contents through server-side range\noperations. These operations discard the affected page cache, but leave\nthe FS-Cache cookie valid, so a later read may return data cached before\nthe range operation.\n\nFix this by invalid", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00186, "kev": false, "added": "2026-09-25", "modified": "2026-10-22T16:38:53.723", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 3.17.1 and < 6.6.160", ">= 6.7 and < 6.12.114", ">= 6.13 and < 7.2.7", "3.17", "3.17 rc2", "3.17 rc3", "3.17 rc4", "3.17 rc5"], "fixed": "6.6.160, 6.12.114, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98124"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/448ba0ae65ca61064183564d2983c9aa59bd6ba7"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/93c6e5a8d7c5071d586c1411596d5db5faad22b2"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/cc7202a51b8777a757bda9dcfbf339f828c6a130"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/dd8b1e808f5c19479e6ed47e2f88a1fd46f8b0e5"}], "cwe": ["CWE-672"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.07776, "pinned": false}, {"id": "CVE-2026-96363", "publisher": "Drupal.org", "title": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS", "summary": "Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00193, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:21:29.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96363"}], "cwe": ["CWE-267"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08466, "pinned": false}, {"id": "CVE-2026-96391", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00196, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:21:29.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96391"}], "cwe": ["CWE-862"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 2, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08828, "pinned": false}, {"id": "CVE-2026-87938", "publisher": "Drupal.org", "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal C", "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00168, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:21:29.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87938"}], "cwe": ["CWE-89"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.05843, "pinned": false}, {"id": "CVE-2026-87941", "publisher": "Drupal.org", "title": "Vulnerability in Drupal Patreon", "summary": "Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0015, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:21:29.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87941"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03848, "pinned": false}, {"id": "CVE-2026-96379", "publisher": "Drupal.org", "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal C", "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.", "cvss": "n/a", "sev": "HIGH", "epss": 0.0015, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:21:29.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96379"}], "cwe": ["CWE-79"], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 1, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.03859, "pinned": false}, {"id": "CVE-2026-98125", "publisher": "kernel.org", "title": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix stale page cache in inser", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix stale page cache in insert/collapse range\n\nsmb3_insert_range() and smb3_collapse_range() use\ntruncate_pagecache_range() to invalidate the affected page cache.\nHowever, if off or old_eof is not page-aligned, the boundary pages are\nonly partially zeroed and remain uptodate. As a result, the client may\nreturn stale data after a successful insert/collapse range opera", "cvss": 5.5, "sev": "MEDIUM", "epss": 0.00121, "kev": false, "added": "2026-09-25", "modified": "2026-10-22T16:20:13.427", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.19.12 and < 6.0", ">= 6.1 and < 6.6.160", ">= 6.7 and < 7.2.7", "6.0", "6.0 rc4", "6.0 rc5", "6.0 rc6", "6.0 rc7"], "fixed": "6.0, 6.6.160, 7.2.7", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-98125"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/01261a6fa48b62f5ead8e88aaca1e27cb9ab9032"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/52dd721b3de57e41261e08485b2bc62b22b80ebe"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/76222e76d08fbae4092ee9da84ded2b4c24ee598"}], "cwe": ["CWE-669"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.01768, "pinned": false}, {"id": "CVE-2026-87955", "publisher": "Drupal.org", "title": "Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing", "summary": "Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00193, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:19:39.560", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87955"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.08546, "pinned": false}, {"id": "CVE-2026-92812", "publisher": "VulnCheck", "title": "Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses", "summary": "Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outside the intended repository root.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.00441, "kev": false, "added": "2026-09-16", "modified": "2026-10-22T16:19:15.990", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-92812"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 52, "tier": "P2", "why": ["Critical severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.37298, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/geo-chen/oss/blob/main/decap-cms.md", "url": "https://github.com/geo-chen/oss/blob/main/decap-cms.md"}], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}], "vendors_checked": "2026-10-24T06:08:35.103989+00:00", "vendor_fixed": true}, {"id": "CVE-2026-102486", "publisher": "GitLab Inc.", "title": "Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker ", "summary": "Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0075, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102486"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.54482, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "ntpsec", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "ntpsec", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-102483", "publisher": "GitLab Inc.", "title": "Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS ", "summary": "Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00582, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102483"}], "cwe": ["CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 43, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47087, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Debian 12", "pkg": "ntpsec", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "ntpsec", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:21:13.959467+00:00", "vendor_fixed": true}, {"id": "CVE-2026-103090", "publisher": "Google Inc.", "title": "Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in t", "summary": "Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at GET /enroll/status in internal/controlplane/server.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8 allow an unauthenticated remote attacker to retrieve an approved bootstrap-enrolled peer's signed Biscuit identity token by supplying a peer_id", "cvss": 8.8, "sev": "HIGH", "epss": 0.00335, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-103090"}], "cwe": ["CWE-306", "CWE-522"], "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 42, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.25666, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:22:53.974008+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114489", "publisher": "GitLab Inc.", "title": "Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6", "summary": "Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A domain administrator, an account or API key given another role that manages accounts in named domains, or a full-scope API key issued for named domains could", "cvss": 8.1, "sev": "HIGH", "epss": 0.00272, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114489"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1862, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114476", "publisher": "GitLab Inc.", "title": "Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 al", "summary": "Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential holds the manage_roles permission in named domains - a full-scope API key issued for those domains, or an account assigned the serveradmin role with a list of domains - to obtain the server administrator's authority. An account's admin level gives it authority, and a role assigned to it re", "cvss": 7.5, "sev": "HIGH", "epss": 0.00274, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114476"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.1876, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114479", "publisher": "GitLab Inc.", "title": "Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 thro", "summary": "Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have a message that the server's virus scanner found infected delivered to the recipient's mailbox unchanged. With virus scanning enabled and its action set to remove attachments and deliver the text (the default action deletes the message), the server keeps one text part of an infecte", "cvss": 5.8, "sev": "MEDIUM", "epss": 0.00321, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114479"}], "cwe": ["CWE-636"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 31, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2391, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "diffoscope", "status": "fixed", "fixed": "335-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-e4c4cc0856", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e4c4cc0856", "note": "FEDORA-2026-e4c4cc0856"}], "vendors_checked": "2026-10-23T19:07:39.226902+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114478", "publisher": "GitLab Inc.", "title": "Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 thro", "summary": "Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain's DMARC policy. When the server sent on a copy of mail that came from outside - an account's forward, a mail rule's forward, a Sieve redirect, a list's ", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114478"}], "cwe": ["CWE-441"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 30, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.16929, "pinned": false}, {"id": "CVE-2026-114490", "publisher": "GitLab Inc.", "title": "Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 all", "summary": "Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server administrator over COM. Administrator roles are meant to confine such a credential to the domains its list names, and the REST API did not take it for the server", "cvss": 7.8, "sev": "HIGH", "epss": 0.00108, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114490"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01127, "pinned": false}, {"id": "CVE-2026-112212", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externally controlled server, due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses.", "cvss": 7.5, "sev": "HIGH", "epss": 0.0019, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112212"}], "cwe": ["CWE-444"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.08213, "pinned": false, "mentions": [{"src": "NCSC Netherlands", "group": "gov", "title": "NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447", "date": "2026-10-22"}, {"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/", "date": "2026-10-21"}], "buzz": 2}, {"id": "CVE-2026-102484", "publisher": "GitLab Inc.", "title": "Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who contr", "summary": "Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.", "cvss": 6.4, "sev": "MEDIUM", "epss": 0.00264, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102484"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.17394, "pinned": false}, {"id": "CVE-2026-114474", "publisher": "GitLab Inc.", "title": "Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMa", "summary": "Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at that domain, so that it passes the domain's SPF and DMARC at other receivers. A message the server downloads from an external POP3 or IMAP account has no SM", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00164, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114474"}], "cwe": ["CWE-348"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.05352, "pinned": false}, {"id": "CVE-2026-114475", "publisher": "GitLab Inc.", "title": "Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 ", "summary": "Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any that no account holds. The routes that create, update and delete a custom role require the manage_roles permission, which only the serveradmin role holds; b", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00237, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114475"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 26, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13901, "pinned": false}, {"id": "CVE-2026-16255", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3", "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside the identity provider's control, due to incomplete enforcement of the membership lock on requests created before the lock was enabled.", "cvss": 5.9, "sev": "MEDIUM", "epss": 0.00209, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-16255"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 23, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.10509, "pinned": false}, {"id": "CVE-2026-102485", "publisher": "GitLab Inc.", "title": "Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who c", "summary": "Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.", "cvss": 5.2, "sev": "MEDIUM", "epss": 0.00238, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102485"}], "cwe": ["CWE-125"], "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "P", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 22, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1403, "pinned": false}, {"id": "CVE-2026-114472", "publisher": "GitLab Inc.", "title": "Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 thro", "summary": "Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01 challenge responder on port 80 for the certificate authority to read the challenge token; the responder served one connection at a time, accepting a socket,", "cvss": 3.7, "sev": "LOW", "epss": 0.00208, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114472"}], "cwe": ["CWE-410"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.10385, "pinned": false}, {"id": "CVE-2026-114473", "publisher": "GitLab Inc.", "title": "Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.", "summary": "Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail through the server to outside addresses. With SRS enabled, the server rewrites the envelope sender of mail it forwards to a signed SRS address at the forwarding domain, and passes a bounce to that address back to the original sender; but it took every message to a valid SRS address, whatever its ", "cvss": 5.0, "sev": "MEDIUM", "epss": 0.00244, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114473"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 21, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14743, "pinned": false}, {"id": "CVE-2026-114470", "publisher": "GitLab Inc.", "title": "Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remot", "summary": "Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a browser caches the credential once the box is answered and sends it with later requests to that origin, including a top-level form post from another site, and", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00153, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114470"}], "cwe": ["CWE-352"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 20, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.04067, "pinned": false}, {"id": "CVE-2026-105777", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 1", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal response headers.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0025, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105777"}], "cwe": ["CWE-201"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 19, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15462, "pinned": false, "mentions": [{"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-114477", "publisher": "GitLab Inc.", "title": "Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a", "summary": "Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to read the server-wide traffic history. GET /api/v1/metrics/history returns the server's traffic counters over the last 30 days; those counters are server-wide and carry no domain, which is why the report routes already refuse the same counters to a credential confi", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00214, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114477"}], "cwe": ["CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11127, "pinned": false}, {"id": "CVE-2026-13319", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects across the instance without any project membership, due to missing authorization checks on a user-supplied project filter parameter in the group mileston", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.0022, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-13319"}], "cwe": ["CWE-639"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 18, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.11834, "pinned": false}, {"id": "CVE-2026-114471", "publisher": "GitLab Inc.", "title": "Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 t", "summary": "Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log, or anyone given a copy of it, to obtain credentials. With SMTP logging enabled, the server hid the credential of an AUTH PLAIN command only when it was sent after EHLO in one exact form, and wrote the rest of the SASL exchange as the client sent it: a PLAIN password sent befo", "cvss": 4.7, "sev": "MEDIUM", "epss": 0.00097, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114471"}], "cwe": ["CWE-532"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 17, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.007, "pinned": false}, {"id": "CVE-2026-112378", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3", "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00123, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112378"}], "cwe": ["CWE-348"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 16, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01901, "pinned": false}, {"id": "CVE-2026-105711", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across", "cvss": 3.5, "sev": "LOW", "epss": 0.00212, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105711"}], "cwe": ["CWE-524"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 15, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.1093, "pinned": false, "mentions": [{"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-14288", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3", "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.", "cvss": 3.1, "sev": "LOW", "epss": 0.00241, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-14288"}], "cwe": ["CWE-706"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 14, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.14413, "pinned": false}, {"id": "CVE-2026-103515", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3", "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data egress to a third-party service for that group and its descendant projects, due to insufficient granularity of the admin-lock enforcement controls.", "cvss": 2.7, "sev": "LOW", "epss": 0.00232, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-103515"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.13302, "pinned": false, "mentions": [{"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/", "date": "2026-10-21"}], "buzz": 1}, {"id": "CVE-2026-112326", "publisher": "GitLab Inc.", "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3", "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to improper cleanup logic that failed to distinguish between pre-existing records from newly created ones during error handling.", "cvss": 3.1, "sev": "LOW", "epss": 0.00178, "kev": false, "added": "2026-10-22", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-112326"}], "cwe": ["CWE-460"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 13, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.06972, "pinned": false}, {"id": "CVE-2026-111943", "publisher": "Go Project", "title": "On most platforms, Go uses the given system root certificates", "summary": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.", "cvss": "n/a", "sev": "HIGH", "epss": 0.00145, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:18:19.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"}], "cwe": [], "vector": null, "attack": null, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 4, "tier": "P3", "why": ["Covered by 3 security sources"], "fix": false, "watched": false, "epss_pct": 0.03403, "pinned": false, "mentions": [{"src": "Qualys Blog", "group": "research", "title": "How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)", "url": "https://blog.qualys.com/product-tech/2026/10/23/how-to-identify-compromised-emudhra-certificates-with-qualys-cve-2026-111943-and-cve-2026-111944", "date": "2026-10-24"}, {"src": "Rust Blog", "group": "ecosystem", "title": "Announcing rustup 1.29.2", "url": "https://blog.rust-lang.org/2026/10/20/Rustup-1.29.2/", "date": "2026-10-20"}, {"src": "Docker Engine Releases", "group": "ecosystem", "title": "v29.9.2", "url": "https://github.com/moby/moby/releases/tag/docker-v29.9.2", "date": "2026-10-20"}], "buzz": 3}, {"id": "CVE-2026-23706", "publisher": "Fortinet, Inc.", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]", "summary": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiManager 7.6.0 through 7.6.2, FortiManager 7.4.0 through 7.4.6 may allow a low privileged user to execute arbitrary commands via c", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00251, "kev": false, "added": "2026-10-13", "modified": "2026-10-22T16:17:35.897", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-23706"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 27, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.15689, "pinned": false}, {"id": "CVE-2026-114102", "publisher": "VulnCheck", "title": "adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash", "summary": "adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.js lacks a zlib stream error listener. Attackers can supply a ZIP with corrupted DEFLATE data processed by readFileAsync, readAsTextAsync, extractAllToAsync, or getDataAsync, triggering an uncatchable exception that terminates all in-flight requests.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00291, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:17:34.273", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114102"}], "cwe": ["CWE-248"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.20546, "pinned": false, "pocs": [{"kind": "poc", "name": "cafaye/nilepatch-admzip-dos (0 stars)", "url": "https://github.com/cafaye/nilepatch-admzip-dos", "stars": 0}], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 8", "pkg": "mozjs60", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "gjs", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114097", "publisher": "VulnCheck", "title": "Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter()", "summary": "Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files outside the working directory via symlinks persisting between commits. Attackers can craft a repository where an ancestor commit's symlink redirects a descendant commit's file writes during filter_branch, enabling code execution by writing into .git/hooks.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00152, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:17:34.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114097"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.04002, "pinned": false}, {"id": "CVE-2026-114092", "publisher": "VulnCheck", "title": "Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboa", "summary": "Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run replay route (resources.taskruns.$runParam.replay) and looks up the run by friendlyId alone. A remote attacker who knows a victim's run friendlyId can replay it into an environment of their choosing, exposing the victim's task payload or running the task again with the victim's secrets.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00436, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:17:33.980", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114092"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.36868, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:52:23.744390+00:00", "vendor_fixed": true}, {"id": "CVE-2026-114087", "publisher": "VulnCheck", "title": "Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/", "summary": "Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_LINK_SECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then reach Postgres, Redis, and ClickHouse with default credentials from runner containers on infrastructure networks, compromising all tenant data.", "cvss": 8.1, "sev": "HIGH", "epss": 0.00346, "kev": false, "added": "2026-10-21", "modified": "2026-10-22T16:17:33.827", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-114087"}], "cwe": ["CWE-653"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 48, "tier": "P2", "why": ["High severity", "CISA SSVC: public proof of concept", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27005, "pinned": false, "pocs": [], "ssvc": {"exploitation": "poc", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101829", "publisher": "Oracle", "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Termi", "summary": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical d", "cvss": 7.4, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.900", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101829"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.21719, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101827", "publisher": "Oracle", "title": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Op", "summary": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data o", "cvss": 7.1, "sev": "HIGH", "epss": 0.00269, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.770", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101827"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.18122, "pinned": false}, {"id": "CVE-2026-101826", "publisher": "Oracle", "title": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Op", "summary": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture.  Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.5 (Confi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.643", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101826"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21652, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101825", "publisher": "Oracle", "title": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Op", "summary": "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture.  Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.5 (Confi", "cvss": 7.5, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.510", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101825"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21653, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101824", "publisher": "Oracle", "title": "Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Atta", "summary": "Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Document Management and Collaboration.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Document", "cvss": 8.7, "sev": "HIGH", "epss": 0.00288, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.380", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101824"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.20309, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101823", "publisher": "Oracle", "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operatio", "summary": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material.  Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 7.5 (Confidentiality, Integr", "cvss": 7.5, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.240", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101823"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21652, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101820", "publisher": "Oracle", "title": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN)", "summary": "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger.  Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability ", "cvss": 7.5, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:19.097", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101820"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 32, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.21653, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "gum", "status": "fixed", "fixed": "2.0.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-da0d6dd894", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da0d6dd894", "note": "FEDORA-2026-da0d6dd894"}], "vendors_checked": "2026-10-23T18:49:29.362322+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101816", "publisher": "Oracle", "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)", "summary": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub.  Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availabilit", "cvss": 7.2, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.963", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101816"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.36242, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101814", "publisher": "Oracle", "title": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management)", "summary": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Engineering.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Engineering accessible data. CVSS 3.1 Base Score 5.3 ", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.830", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101814"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21485, "pinned": false}, {"id": "CVE-2026-101812", "publisher": "Oracle", "title": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (compo", "summary": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access ", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.563", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101812"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.16843, "pinned": false}, {"id": "CVE-2026-101806", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible da", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.297", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101806"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.16902, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101800", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privile", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successf", "cvss": 6.8, "sev": "MEDIUM", "epss": 0.00261, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.150", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101800"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 33, "tier": "P3", "why": ["On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.16843, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:35:12.387880+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101797", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks", "cvss": 7.5, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:18.007", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101797"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.2009, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101796", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attac", "cvss": 7.5, "sev": "HIGH", "epss": 0.00286, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:17.863", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101796"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 36, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.20089, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T18:18:18.542034+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101795", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Servic", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL S", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00149, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:17.690", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101795"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["On your watchlist"], "fix": false, "watched": true, "epss_pct": 0.0377, "pinned": false}, {"id": "CVE-2026-101791", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (com", "summary": "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).   The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Communications BRM - Elastic Charging Engine.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification a", "cvss": 8.1, "sev": "HIGH", "epss": 0.00326, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:17.043", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101791"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.24472, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101786", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Clust", "cvss": 7.2, "sev": "HIGH", "epss": 0.0043, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.893", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101786"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.36242, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101783", "publisher": "Oracle", "title": "Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General)", "summary": "Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).   The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all MySQL Router accessible data as well as  unauthor", "cvss": 7.4, "sev": "HIGH", "epss": 0.00301, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.757", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101783"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 41, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.21719, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:30:27.016000+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101781", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Serv", "cvss": 8.8, "sev": "HIGH", "epss": 0.00252, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.590", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101781"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.15745, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101772", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.420", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101772"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27175, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101771", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.253", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101771"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27175, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101770", "publisher": "Oracle", "title": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs)", "summary": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks o", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:16.083", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101770"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27175, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "RHEL 10", "pkg": "mysql8.4", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 6", "pkg": "mysql", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 9", "pkg": "mysql", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101768", "publisher": "Oracle", "title": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J)", "summary": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).   The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CV", "cvss": 8.1, "sev": "HIGH", "epss": 0.00348, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.937", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101768"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 45, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.27235, "pinned": false, "pocs": [], "ssvc": {"exploitation": "none", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T16:59:14.488825+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101759", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (co", "summary": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management.  Successful attacks of this vulnerability can result in  unaut", "cvss": 7.5, "sev": "HIGH", "epss": 0.00377, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.787", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101759"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.30495, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:45:25.917102+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101758", "publisher": "Oracle", "title": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (co", "summary": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management.  Successful attacks of this vulnerability can result in  unaut", "cvss": 8.2, "sev": "HIGH", "epss": 0.00321, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.630", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101758"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 40, "tier": "P2", "why": ["High severity", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.2392, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:43:18.352630+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101757", "publisher": "Oracle", "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privi", "summary": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Appl", "cvss": 7.8, "sev": "HIGH", "epss": 0.00135, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.483", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101757"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.0271, "pinned": false}, {"id": "CVE-2026-101746", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Insta", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).   The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks require ", "cvss": 7.3, "sev": "HIGH", "epss": 0.0021, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.350", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101746"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 28, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.10737, "pinned": false}, {"id": "CVE-2026-101745", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Ag", "cvss": 5.3, "sev": "MEDIUM", "epss": 0.00299, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.197", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101745"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 29, "tier": "P3", "why": ["Remotely exploitable, no login, no user action"], "fix": false, "watched": false, "epss_pct": 0.21485, "pinned": false}, {"id": "CVE-2026-101744", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.  While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact", "cvss": 8.4, "sev": "HIGH", "epss": 0.00269, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:15.040", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101744"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "attack": {"av": "N", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 34, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.18123, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T18:27:33.370725+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101742", "publisher": "Oracle", "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics)", "summary": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integri", "cvss": 8.8, "sev": "HIGH", "epss": 0.00389, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:14.890", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101742"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 39, "tier": "P3", "why": ["High severity"], "fix": true, "watched": false, "epss_pct": 0.3182, "pinned": false, "pocs": [], "ssvc": null, "vendors": [{"os": "Fedora 46", "pkg": "wasmedge", "status": "fixed", "fixed": "0.18.1-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c27216e39", "note": "FEDORA-2026-4c27216e39"}], "vendors_checked": "2026-10-23T17:46:58.123504+00:00", "vendor_fixed": true}, {"id": "CVE-2026-101739", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engin", "summary": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can", "cvss": 7.0, "sev": "HIGH", "epss": 0.00109, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:14.760", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101739"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 25, "tier": "P3", "why": ["High severity"], "fix": false, "watched": false, "epss_pct": 0.01186, "pinned": false}, {"id": "CVE-2026-101723", "publisher": "Oracle", "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client)", "summary": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful att", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00106, "kev": false, "added": "2026-10-20", "modified": "2026-10-22T16:17:14.450", "products": [], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-101723"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "L", "ui": "R"}, "remote": false, "exploit": false, "kev_due": null, "kev_added": null, "ransom": false, "priority": 24, "tier": "P3", "why": [], "fix": false, "watched": false, "epss_pct": 0.01044, "pinned": false}, {"id": "CVE-2026-106931", "publisher": "JPCERT/CC", "title": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability", "summary": "SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.", "cvss": 7.8, "sev": "HIGH", "epss": 0.0117, "kev": true, "added": "2026-10-14", "pub": "2026-10-14T05:16:42.633", "modified": "2026-10-21T15:42:24.590", "products": [{"name": "siteguard", "vendor": "e-guardian", "type": "app", "affected": [">= 2.20 and < 8.00", "8.00", "8.00 update1", "8.00 update2", "8.00 update3", ">= 2.20 and < 7.00", "7.00", "7.00 update1"], "fixed": "7.00, 8.00", "safe": "before 2.20", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siteguard || rpm -q siteguard || siteguard --version"}, {"label": "2. UPGRADE to 7.00 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siteguard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siteguard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison siteguard\nsudo apt install siteguard=<VERSION_BEFORE_2.20>\nsudo apt-mark hold siteguard"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siteguard\nsudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>\nsudo dnf versionlock add siteguard"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "siteguard", "vendor": "e-guardian", "type": "app", "affected": [">= 2.20 and < 8.00", "8.00", "8.00 update1", "8.00 update2", "8.00 update3", ">= 2.20 and < 7.00", "7.00", "7.00 update1"], "fixed": "7.00, 8.00", "safe": "before 2.20", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siteguard || rpm -q siteguard || siteguard --version"}, {"label": "2. UPGRADE to 7.00 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siteguard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siteguard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison siteguard\nsudo apt install siteguard=<VERSION_BEFORE_2.20>\nsudo apt-mark hold siteguard"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siteguard\nsudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>\nsudo dnf versionlock add siteguard"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "siteguard", "vendor": "e-guardian", "type": "app", "affected": [">= 2.20 and < 3.10", ">= 4.10 and < 8.00", "8.00 update4"], "fixed": "3.10, 8.00", "safe": "before 2.20", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy siteguard || rpm -q siteguard || siteguard --version"}, {"label": "2. UPGRADE to 3.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade siteguard"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade siteguard"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)", "cmd": "apt-cache madison siteguard\nsudo apt install siteguard=<VERSION_BEFORE_2.20>\nsudo apt-mark hold siteguard"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list siteguard\nsudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>\nsudo dnf versionlock add siteguard"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931"}, {"t": "Vendor Advisory", "u": "https://www.eg-secure.co.jp/siteguard/news/alert-202610-1"}], "cwe": ["CWE-78"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-23", "kev_added": "2026-10-20", "ransom": false, "priority": 69, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.67173, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-110936", "publisher": "Siemens AG", "title": "Siemens Software Center Uncontrolled Search Path Element Vulnerability", "summary": "A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.", "cvss": 6.7, "sev": "MEDIUM", "epss": 0.00238, "kev": true, "added": "2026-10-15", "pub": "2026-10-15T15:17:30.383", "modified": "2026-10-21T13:10:11.553", "products": [{"name": "software center", "vendor": "siemens", "type": "app", "affected": ["< 4.0.9.8"], "fixed": "4.0.9.8", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy software-center || rpm -q software-center || software-center --version"}, {"label": "2. UPGRADE to 4.0.9.8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade software-center"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade software-center"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936"}, {"t": "Patch, Vendor Advisory", "u": "https://cert-portal.siemens.com/productcert/html/ssa-580366.html"}, {"t": "Patch, Vendor Advisory", "u": "https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/"}], "cwe": ["CWE-427"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-11-03", "kev_added": "2026-10-20", "ransom": false, "priority": 55, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)", "Covered by 3 security sources"], "fix": true, "watched": false, "epss_pct": 0.14021, "pinned": false, "pocs": [{"kind": "poc", "name": "DAS-Bodhi/CVE-2026-110936-Siemens-Attack (0 stars)", "url": "https://github.com/DAS-Bodhi/CVE-2026-110936-Siemens-Attack", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "Siemens Software Center", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "date": "2026-10-22"}, {"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-10-20"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "Siemens security advisory (AV26-1063) \u2013 Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063", "date": "2026-10-20"}, {"src": "The Hacker News", "group": "news", "title": "ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan", "url": "https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html", "date": "2026-10-20"}], "buzz": 3}, {"id": "CVE-2026-96652", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability", "summary": "Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00455, "kev": true, "added": "2026-09-23", "pub": "2026-09-23T17:17:23.363", "modified": "2026-10-21T13:09:44.770", "products": [{"name": "media server", "vendor": "plex", "type": "app", "affected": ["< 1.43.3.10861"], "fixed": "1.43.3.10861", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy media-server || rpm -q media-server || media-server --version"}, {"label": "2. UPGRADE to 1.43.3.10861 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade media-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade media-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-11-03", "kev_added": "2026-10-20", "ransom": false, "priority": 55, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.38559, "pinned": false, "pocs": [{"kind": "poc", "name": "code-zm/plex2shell (96 stars)", "url": "https://github.com/code-zm/plex2shell", "stars": 96}, {"kind": "poc", "name": "gmh5225/plex2shell (0 stars)", "url": "https://github.com/gmh5225/plex2shell", "stars": 0}, {"kind": "poc", "name": "ChrisLPJones/plex2shell-check (0 stars)", "url": "https://github.com/ChrisLPJones/plex2shell-check", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "The Hacker News", "group": "news", "title": "CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws", "url": "https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html", "date": "2026-10-21"}, {"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-10-20"}], "buzz": 2}, {"id": "CVE-2026-96654", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability", "summary": "Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters.", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.00465, "kev": true, "added": "2026-09-23", "pub": "2026-09-23T17:17:23.517", "modified": "2026-10-21T13:09:37.607", "products": [{"name": "media server", "vendor": "plex", "type": "app", "affected": ["< 1.43.3.10861"], "fixed": "1.43.3.10861", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy media-server || rpm -q media-server || media-server --version"}, {"label": "2. UPGRADE to 1.43.3.10861 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade media-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade media-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654"}], "cwe": ["CWE-84"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-23", "kev_added": "2026-10-20", "ransom": false, "priority": 63, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.39325, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-96655", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability", "summary": "Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.", "cvss": 4.3, "sev": "MEDIUM", "epss": 0.00455, "kev": true, "added": "2026-09-23", "pub": "2026-09-23T17:17:23.677", "modified": "2026-10-21T13:09:29.830", "products": [{"name": "media server", "vendor": "plex", "type": "app", "affected": ["< 1.43.3.10861"], "fixed": "1.43.3.10861", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy media-server || rpm -q media-server || media-server --version"}, {"label": "2. UPGRADE to 1.43.3.10861 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade media-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade media-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655"}], "cwe": ["CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-11-03", "kev_added": "2026-10-20", "ransom": false, "priority": 50, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.3856, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-96656", "publisher": "Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government", "title": "Plex Media Server External Control of File Name or Path Vulnerability", "summary": "Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.", "cvss": 7.2, "sev": "HIGH", "epss": 0.00816, "kev": true, "added": "2026-09-23", "pub": "2026-09-23T17:17:23.840", "modified": "2026-10-21T13:09:18.913", "products": [{"name": "media server", "vendor": "plex", "type": "app", "affected": ["< 1.43.3.10861"], "fixed": "1.43.3.10861", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy media-server || rpm -q media-server || media-server --version"}, {"label": "2. UPGRADE to 1.43.3.10861 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade media-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade media-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656"}], "cwe": ["CWE-73"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-23", "kev_added": "2026-10-20", "ransom": false, "priority": 64, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.56677, "pinned": false, "pocs": [{"kind": "poc", "name": "a3igner/plex-codec-cache-implant (0 stars)", "url": "https://github.com/a3igner/plex-codec-cache-implant", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2025-39682", "publisher": "kernel.org", "title": "Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix handling of zero-length records on the rx_list\n\nEach recvmsg() call must process either\n - only contiguous DATA records (any number of them)\n - one non-DATA record\n\nIf the next record has different type than what has already been\nprocessed we break out of the main processing loop. If the record\nhas already been decrypted (which may be the case for TLS 1.3 where\nwe don't", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0288, "kev": true, "added": "2025-09-05", "pub": "2025-09-05T18:15:44.670", "modified": "2026-10-19T21:10:00.160", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.0 and < 6.1.149", ">= 6.2 and < 6.6.103", ">= 6.7 and < 6.12.44", ">= 6.13 and < 6.16.4", "6.17 rc1", "6.17 rc2"], "fixed": "6.1.149, 6.6.103, 6.12.44, 6.16.4", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["11.0"], "fixed": null, "safe": "before 11.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic cn 4100 firmware", "vendor": "siemens", "type": "os", "affected": ["< 5.0"], "fixed": "5.0", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-39682"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677"}], "cwe": ["CWE-754"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-21", "kev_added": "2026-09-18", "ransom": false, "priority": 99, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.86761, "pinned": false, "pocs": [{"kind": "poc", "name": "khoatran107/cve-2025-39682 (6 stars)", "url": "https://github.com/khoatran107/cve-2025-39682", "stars": 6}, {"kind": "poc", "name": "suominen/CVE-2025-39682 (0 stars)", "url": "https://github.com/suominen/CVE-2025-39682", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.153-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.153-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.48-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.48-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-55.37.1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:16904\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-570.49.1.el9_6", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:16880\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9.2 Update Services for SAP Solutions", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-284.144.1.el9_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19224\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 9.2 Update Services for SAP Solutions", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-5.14.0-284.144.1.rt14.429.el9_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19223\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 9.4 Extended Update Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-5.14.0-427.96.1.el9_4", "cmd": "sudo dnf upgrade --advisory=RHSA-2025:19104\nrpm -q kernel", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1208", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-39682.html", "note": "ALAS2023-2025-1208"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2025-39964", "publisher": "kernel.org", "title": "Linux Kernel Race Condition Vulnerability", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion.  Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx->write field that indiciates\nexclusive ownership for writing.", "cvss": 7.8, "sev": "HIGH", "epss": 0.01362, "kev": true, "added": "2025-10-13", "pub": "2025-10-13T14:15:34.737", "modified": "2026-10-19T21:10:00.160", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 2.6.38 and < 5.10.245", ">= 5.11 and < 5.15.194", ">= 5.16 and < 6.1.154", ">= 6.2 and < 6.6.108", ">= 6.7 and < 6.12.49", ">= 6.13 and < 6.16.9", "6.17 rc1", "6.17 rc2"], "fixed": "5.10.245, 5.15.194, 6.1.154, 6.6.108, 6.12.49, 6.16.9", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic s7-1500 cpu 1518-4 pn\\/dp mfp firmware", "vendor": "siemens", "type": "os", "affected": [">= 3.1.6"], "fixed": null, "safe": "before 3.1.6", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic s7-1500 cpu 1518f-4 pn\\/dp mfp firmware", "vendor": "siemens", "type": "os", "affected": [">= 3.1.6"], "fixed": null, "safe": "before 3.1.6", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-39964"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d"}], "cwe": ["CWE-362"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-21", "kev_added": "2026-09-18", "ransom": false, "priority": 75, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.71568, "pinned": false, "pocs": [{"kind": "poc", "name": "n1k0oowang/CVE-2025-39964_EXP (3 stars)", "url": "https://github.com/n1k0oowang/CVE-2025-39964_EXP", "stars": 3}, {"kind": "poc", "name": "suominen/CVE-2025-39964 (0 stars)", "url": "https://github.com/suominen/CVE-2025-39964", "stars": 0}, {"kind": "writeup", "name": "cert-portal.siemens.com/productcert/html/ssa-019113.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}, {"kind": "writeup", "name": "cert-portal.siemens.com/productcert/html/ssa-457936.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "fixed", "fixed": "5.4.0-224.244", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.4.0-224.244\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-164.174", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-164.174\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.10", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-90.91", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-90.91\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "linux", "status": "fixed", "fixed": "6.14.0-37.37", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.14.0-37.37\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.158-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.158-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.57-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.57-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.58.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70498\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-55.106.1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71326\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-3.10.0-1160.164.1.rt56.1316.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71657\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-3.10.0-1160.164.1.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71687\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-4.18.0-553.166.1.rt7.507.el8_10", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:70403\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2025-1254", "url": "https://alas.aws.amazon.com/cve/html/CVE-2025-39964.html", "note": "ALAS2023-2025-1254"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-21589", "publisher": "Atlassian", "title": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "summary": "This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this v", "cvss": 7.5, "sev": "HIGH", "epss": 0.12711, "kev": true, "added": "2026-10-05", "pub": "2026-10-05T22:16:58.423", "modified": "2026-10-19T20:31:57.050", "products": [{"name": "bitbucket data center", "vendor": "atlassian", "type": "app", "affected": [">= 7.17.0 and < 9.4.26", ">= 9.5.0 and < 10.2.8", ">= 10.3.0 and < 10.5.1"], "fixed": "9.4.26, 10.2.8, 10.5.1", "safe": "before 7.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bitbucket-data-center || rpm -q bitbucket-data-center || bitbucket-data-center --version"}, {"label": "2. UPGRADE to 9.4.26 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bitbucket-data-center"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bitbucket-data-center"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bitbucket-data-center\nsudo apt install bitbucket-data-center=<VERSION_BEFORE_7.17.0>\nsudo apt-mark hold bitbucket-data-center"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bitbucket-data-center\nsudo dnf downgrade bitbucket-data-center-<VERSION_BEFORE_7.17.0>\nsudo dnf versionlock add bitbucket-data-center"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "bitbucket server", "vendor": "atlassian", "type": "app", "affected": [">= 4.6.0 and <= 8.14.6"], "fixed": "newer than 8.14.6", "safe": "before 4.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy bitbucket-server || rpm -q bitbucket-server || bitbucket-server --version"}, {"label": "2. UPGRADE to newer than 8.14.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade bitbucket-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade bitbucket-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison bitbucket-server\nsudo apt install bitbucket-server=<VERSION_BEFORE_4.6.0>\nsudo apt-mark hold bitbucket-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list bitbucket-server\nsudo dnf downgrade bitbucket-server-<VERSION_BEFORE_4.6.0>\nsudo dnf versionlock add bitbucket-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "confluence data center", "vendor": "atlassian", "type": "app", "affected": [">= 5.10.0 and < 9.2.26", ">= 9.3.0 and < 10.2.19"], "fixed": "9.2.26, 10.2.19", "safe": "before 5.10.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy confluence-data-center || rpm -q confluence-data-center || confluence-data-center --version"}, {"label": "2. UPGRADE to 9.2.26 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade confluence-data-center"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade confluence-data-center"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.10.0 (Debian / Ubuntu)", "cmd": "apt-cache madison confluence-data-center\nsudo apt install confluence-data-center=<VERSION_BEFORE_5.10.0>\nsudo apt-mark hold confluence-data-center"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list confluence-data-center\nsudo dnf downgrade confluence-data-center-<VERSION_BEFORE_5.10.0>\nsudo dnf versionlock add confluence-data-center"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "crowd", "vendor": "atlassian", "type": "app", "affected": [">= 2.11.0 and < 6.3.7", ">= 7.0.0 and < 7.0.3", ">= 7.1.0 and < 7.1.7", ">= 7.2.0 and < 7.2.4"], "fixed": "6.3.7, 7.0.3, 7.1.7, 7.2.4", "safe": "before 2.11.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy crowd || rpm -q crowd || crowd --version"}, {"label": "2. UPGRADE to 6.3.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade crowd"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade crowd"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 2.11.0 (Debian / Ubuntu)", "cmd": "apt-cache madison crowd\nsudo apt install crowd=<VERSION_BEFORE_2.11.0>\nsudo apt-mark hold crowd"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list crowd\nsudo dnf downgrade crowd-<VERSION_BEFORE_2.11.0>\nsudo dnf versionlock add crowd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "jira data center", "vendor": "atlassian", "type": "app", "affected": [">= 7.1.0 and < 9.12.40", ">= 9.13.0 and < 10.3.26", ">= 10.4.0 and < 11.3.12"], "fixed": "9.12.40, 10.3.26, 11.3.12", "safe": "before 7.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jira-data-center || rpm -q jira-data-center || jira-data-center --version"}, {"label": "2. UPGRADE to 9.12.40 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jira-data-center"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jira-data-center"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison jira-data-center\nsudo apt install jira-data-center=<VERSION_BEFORE_7.1.0>\nsudo apt-mark hold jira-data-center"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jira-data-center\nsudo dnf downgrade jira-data-center-<VERSION_BEFORE_7.1.0>\nsudo dnf versionlock add jira-data-center"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "jira service desk", "vendor": "atlassian", "type": "app", "affected": [">= 3.1.0 and <= 4.13.27"], "fixed": "newer than 4.13.27", "safe": "before 3.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy jira-service-desk || rpm -q jira-service-desk || jira-service-desk --version"}, {"label": "2. UPGRADE to newer than 4.13.27 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade jira-service-desk"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade jira-service-desk"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison jira-service-desk\nsudo apt install jira-service-desk=<VERSION_BEFORE_3.1.0>\nsudo apt-mark hold jira-service-desk"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list jira-service-desk\nsudo dnf downgrade jira-service-desk-<VERSION_BEFORE_3.1.0>\nsudo dnf versionlock add jira-service-desk"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21589"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/BAM-26567"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/BSERV-20604"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/CONFSERVER-104488"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/CRUC-8741"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/CWD-6610"}, {"t": "Issue Tracking, Mitigation", "u": "https://jira.atlassian.com/browse/FE-7583"}], "cwe": ["CWE-552"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-18", "kev_added": "2026-10-15", "ransom": false, "priority": 88, "tier": "P0", "why": ["High severity", "EPSS top 4%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Covered by 3 security sources", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96263, "pocs": [{"kind": "poc", "name": "watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589 (15 stars)", "url": "https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589", "stars": 15}, {"kind": "poc", "name": "tc4dy/CVE-2026-21589-PoC-Exploit (11 stars)", "url": "https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit", "stars": 11}, {"kind": "poc", "name": "MarcusProgram/CVE-2026-21589 (9 stars)", "url": "https://github.com/MarcusProgram/CVE-2026-21589", "stars": 9}, {"kind": "nuclei", "name": "Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "Atlassian security advisory (AV26-1002) - Update 2", "url": "https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1002", "date": "2026-10-15"}, {"src": "Rapid7 Blog", "group": "research", "title": "CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products", "url": "https://www.rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products", "date": "2026-10-07"}, {"src": "watchTowr Labs", "group": "research", "title": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)", "url": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "date": "2026-10-06"}], "buzz": 3}, {"id": "CVE-2026-102764", "publisher": "BeyondTrust", "title": "BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability", "summary": "The vulnerability exists within internal components of BeyondTrust\u2019s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.0118, "kev": true, "added": "2026-10-15", "pub": "2026-10-15T21:17:00.117", "modified": "2026-10-17T04:16:47.117", "products": [{"name": "remote support", "vendor": "beyondtrust", "type": "app", "affected": ["<= 26.2.3"], "fixed": "newer than 26.2.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy remote-support || rpm -q remote-support || remote-support --version"}, {"label": "2. UPGRADE to newer than 26.2.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade remote-support"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade remote-support"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102764"}, {"t": "Vendor Advisory", "u": "https://www.beyondtrust.com/blog/entry/bt26-05"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-19", "kev_added": "2026-10-16", "ransom": false, "priority": 87, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Covered by 7 security sources", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.67457, "pinned": false, "pocs": [{"kind": "poc", "name": "Worthes/CVE-2026-102764-Proof-of-concept (3 stars)", "url": "https://github.com/Worthes/CVE-2026-102764-Proof-of-concept", "stars": 3}, {"kind": "poc", "name": "maxprog-svg/CVE-2026-102764 (0 stars)", "url": "https://github.com/maxprog-svg/CVE-2026-102764", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "HKCERT", "group": "gov", "title": "BeyondTrust Remote Support Security Restriction Bypass Vulnerability", "url": "https://www.hkcert.org/security-bulletin/beyondtrust-remote-support-security-restriction-bypass-vulnerability_20261020", "date": "2026-10-20"}, {"src": "Rapid7 Blog", "group": "research", "title": "CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild", "url": "https://www.rapid7.com/blog/post/etr-cve-2026-102764-critical-beyondtrust-remote-support-authentication-bypass-exploited-in-the-wild", "date": "2026-10-19"}, {"src": "CISA Alerts and Advisories", "group": "gov", "title": "CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support", "url": "https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support", "date": "2026-10-16"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "BeyondTrust security advisory (AV26-1054) \u2013 Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/beyondtrust-security-advisory-av26-1054", "date": "2026-10-16"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support \u2013 CVE-2026-102764", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-025-critical-vulnerability-impacting-beyondtrust-remote-support-cve-2026-102764", "date": "2026-10-16"}, {"src": "CERT-SE Sweden", "group": "gov", "title": "BeyondTrust varnar f\u00f6r kritisk nolldagss\u00e5rbarhet", "url": "https://www.cert.se/2026/10/beyondtrust-varnar-for-kritisk-nolldagssarbarhet.html", "date": "2026-10-16"}, {"src": "NCSC Netherlands", "group": "gov", "title": "NCSC-2026-0437 [1.00] [H/H] Kwetsbaarheid verholpen in BeyondTrust Remote Support", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0437", "date": "2026-10-16"}, {"src": "Mandiant / Google Cloud Threat Intel", "group": "research", "title": "ARMORY CASTLE Exploits BeyondTrust", "url": "https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/", "date": "2026-10-15"}], "buzz": 7}, {"id": "CVE-2025-61624", "publisher": "Fortinet, Inc.", "title": "Fortinet Multiple Products Path Traversal Vulnerability", "summary": "An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all ve", "cvss": 6.0, "sev": "MEDIUM", "epss": 0.01081, "kev": true, "added": "2026-04-14", "pub": "2026-04-14T16:16:31.300", "modified": "2026-10-17T04:16:43.363", "products": [{"name": "fortios", "vendor": "fortinet", "type": "os", "affected": [">= 6.4.0 and < 7.4.10", ">= 7.6.0 and < 7.6.5"], "fixed": "7.4.10, 7.6.5", "safe": "before 6.4.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fortipam", "vendor": "fortinet", "type": "os", "affected": [">= 1.0.0 and < 1.7.1"], "fixed": "1.7.1", "safe": "before 1.0.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fortiproxy", "vendor": "fortinet", "type": "app", "affected": [">= 7.0.0 and < 7.4.12", ">= 7.6.0 and < 7.6.5"], "fixed": "7.4.12, 7.6.5", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiproxy || rpm -q fortiproxy || fortiproxy --version"}, {"label": "2. UPGRADE to 7.4.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiproxy"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiproxy"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiproxy\nsudo apt install fortiproxy=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold fortiproxy"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiproxy\nsudo dnf downgrade fortiproxy-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add fortiproxy"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fortiswitchmanager", "vendor": "fortinet", "type": "app", "affected": [">= 7.0.0 and < 7.0.7", ">= 7.2.0 and < 7.2.8"], "fixed": "7.0.7, 7.2.8", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiswitchmanager || rpm -q fortiswitchmanager || fortiswitchmanager --version"}, {"label": "2. UPGRADE to 7.0.7 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiswitchmanager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiswitchmanager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiswitchmanager\nsudo apt install fortiswitchmanager=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold fortiswitchmanager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiswitchmanager\nsudo dnf downgrade fortiswitchmanager-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add fortiswitchmanager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ruggedcom ape1808 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-61624"}, {"t": "Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-19", "kev_added": "2026-10-16", "ransom": false, "priority": 62, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.64866, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "HKCERT", "group": "gov", "title": "Fortinet Products Elevation of Privilege Vulnerability", "url": "https://www.hkcert.org/security-bulletin/fortinet-products-elevation-of-privilege-vulnerability_20261020", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-96951", "publisher": "Microsoft Corporation", "title": "Microsoft Windows Command Injection Vulnerability", "summary": "Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01512, "kev": true, "added": "2026-10-13", "pub": "2026-10-13T19:22:07.760", "modified": "2026-10-16T17:18:00.760", "products": [{"name": "outlook web", "vendor": "microsoft", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy outlook-web || rpm -q outlook-web || outlook-web --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9612"], "fixed": "10.0.14393.9612", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9376"], "fixed": "10.0.17763.9376", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7807"], "fixed": "10.0.19044.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7807"], "fixed": "10.0.19045.7807", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7652"], "fixed": "10.0.22631.7652", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-96951"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": false, "kev_due": "2026-10-16", "kev_added": "2026-10-13", "ransom": false, "priority": 79, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.74285, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows Server 2012 R2", "pkg": "KB5126836", "status": "fixed", "fixed": "6.3.9600.23470", "cmd": "Install KB5126836 via Windows Update, then verify:\nGet-HotFix -Id KB5126836", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836", "note": "KB5126836"}, {"os": "Windows Server 2012 R2 (Server Core installation)", "pkg": "KB5126836", "status": "fixed", "fixed": "6.3.9600.23470", "cmd": "Install KB5126836 via Windows Update, then verify:\nGet-HotFix -Id KB5126836", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836", "note": "KB5126836"}, {"os": "Windows 10 Version 1607 for 32-bit Systems", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows 10 Version 1607 for x64-based Systems", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}, {"os": "Windows Server 2016", "pkg": "KB5126868", "status": "fixed", "fixed": "10.0.14393.9612", "cmd": "Install KB5126868 via Windows Update, then verify:\nGet-HotFix -Id KB5126868", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868", "note": "KB5126868"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-0322", "publisher": "Palo Alto Networks, Inc.", "title": "Palo Alto Networks PAN-OS Code Injection Vulnerability", "summary": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.", "cvss": 7.2, "sev": "HIGH", "epss": 0.01215, "kev": true, "added": "2026-10-14", "pub": "2026-10-14T18:17:07.743", "modified": "2026-10-15T13:47:26.713", "products": [{"name": "pan-os", "vendor": "paloaltonetworks", "type": "os", "affected": ["< 10.2.0", ">= 12.2.0 and < 12.2.4", "10.2.7", "10.2.7 h1", "10.2.7 h12", "10.2.7 h16", "10.2.7 h18", "10.2.7 h19"], "fixed": "10.2.0, 12.2.4", "safe": "before 10.2.7", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322"}, {"t": "Vendor Advisory", "u": "https://security.paloaltonetworks.com/CVE-2026-0322"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-17", "kev_added": "2026-10-14", "ransom": false, "priority": 67, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.68361, "pinned": false, "pocs": [{"kind": "poc", "name": "Ife-ella/CVE-vulnerability (0 stars)", "url": "https://github.com/Ife-ella/CVE-vulnerability", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "Palo Alto Networks security advisory (AV26-1041) - Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-1041", "date": "2026-10-15"}, {"src": "Palo Alto Networks", "group": "vendor", "title": "CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)", "url": "https://security.paloaltonetworks.com/CVE-2026-0322", "date": "2026-10-15"}], "buzz": 2}, {"id": "CVE-2026-76519", "publisher": "Cisco Systems, Inc.", "title": "Cisco Secure Email Gateway Relative Path Traversal Vulnerability", "summary": "A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\r\n\r\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A ", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01573, "kev": true, "added": "2026-10-14", "pub": "2026-10-14T17:19:10.747", "modified": "2026-10-15T13:47:19.470", "products": [{"name": "asyncos", "vendor": "cisco", "type": "os", "affected": [">= 15.0 and < 15.5.5-014", ">= 16.0 and < 16.5.0-780"], "fixed": "15.5.5-014, 16.5.0-780", "safe": "before 15.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76519"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp"}], "cwe": ["CWE-23"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-17", "kev_added": "2026-10-14", "ransom": false, "priority": 89, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Covered by 3 security sources", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.75231, "pinned": false, "pocs": [{"kind": "poc", "name": "Mickysalivan/CVE-2026-76519-Proof-of-concept (0 stars)", "url": "https://github.com/Mickysalivan/CVE-2026-76519-Proof-of-concept", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "HKCERT", "group": "gov", "title": "Cisco Secure Email Gateway Remote Code Execution Vulnerability", "url": "https://www.hkcert.org/security-bulletin/cisco-secure-email-gateway-remote-code-execution-vulnerability_20261015", "date": "2026-10-15"}, {"src": "Canadian Cyber Centre", "group": "gov", "title": "Cisco security advisory (AV26-1042) \u2013 Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1042", "date": "2026-10-14"}, {"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Email%20Gateway%20Arbitrary%20File%20Write%20Vulnerability%26vs_k=1", "date": "2026-10-14"}], "buzz": 3}, {"id": "CVE-2026-105134", "publisher": "VulDB", "title": "Ahsay AhsayCBS Command Injection Vulnerability", "summary": "A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is a", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.3831, "kev": true, "added": "2026-10-04", "pub": "2026-10-04T07:16:33.480", "modified": "2026-10-15T13:47:12.400", "products": [{"name": "cloud backup suite", "vendor": "ahsay", "type": "app", "affected": ["< 10.3.4"], "fixed": "10.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cloud-backup-suite || rpm -q cloud-backup-suite || cloud-backup-suite --version"}, {"label": "2. UPGRADE to 10.3.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cloud-backup-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cloud-backup-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134"}], "cwe": ["CWE-77", "CWE-78"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-17", "kev_added": "2026-10-14", "ransom": false, "priority": 93, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98568, "pinned": false, "pocs": [{"kind": "poc", "name": "RayanAlmulhim/CVE-2026-105134-lab (0 stars)", "url": "https://github.com/RayanAlmulhim/CVE-2026-105134-lab", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Huntress", "group": "research", "title": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer", "url": "https://www.huntress.com/blog/ahsaycbs-flaws-exploit", "date": "2026-10-08"}], "buzz": 1}, {"id": "CVE-2026-105133", "publisher": "VulDB", "title": "Ahsay AhsayCBS Improper Authentication Vulnerability", "summary": "A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected", "cvss": 7.3, "sev": "HIGH", "epss": 0.05794, "kev": true, "added": "2026-10-04", "pub": "2026-10-04T07:16:33.087", "modified": "2026-10-15T13:47:06.283", "products": [{"name": "cloud backup suite", "vendor": "ahsay", "type": "app", "affected": ["< 10.3.4"], "fixed": "10.3.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy cloud-backup-suite || rpm -q cloud-backup-suite || cloud-backup-suite --version"}, {"label": "2. UPGRADE to 10.3.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade cloud-backup-suite"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade cloud-backup-suite"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-105133"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-17", "kev_added": "2026-10-14", "ransom": false, "priority": 79, "tier": "P0", "why": ["High severity", "EPSS top 7%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.93098, "pocs": [{"kind": "poc", "name": "horizon3ai/AhsayCBS-Auth-Bypass-RCE (4 stars)", "url": "https://github.com/horizon3ai/AhsayCBS-Auth-Bypass-RCE", "stars": 4}, {"kind": "nuclei", "name": "AhsayCBS - JSON API Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-105133.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Huntress", "group": "research", "title": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer", "url": "https://www.huntress.com/blog/ahsaycbs-flaws-exploit", "date": "2026-10-08"}], "buzz": 1}, {"id": "CVE-2026-53362", "publisher": "kernel.org", "title": "Linux Kernel Unspecified Vulnerability", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: account for fraggap on the paged allocation path\n\nIn __ip6_append_data(), when the paged-allocation branch is taken\n(MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are\ncomputed as\n\n\talloclen = fragheaderlen + transhdrlen;\n\tpagedlen = datalen - transhdrlen;\n\ndatalen already includes fraggap (datalen = length + fraggap). When\nfraggap is non-zero, this is not t", "cvss": 7.8, "sev": "HIGH", "epss": 0.00709, "kev": true, "added": "2026-07-04", "pub": "2026-07-04T12:17:02.113", "modified": "2026-10-15T13:46:55.187", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 6.0 and < 6.1.177", ">= 6.2 and < 6.6.144", ">= 6.7 and < 6.12.95", ">= 6.13 and < 6.18.38", ">= 6.19 and < 7.1.3"], "fixed": "6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "simatic s7-1500 tm mfp firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53362"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e"}], "cwe": ["CWE-787", "CWE-122"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-08-30", "kev_added": "2026-08-27", "ransom": false, "priority": 71, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.52994, "pinned": false, "pocs": [{"kind": "poc", "name": "suominen/ipv6_frag_escape (0 stars)", "url": "https://github.com/suominen/ipv6_frag_escape", "stars": 0}, {"kind": "writeup", "name": "cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-147.147", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-147.147\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.177-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.177-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.95-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.95-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.30.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:34911\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-55.86.1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:35840\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1938", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53362.html", "note": "ALAS2023-2026-1938"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-104935", "publisher": "ivanti", "title": "Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability", "summary": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "cvss": 8.6, "sev": "HIGH", "epss": 0.25982, "kev": true, "added": "2026-10-13", "pub": "2026-10-13T16:17:11.640", "modified": "2026-10-13T19:24:36.243", "products": [{"name": "connect secure", "vendor": "ivanti", "type": "app", "affected": [">= 25.1.0.0 and < 25.1.1.2", ">= 25.1.2.0 and < 25.1.3.0", "22.8 r2", "22.8 r2.1", "22.8 r2.2", "22.8 r2.3", "22.8 r2.4"], "fixed": "25.1.1.2, 25.1.3.0", "safe": "before 22.8", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy connect-secure || rpm -q connect-secure || connect-secure --version"}, {"label": "2. UPGRADE to 25.1.1.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade connect-secure"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade connect-secure"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 22.8 (Debian / Ubuntu)", "cmd": "apt-cache madison connect-secure\nsudo apt install connect-secure=<VERSION_BEFORE_22.8>\nsudo apt-mark hold connect-secure"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list connect-secure\nsudo dnf downgrade connect-secure-<VERSION_BEFORE_22.8>\nsudo dnf versionlock add connect-secure"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104935"}, {"t": "Vendor Advisory", "u": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935"}], "cwe": ["CWE-290"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-16", "kev_added": "2026-10-13", "ransom": false, "priority": 91, "tier": "P0", "why": ["High severity", "EPSS top 2%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Covered by 4 security sources", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.97984, "pocs": [{"kind": "poc", "name": "ApexBreach/CVE-2026-104935-Proof-of-concept (1 stars)", "url": "https://github.com/ApexBreach/CVE-2026-104935-Proof-of-concept", "stars": 1}, {"kind": "poc", "name": "0x45dd/ivanti-cve-2026-104935-check (0 stars)", "url": "https://github.com/0x45dd/ivanti-cve-2026-104935-check", "stars": 0}, {"kind": "poc", "name": "maxprog-svg/CVE-2026-104935 (0 stars)", "url": "https://github.com/maxprog-svg/CVE-2026-104935", "stars": 0}, {"kind": "nuclei", "name": "Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-104935.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "Ivanti security advisory (AV26-1035) - Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035", "date": "2026-10-16"}, {"src": "CERT-FR Alerts", "group": "gov", "title": "Vuln\u00e9rabilit\u00e9 dans Ivanti Connect Secure (ICS) (14 octobre 2026)", "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-013/", "date": "2026-10-14"}, {"src": "Dark Reading", "group": "news", "title": "Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles", "url": "https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching", "date": "2026-10-14"}, {"src": "Rapid7 Blog", "group": "research", "title": "Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)", "url": "https://www.rapid7.com/blog/post/etr-ivanti-connect-secure-zero-day-exploited-in-the-wild-cve-2026-104935", "date": "2026-10-13"}], "buzz": 4}, {"id": "CVE-2026-102489", "publisher": "Dutch Institute for Vulnerability Disclosure", "title": "Zammad GmbH Zammad Session Fixation Vulnerability", "summary": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01255, "kev": true, "added": "2026-09-30", "pub": "2026-09-30T17:16:40.550", "modified": "2026-10-10T04:18:08.040", "products": [{"name": "zammad", "vendor": "zammad", "type": "app", "affected": [">= 6.3.0 and <= 6.5.4"], "fixed": "newer than 6.5.4", "safe": "before 6.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zammad || rpm -q zammad || zammad --version"}, {"label": "2. UPGRADE to newer than 6.5.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zammad"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zammad"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 6.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison zammad\nsudo apt install zammad=<VERSION_BEFORE_6.3.0>\nsudo apt-mark hold zammad"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list zammad\nsudo dnf downgrade zammad-<VERSION_BEFORE_6.3.0>\nsudo dnf versionlock add zammad"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102489"}, {"t": "Vendor Advisory", "u": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2"}, {"t": "Vendor Advisory", "u": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"}], "cwe": ["CWE-384"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-05", "kev_added": "2026-10-02", "ransom": false, "priority": 87, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.69301, "pinned": false, "pocs": [{"kind": "poc", "name": "horizon3ai/CVE-2026-102489 (6 stars)", "url": "https://github.com/horizon3ai/CVE-2026-102489", "stars": 6}, {"kind": "poc", "name": "1xPwn/CVE-2026-102489 (6 stars)", "url": "https://github.com/1xPwn/CVE-2026-102489", "stars": 6}, {"kind": "poc", "name": "Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce (0 stars)", "url": "https://github.com/Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2015-5477", "publisher": "MITRE", "title": " ISC BIND Data Processing Errors Vulnerability", "summary": "named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.", "cvss": 7.5, "sev": "HIGH", "epss": 0.99409, "kev": true, "added": "2015-07-29", "pub": "2015-07-29T14:59:05.397", "modified": "2026-10-09T19:12:37.977", "products": [{"name": "junos", "vendor": "juniper", "type": "os", "affected": ["< 12.1", ">= 13.1 and < 13.2", "12.1", "12.1 r11", "12.1r", "12.1x44", "12.1x44 d10", "12.1x44 d15"], "fixed": "12.1, 13.2", "safe": "before 12.1", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["21", "22"], "fixed": null, "safe": "before 21", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["5.0", "6.0", "7.0"], "fixed": null, "safe": "before 5.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux aus", "vendor": "redhat", "type": "os", "affected": ["6.4", "6.5", "6.6"], "fixed": null, "safe": "before 6.4", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["7.0", "8.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "vm server", "vendor": "oracle", "type": "app", "affected": ["3.2"], "fixed": null, "safe": "before 3.2", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy vm-server || rpm -q vm-server || vm-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.2 (Debian / Ubuntu)", "cmd": "apt-cache madison vm-server\nsudo apt install vm-server=<VERSION_BEFORE_3.2>\nsudo apt-mark hold vm-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list vm-server\nsudo dnf downgrade vm-server-<VERSION_BEFORE_3.2>\nsudo dnf versionlock add vm-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-5477"}, {"t": "Mitigation, Third Party Advisory", "u": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718"}, {"t": "Patch, Vendor Advisory", "u": "https://kb.isc.org/article/AA-01272"}, {"t": "Mitigation, Third Party Advisory", "u": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718"}, {"t": "Patch, Vendor Advisory", "u": "https://kb.isc.org/article/AA-01272"}], "cwe": ["CWE-19", "CWE-617"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-11", "kev_added": "2026-10-08", "ransom": false, "priority": 91, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.99942, "pocs": [{"kind": "poc", "name": "robertdavidgraham/cve-2015-5477 (64 stars)", "url": "https://github.com/robertdavidgraham/cve-2015-5477", "stars": 64}, {"kind": "poc", "name": "elceef/tkeypoc (14 stars)", "url": "https://github.com/elceef/tkeypoc", "stars": 14}, {"kind": "poc", "name": "hmlio/vaas-cve-2015-5477 (1 stars)", "url": "https://github.com/hmlio/vaas-cve-2015-5477", "stars": 1}, {"kind": "writeup", "name": "kb.isc.org/article/AA-01272", "url": "https://kb.isc.org/article/AA-01272"}, {"kind": "writeup", "name": "kb.isc.org/article/AA-01306", "url": "https://kb.isc.org/article/AA-01306"}, {"kind": "edb", "name": "ISC BIND 9 - TKEY (PoC)", "url": "https://www.exploit-db.com/exploits/37721"}, {"kind": "edb", "name": "ISC BIND 9 - TKEY Remote Denial of Service (PoC)", "url": "https://www.exploit-db.com/exploits/37723"}, {"kind": "msf", "name": "BIND TKEY Query Denial of Service", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "bind9", "status": "fixed", "fixed": "1:9.9.5.dfsg-11", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.9.5.dfsg-11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "bind9", "status": "fixed", "fixed": "1:9.9.5.dfsg-11", "cmd": "sudo apt update && sudo apt install --only-upgrade bind9\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' bind9)\" ge \"1:9.9.5.dfsg-11\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 5", "pkg": "bind", "status": "fixed", "fixed": "bind-9.3.6-25.P1.el5_11.3", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:1514\nrpm -q bind", "url": null, "note": null}, {"os": "RHEL 5", "pkg": "bind97", "status": "fixed", "fixed": "bind97-9.7.0-21.P2.el5_11.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:1515\nrpm -q bind97", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "bind", "status": "fixed", "fixed": "bind-9.8.2-0.37.rc1.el6_7.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:1513\nrpm -q bind", "url": null, "note": null}, {"os": "RHEL 6.4 Advanced Update Support", "pkg": "bind", "status": "fixed", "fixed": "bind-9.8.2-0.17.rc1.el6_4.7", "cmd": "sudo dnf upgrade --advisory=RHSA-2016:0078\nrpm -q bind", "url": null, "note": null}, {"os": "RHEL 6.5 Advanced Update Support", "pkg": "bind", "status": "fixed", "fixed": "bind-9.8.2-0.23.rc1.el6_5.2", "cmd": "sudo dnf upgrade --advisory=RHSA-2016:0078\nrpm -q bind", "url": null, "note": null}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2015-573", "url": "https://alas.aws.amazon.com/cve/html/CVE-2015-5477.html", "note": "ALAS-2015-573"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2015-3306", "publisher": "MITRE", "title": "ProFTPD Improper Access Control Vulnerability", "summary": "The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.99497, "kev": true, "added": "2015-05-18", "pub": "2015-05-18T15:59:10.743", "modified": "2026-10-09T16:17:18.210", "products": [{"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["20", "21", "22"], "fixed": null, "safe": "before 20", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "debian linux", "vendor": "debian", "type": "os", "affected": ["7.0", "8.0", "9.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "tumbleweed", "vendor": "opensuse", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "linux enterprise server", "vendor": "suse", "type": "os", "affected": ["15 sp7"], "fixed": null, "safe": "before 15", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "linux enterprise server", "vendor": "suse", "type": "os", "affected": ["15 sp7"], "fixed": null, "safe": "before 15", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "proftpd", "vendor": "proftpd", "type": "app", "affected": ["1.3.5"], "fixed": null, "safe": "before 1.3.5", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy proftpd || rpm -q proftpd || proftpd --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 1.3.5 (Debian / Ubuntu)", "cmd": "apt-cache madison proftpd\nsudo apt install proftpd=<VERSION_BEFORE_1.3.5>\nsudo apt-mark hold proftpd"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list proftpd\nsudo dnf downgrade proftpd-<VERSION_BEFORE_1.3.5>\nsudo dnf versionlock add proftpd"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-3306"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-11", "kev_added": "2026-10-08", "ransom": false, "priority": 100, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.99946, "pocs": [{"kind": "poc", "name": "t0kx/exploit-CVE-2015-3306 (152 stars)", "url": "https://github.com/t0kx/exploit-CVE-2015-3306", "stars": 152}, {"kind": "poc", "name": "nootropics/propane (2 stars)", "url": "https://github.com/nootropics/propane", "stars": 2}, {"kind": "edb", "name": "ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)", "url": "https://www.exploit-db.com/exploits/37262"}, {"kind": "edb", "name": "ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution", "url": "https://www.exploit-db.com/exploits/36803"}, {"kind": "edb", "name": "ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)", "url": "https://www.exploit-db.com/exploits/49908"}, {"kind": "edb", "name": "ProFTPd 1.3.5 - File Copy", "url": "https://www.exploit-db.com/exploits/36742"}, {"kind": "msf", "name": "ProFTPD 1.3.5 Mod_Copy Command Execution", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"}, {"kind": "nuclei", "name": "ProFTPd - Remote Code Execution", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Debian 12", "pkg": "proftpd-dfsg", "status": "fixed", "fixed": "1.3.5-2", "cmd": "sudo apt update && sudo apt install --only-upgrade proftpd-dfsg\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' proftpd-dfsg)\" ge \"1.3.5-2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "proftpd-dfsg", "status": "fixed", "fixed": "1.3.5-2", "cmd": "sudo apt update && sudo apt install --only-upgrade proftpd-dfsg\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' proftpd-dfsg)\" ge \"1.3.5-2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2016-3081", "publisher": "Red Hat, Inc.", "title": "Apache Struts Command Injection Vulnerability", "summary": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", "cvss": 8.1, "sev": "HIGH", "epss": 0.96052, "kev": true, "added": "2016-04-26", "pub": "2016-04-26T14:59:02.207", "modified": "2026-10-09T14:43:05.703", "products": [{"name": "agile controller-campus firmware", "vendor": "huawei", "type": "os", "affected": ["v100r002c00"], "fixed": null, "safe": "before v100r002c00", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "anyoffice", "vendor": "huawei", "type": "app", "affected": ["v200r005c00", "v200r006c00"], "fixed": null, "safe": "before v200r005c00", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy anyoffice || rpm -q anyoffice || anyoffice --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before v200r005c00 (Debian / Ubuntu)", "cmd": "apt-cache madison anyoffice\nsudo apt install anyoffice=<VERSION_BEFORE_v200r005c00>\nsudo apt-mark hold anyoffice"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list anyoffice\nsudo dnf downgrade anyoffice-<VERSION_BEFORE_v200r005c00>\nsudo dnf versionlock add anyoffice"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "logcenter", "vendor": "huawei", "type": "app", "affected": ["v100r001c10", "v100r001c20"], "fixed": null, "safe": "before v100r001c10", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy logcenter || rpm -q logcenter || logcenter --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before v100r001c10 (Debian / Ubuntu)", "cmd": "apt-cache madison logcenter\nsudo apt install logcenter=<VERSION_BEFORE_v100r001c10>\nsudo apt-mark hold logcenter"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list logcenter\nsudo dnf downgrade logcenter-<VERSION_BEFORE_v100r001c10>\nsudo dnf versionlock add logcenter"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "firehunter6000 firmware", "vendor": "huawei", "type": "os", "affected": ["v100r001c20"], "fixed": null, "safe": "before v100r001c20", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "oceanstor 5300 v3 firmware", "vendor": "huawei", "type": "os", "affected": ["v300r001", "v300r002", "v300r003c00", "v300r003c10"], "fixed": null, "safe": "before v300r001", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "oceanstor 5500 v3 firmware", "vendor": "huawei", "type": "os", "affected": ["v300r001", "v300r002", "v300r003c00", "v300r003c10"], "fixed": null, "safe": "before v300r001", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2016-3081"}, {"t": "Patch, Third Party Advisory", "u": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"t": "Patch, Vendor Advisory", "u": "https://struts.apache.org/docs/s2-032.html"}, {"t": "Patch, Third Party Advisory", "u": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"t": "Patch, Vendor Advisory", "u": "https://struts.apache.org/docs/s2-032.html"}], "cwe": ["CWE-77"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-11", "kev_added": "2026-10-08", "ransom": false, "priority": 93, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.99879, "pocs": [{"kind": "writeup", "name": "www.exploit-db.com/exploits/39756/", "url": "https://www.exploit-db.com/exploits/39756/"}, {"kind": "edb", "name": "Apache Struts - Dynamic Method Invocation Remote Code Execution (Metasploit)", "url": "https://www.exploit-db.com/exploits/39756"}, {"kind": "msf", "name": "Apache Struts Dynamic Method Invocation Remote Code Execution", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_dmi_exec.rb"}, {"kind": "nuclei", "name": "Apache S2-032 Struts - Remote Code Execution", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3081.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Maven", "pkg": "org.apache.struts:struts2-core", "status": "fixed", "fixed": "2.3.20.3", "cmd": "Set org.apache.struts:struts2-core to 2.3.20.3 or later in pom.xml or build.gradle, then rebuild and redeploy.", "url": "https://github.com/advisories/GHSA-8c6j-ffmf-q6vm", "note": "vulnerable: >= 2.3.19, <= 2.3.20.2"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-102490", "publisher": "Dutch Institute for Vulnerability Disclosure", "title": "Zammad GmbH Zammad Improper Privilege Management Vulnerability", "summary": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seco", "cvss": 7.8, "sev": "HIGH", "epss": 0.0055, "kev": true, "added": "2026-09-30", "pub": "2026-09-30T17:16:40.707", "modified": "2026-10-09T14:21:05.030", "products": [{"name": "zammad", "vendor": "zammad", "type": "app", "affected": ["< 7.2.2"], "fixed": "7.2.2", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy zammad || rpm -q zammad || zammad --version"}, {"label": "2. UPGRADE to 7.2.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade zammad"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade zammad"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-102490"}, {"t": "Vendor Advisory", "u": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq"}, {"t": "Vendor Advisory", "u": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"}], "cwe": ["CWE-269"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-10-05", "kev_added": "2026-10-02", "ransom": false, "priority": 64, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.45264, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2021-3199", "publisher": "MITRE", "title": "ONLYOFFICE Docs Server Path Traversal Vulnerability", "summary": "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.20136, "kev": true, "added": "2021-01-26", "pub": "2021-01-26T18:16:28.507", "modified": "2026-10-09T14:20:47.350", "products": [{"name": "document server", "vendor": "onlyoffice", "type": "app", "affected": ["< 5.6.3"], "fixed": "5.6.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy document-server || rpm -q document-server || document-server --version"}, {"label": "2. UPGRADE to 5.6.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade document-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade document-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-3199"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-10-11", "kev_added": "2026-10-08", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 3%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.97454, "pinned": false, "pocs": [{"kind": "writeup", "name": "github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "url": "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py"}, {"kind": "writeup", "name": "github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "url": "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2023-22894", "publisher": "MITRE", "title": "Strapi Cleartext Storage of Sensitive Information Vulnerability", "summary": "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with perm", "cvss": 4.9, "sev": "MEDIUM", "epss": 0.03609, "kev": true, "added": "2023-04-19", "pub": "2023-04-19T16:15:07.303", "modified": "2026-10-09T14:20:41.113", "products": [{"name": "strapi", "vendor": "strapi", "type": "app", "affected": [">= 3.2.1 and < 4.8.0"], "fixed": "4.8.0", "safe": "before 3.2.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy strapi || rpm -q strapi || strapi --version"}, {"label": "2. UPGRADE to 4.8.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade strapi"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade strapi"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison strapi\nsudo apt install strapi=<VERSION_BEFORE_3.2.1>\nsudo apt-mark hold strapi"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list strapi\nsudo dnf downgrade strapi-<VERSION_BEFORE_3.2.1>\nsudo dnf versionlock add strapi"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-22894"}, {"t": "Exploit, Vendor Advisory", "u": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve"}, {"t": "Exploit, Vendor Advisory", "u": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve"}], "cwe": ["CWE-312"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-10-11", "kev_added": "2026-10-08", "ransom": false, "priority": 70, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.89437, "pinned": false, "pocs": [{"kind": "poc", "name": "Saboor-Hakimi/CVE-2023-22894 (13 stars)", "url": "https://github.com/Saboor-Hakimi/CVE-2023-22894", "stars": 13}, {"kind": "poc", "name": "maxntv/CVE-2023-22894-PoC (0 stars)", "url": "https://github.com/maxntv/CVE-2023-22894-PoC", "stars": 0}, {"kind": "writeup", "name": "github.com/strapi/strapi/releases", "url": "https://github.com/strapi/strapi/releases"}, {"kind": "writeup", "name": "strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "url": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve"}, {"kind": "writeup", "name": "www.ghostccamm.com/blog/multi_strapi_vulns/", "url": "https://www.ghostccamm.com/blog/multi_strapi_vulns/"}, {"kind": "poc", "name": "maxntv24/CVE-2023-22894-PoC", "url": "https://github.com/maxntv24/CVE-2023-22894-PoC", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "npm", "pkg": "@strapi/strapi", "status": "fixed", "fixed": "4.8.0", "cmd": "npm install @strapi/strapi@\">=4.8.0\"\nnpm ls @strapi/strapi", "url": "https://github.com/advisories/GHSA-jjqf-j4w7-92w8", "note": "vulnerable: >= 3.2.1, < 4.8.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76460", "publisher": "Cisco Systems, Inc.", "title": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability", "summary": "A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.\r\n\r\nThis vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-b", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.14026, "kev": true, "added": "2026-09-16", "pub": "2026-09-16T21:17:21.430", "modified": "2026-10-07T19:17:40.417", "products": [{"name": "identity services engine", "vendor": "cisco", "type": "app", "affected": ["3.1.0", "3.1.0 patch1", "3.1.0 patch10", "3.1.0 patch11", "3.1.0 patch2", "3.1.0 patch3", "3.1.0 patch4", "3.1.0 patch5"], "fixed": null, "safe": "before 3.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-services-engine || rpm -q identity-services-engine || identity-services-engine --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-services-engine\nsudo apt install identity-services-engine=<VERSION_BEFORE_3.1.0>\nsudo apt-mark hold identity-services-engine"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-services-engine\nsudo dnf downgrade identity-services-engine-<VERSION_BEFORE_3.1.0>\nsudo dnf versionlock add identity-services-engine"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "identity services engine passive identity connector", "vendor": "cisco", "type": "app", "affected": ["3.1.0", "3.1.0 patch1", "3.1.0 patch10", "3.1.0 patch11", "3.1.0 patch2", "3.1.0 patch3", "3.1.0 patch4", "3.1.0 patch5"], "fixed": null, "safe": "before 3.1.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy identity-services-engine-passive-identity-connector || rpm -q identity-services-engine-passive-identity-connector || identity-services-engine-passive-identity-connector --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 3.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison identity-services-engine-passive-identity-connector\nsudo apt install identity-services-engine-passive-identity-connector=<VERSION_BEFORE_3.1.0>\nsudo apt-mark hold identity-services-engine-passive-identity-connector"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list identity-services-engine-passive-identity-connector\nsudo dnf downgrade identity-services-engine-passive-identity-connector-<VERSION_BEFORE_3.1.0>\nsudo dnf versionlock add identity-services-engine-passive-identity-connector"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76460"}, {"t": "Mitigation, Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5"}], "cwe": ["CWE-648"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-19", "kev_added": "2026-09-16", "ransom": false, "priority": 92, "tier": "P0", "why": ["Critical severity", "EPSS top 3%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96555, "pocs": [{"kind": "poc", "name": "S3v3n-JG/CVE-2026-76460 (2 stars)", "url": "https://github.com/S3v3n-JG/CVE-2026-76460", "stars": 2}, {"kind": "nuclei", "name": "Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-58704", "publisher": "Google Devices", "title": "Google Pixel Improper Authorization Vulnerability", "summary": "In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "cvss": 8.8, "sev": "HIGH", "epss": 0.00591, "kev": true, "added": "2026-09-15", "pub": "2026-09-15T19:17:32.297", "modified": "2026-10-07T19:17:39.150", "products": [{"name": "android", "vendor": "google", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-58704"}, {"t": "Vendor Advisory", "u": "https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01"}], "cwe": ["CWE-285", "CWE-693"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-19", "kev_added": "2026-09-16", "ransom": false, "priority": 68, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.4757, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-19490", "publisher": "NetScaler", "title": "Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability", "summary": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.23158, "kev": true, "added": "2026-08-19", "pub": "2026-08-19T13:17:45.000", "modified": "2026-10-07T19:17:36.500", "products": [{"name": "netscaler application delivery controller", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-37.277", ">= 13.1 and < 13.1-63.21", ">= 14.1 and < 14.1-73.32", ">= 14.1-66.68 and <= 14.1-73.32"], "fixed": "13.1-37.277, 13.1-63.21, 14.1-73.32", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-application-delivery-controller || rpm -q netscaler-application-delivery-controller || netscaler-application-delivery-controller --version"}, {"label": "2. UPGRADE to 13.1-37.277 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-application-delivery-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-application-delivery-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-application-delivery-controller\nsudo apt install netscaler-application-delivery-controller=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-application-delivery-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-application-delivery-controller\nsudo dnf downgrade netscaler-application-delivery-controller-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-application-delivery-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "netscaler gateway", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-63.21", ">= 14.1 and < 14.1-73.32"], "fixed": "13.1-63.21, 14.1-73.32", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-gateway || rpm -q netscaler-gateway || netscaler-gateway --version"}, {"label": "2. UPGRADE to 13.1-63.21 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-gateway\nsudo apt install netscaler-gateway=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-gateway\nsudo dnf downgrade netscaler-gateway-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-19490"}, {"t": "Vendor Advisory", "u": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-12", "kev_added": "2026-09-09", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 2%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.97767, "pinned": false, "pocs": [{"kind": "poc", "name": "TarPeg007/CVE-2026-19490 (18 stars)", "url": "https://github.com/TarPeg007/CVE-2026-19490", "stars": 18}, {"kind": "poc", "name": "BishopFox/CVE-2026-19490-check (1 stars)", "url": "https://github.com/BishopFox/CVE-2026-19490-check", "stars": 1}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-104286", "publisher": "Fortinet, Inc.", "title": "Fortinet FortiMail Path Traversal Vulnerability", "summary": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02201, "kev": true, "added": "2026-10-01", "pub": "2026-10-01T20:17:24.010", "modified": "2026-10-07T18:17:15.240", "products": [{"name": "fortimail", "vendor": "fortinet", "type": "app", "affected": [">= 7.2.0 and <= 7.4.8", ">= 7.6.0 and <= 7.6.6", ">= 8.0.0 and <= 8.0.1"], "fixed": "newer than 8.0.1", "safe": "before 7.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortimail || rpm -q fortimail || fortimail --version"}, {"label": "2. UPGRADE to newer than 8.0.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortimail"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortimail"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortimail\nsudo apt install fortimail=<VERSION_BEFORE_7.2.0>\nsudo apt-mark hold fortimail"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortimail\nsudo dnf downgrade fortimail-<VERSION_BEFORE_7.2.0>\nsudo dnf versionlock add fortimail"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-104286"}, {"t": "Mitigation, Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-26-175"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-04", "kev_added": "2026-10-01", "ransom": false, "priority": 88, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.82394, "pinned": false, "pocs": [{"kind": "poc", "name": "ShadowForge-Cyber/CVE-2026-104286-POC (0 stars)", "url": "https://github.com/ShadowForge-Cyber/CVE-2026-104286-POC", "stars": 0}, {"kind": "poc", "name": "techupdate24/fortimail-zero-day-cve-2026-104286 (0 stars)", "url": "https://github.com/techupdate24/fortimail-zero-day-cve-2026-104286", "stars": 0}, {"kind": "poc", "name": "kh20134/fortimail-cve-2026-104286-response (0 stars)", "url": "https://github.com/kh20134/fortimail-cve-2026-104286-response", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "CERT-SE Sweden", "group": "gov", "title": "Kritisk s\u00e5rbarhet i FortiMail", "url": "https://www.cert.se/2026/10/kritisk-sarbarhet-i-fortimail.html", "date": "2026-10-02"}], "buzz": 1}, {"id": "CVE-2025-25249", "publisher": "Fortinet, Inc.", "title": "Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability", "summary": "A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets", "cvss": 8.1, "sev": "HIGH", "epss": 0.03802, "kev": true, "added": "2026-01-13", "pub": "2026-01-13T17:15:56.910", "modified": "2026-10-07T18:17:13.180", "products": [{"name": "fortios", "vendor": "fortinet", "type": "os", "affected": [">= 6.4.0 and < 7.0.18", ">= 7.2.0 and < 7.2.12", ">= 7.4.0 and < 7.4.9", ">= 7.6.0 and < 7.6.4"], "fixed": "7.0.18, 7.2.12, 7.4.9, 7.6.4", "safe": "before 6.4.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fortiswitchmanager", "vendor": "fortinet", "type": "app", "affected": [">= 7.0.0 and < 7.0.6", ">= 7.2.0 and < 7.2.7"], "fixed": "7.0.6, 7.2.7", "safe": "before 7.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortiswitchmanager || rpm -q fortiswitchmanager || fortiswitchmanager --version"}, {"label": "2. UPGRADE to 7.0.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade fortiswitchmanager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade fortiswitchmanager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison fortiswitchmanager\nsudo apt install fortiswitchmanager=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold fortiswitchmanager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortiswitchmanager\nsudo dnf downgrade fortiswitchmanager-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add fortiswitchmanager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "fortisase", "vendor": "fortinet", "type": "app", "affected": ["25.1.39", "25.1.51"], "fixed": null, "safe": "before 25.1.39", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy fortisase || rpm -q fortisase || fortisase --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 25.1.39 (Debian / Ubuntu)", "cmd": "apt-cache madison fortisase\nsudo apt install fortisase=<VERSION_BEFORE_25.1.39>\nsudo apt-mark hold fortisase"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list fortisase\nsudo dnf downgrade fortisase-<VERSION_BEFORE_25.1.39>\nsudo dnf versionlock add fortisase"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ruggedcom ape1808 firmware", "vendor": "siemens", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2025-25249"}, {"t": "Mitigation, Vendor Advisory", "u": "https://fortiguard.fortinet.com/psirt/FG-IR-25-084"}], "cwe": ["CWE-122", "CWE-787"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-12", "kev_added": "2026-09-09", "ransom": false, "priority": 86, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.8997, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-88779", "publisher": "NetScaler", "title": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "summary": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.", "cvss": 7.5, "sev": "HIGH", "epss": 0.00592, "kev": true, "added": "2026-10-04", "pub": "2026-10-04T04:16:43.680", "modified": "2026-10-05T13:35:24.663", "products": [{"name": "netscaler application delivery controller", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-37.282", ">= 13.1 and < 13.1-64.28", ">= 14.1 and < 14.1-73.41", ">= 14.1-66.68 and <= 14.1-73.41"], "fixed": "13.1-37.282, 13.1-64.28, 14.1-73.41", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-application-delivery-controller || rpm -q netscaler-application-delivery-controller || netscaler-application-delivery-controller --version"}, {"label": "2. UPGRADE to 13.1-37.282 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-application-delivery-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-application-delivery-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-application-delivery-controller\nsudo apt install netscaler-application-delivery-controller=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-application-delivery-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-application-delivery-controller\nsudo dnf downgrade netscaler-application-delivery-controller-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-application-delivery-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "netscaler gateway", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-64.28", ">= 14.1 and < 14.1-73.41"], "fixed": "13.1-64.28, 14.1-73.41", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-gateway || rpm -q netscaler-gateway || netscaler-gateway --version"}, {"label": "2. UPGRADE to 13.1-64.28 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-gateway\nsudo apt install netscaler-gateway=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-gateway\nsudo dnf downgrade netscaler-gateway-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-88779"}, {"t": "Vendor Advisory", "u": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"}, {"t": "Mitigation, Vendor Advisory", "u": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-07", "kev_added": "2026-10-04", "ransom": false, "priority": 68, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47623, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Rapid7 Blog", "group": "research", "title": "Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779", "url": "https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779", "date": "2026-10-19"}, {"src": "CERT-FR Alerts", "group": "gov", "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et Gateway (28 septembre 2026)", "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-011/", "date": "2026-09-28"}], "buzz": 2}, {"id": "CVE-2026-76504", "publisher": "Cisco Systems, Inc.", "title": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability", "summary": "A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.\r\n\r\nThis vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01819, "kev": true, "added": "2026-09-30", "pub": "2026-09-30T13:17:20.247", "modified": "2026-10-03T00:16:39.140", "products": [{"name": "catalyst sd-wan manager", "vendor": "cisco", "type": "app", "affected": ["< 20.9.10.1", ">= 20.12 and < 20.12.8.2", ">= 20.15 and < 20.15.6.1", ">= 20.18 and < 20.18.4.1", ">= 26.1 and < 26.1.2.1", "26.2"], "fixed": "20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1", "safe": "before 20.12", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy catalyst-sd-wan-manager || rpm -q catalyst-sd-wan-manager || catalyst-sd-wan-manager --version"}, {"label": "2. UPGRADE to 20.9.10.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade catalyst-sd-wan-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade catalyst-sd-wan-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 20.12 (Debian / Ubuntu)", "cmd": "apt-cache madison catalyst-sd-wan-manager\nsudo apt install catalyst-sd-wan-manager=<VERSION_BEFORE_20.12>\nsudo apt-mark hold catalyst-sd-wan-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list catalyst-sd-wan-manager\nsudo dnf downgrade catalyst-sd-wan-manager-<VERSION_BEFORE_20.12>\nsudo dnf versionlock add catalyst-sd-wan-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504"}, {"t": "Mitigation, Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU"}], "cwe": ["CWE-177"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-10-03", "kev_added": "2026-09-30", "ransom": false, "priority": 87, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.78591, "pinned": false, "pocs": [{"kind": "poc", "name": "ShadowForge-Cyber/CVE-2026-76504-Proof-of-concept (2 stars)", "url": "https://github.com/ShadowForge-Cyber/CVE-2026-76504-Proof-of-concept", "stars": 2}, {"kind": "poc", "name": "pastelghost3/cve-2026-76504-nuclei (0 stars)", "url": "https://github.com/pastelghost3/cve-2026-76504-nuclei", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20API%20Authentication%20Bypass%20Vulnerability%26vs_k=1", "date": "2026-10-02"}], "buzz": 1}, {"id": "CVE-2015-3246", "publisher": "Red Hat, Inc.", "title": "Red Hat Libuser Race Condition Vulnerability", "summary": "libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.", "cvss": 7.4, "sev": "HIGH", "epss": 0.08503, "kev": true, "added": "2015-08-11", "pub": "2015-08-11T14:59:07.040", "modified": "2026-10-02T11:33:29.473", "products": [{"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["5.0", "6.0", "7.0"], "fixed": null, "safe": "before 5.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "opensuse", "vendor": "opensuse", "type": "os", "affected": ["13.2"], "fixed": null, "safe": "before 13.2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "libuser", "vendor": "libuser project", "type": "app", "affected": ["< 0.56.13-8", ">= 0.60 and < 0.60-7"], "fixed": "0.56.13-8, 0.60-7", "safe": "before 0.60", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy libuser || rpm -q libuser || libuser --version"}, {"label": "2. UPGRADE to 0.56.13-8 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade libuser"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade libuser"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.60 (Debian / Ubuntu)", "cmd": "apt-cache madison libuser\nsudo apt install libuser=<VERSION_BEFORE_0.60>\nsudo apt-mark hold libuser"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list libuser\nsudo dnf downgrade libuser-<VERSION_BEFORE_0.60>\nsudo dnf versionlock add libuser"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-3246"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-1482.html"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-1483.html"}, {"t": "Mitigation, Vendor Advisory", "u": "https://access.redhat.com/articles/1537873"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-1482.html"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-1483.html"}, {"t": "Mitigation, Vendor Advisory", "u": "https://access.redhat.com/articles/1537873"}], "cwe": ["CWE-264", "CWE-367"], "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "H", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-09-09", "kev_added": "2026-08-26", "ransom": false, "priority": 85, "tier": "P0", "why": ["High severity", "EPSS top 5%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.95035, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2015-3246 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2015-3246", "stars": 0}, {"kind": "writeup", "name": "blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into", "url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"}, {"kind": "writeup", "name": "www.exploit-db.com/exploits/44633/", "url": "https://www.exploit-db.com/exploits/44633/"}, {"kind": "writeup", "name": "www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt", "url": "https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"}, {"kind": "edb", "name": "Libuser Library - Multiple Vulnerabilities", "url": "https://www.exploit-db.com/exploits/37706"}, {"kind": "edb", "name": "Libuser - 'roothelper' Local Privilege Escalation (Metasploit)", "url": "https://www.exploit-db.com/exploits/44633"}, {"kind": "msf", "name": "Libuser roothelper Privilege Escalation", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "libuser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "libuser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "libuser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "libuser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "libuser", "status": "fixed", "fixed": "1:0.62~dfsg-0.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libuser\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libuser)\" ge \"1:0.62~dfsg-0.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "libuser", "status": "fixed", "fixed": "1:0.62~dfsg-0.1", "cmd": "sudo apt update && sudo apt install --only-upgrade libuser\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' libuser)\" ge \"1:0.62~dfsg-0.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "libuser", "status": "fixed", "fixed": "libuser-0.56.13-8.el6_7", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:1482\nrpm -q libuser", "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libuser", "status": "fixed", "fixed": "libuser-0.60-7.ael7b_1", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:1483\nrpm -q libuser", "url": null, "note": null}, {"os": "RHEL 5", "pkg": "libuser", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Amazon Linux 1", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo yum update --advisory=ALAS-2015-572", "url": "https://alas.aws.amazon.com/cve/html/CVE-2015-3246.html", "note": "ALAS-2015-572"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-86950", "publisher": "Apple Inc.", "title": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "summary": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "cvss": 8.8, "sev": "HIGH", "epss": 0.01242, "kev": true, "added": "2026-09-28", "pub": "2026-09-28T20:17:11.193", "modified": "2026-10-01T18:17:28.430", "products": [{"name": "ipados", "vendor": "apple", "type": "os", "affected": ["< 26.7.1"], "fixed": "26.7.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "iphone os", "vendor": "apple", "type": "os", "affected": ["< 26.7.1"], "fixed": "26.7.1", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "macos", "vendor": "apple", "type": "os", "affected": ["< 15.8.1", ">= 26.0 and < 26.7.1"], "fixed": "15.8.1, 26.7.1", "safe": "before 26.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86950"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/149226"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/149228"}, {"t": "Release Notes, Vendor Advisory", "u": "https://support.apple.com/en-us/149229"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": "2026-10-13", "kev_added": "2026-09-29", "ransom": false, "priority": 78, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.68988, "pinned": false, "pocs": [{"kind": "poc", "name": "msuiche/hotcell (10 stars)", "url": "https://github.com/msuiche/hotcell", "stars": 10}, {"kind": "poc", "name": "decalage2/detect_CVE-2026-86950 (6 stars)", "url": "https://github.com/decalage2/detect_CVE-2026-86950", "stars": 6}, {"kind": "poc", "name": "34zY/CVE-2026-86950 (1 stars)", "url": "https://github.com/34zY/CVE-2026-86950", "stars": 1}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-48710", "publisher": "GitHub, Inc.", "title": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability", "summary": "Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.07056, "kev": true, "added": "2026-05-26", "pub": "2026-05-26T22:16:44.020", "modified": "2026-10-01T18:17:18.153", "products": [{"name": "starlette", "vendor": "encode", "type": "app", "affected": [">= 0.8.3 and < 1.0.1"], "fixed": "1.0.1", "safe": "before 0.8.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "pip show starlette"}, {"label": "2. UPGRADE to 1.0.1", "cmd": "pip install --upgrade \"starlette>=1.0.1\""}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 0.8.3", "cmd": "pip index versions starlette\npip install \"starlette<0.8.3\""}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ai inference server", "vendor": "redhat", "type": "app", "affected": [">= 3.3.0 and <= 3.3.5"], "fixed": "newer than 3.3.5", "safe": "before 3.3.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ai-inference-server || rpm -q ai-inference-server || ai-inference-server --version"}, {"label": "2. UPGRADE to newer than 3.3.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ai-inference-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ai-inference-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3.0 (Debian / Ubuntu)", "cmd": "apt-cache madison ai-inference-server\nsudo apt install ai-inference-server=<VERSION_BEFORE_3.3.0>\nsudo apt-mark hold ai-inference-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ai-inference-server\nsudo dnf downgrade ai-inference-server-<VERSION_BEFORE_3.3.0>\nsudo dnf versionlock add ai-inference-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "ansible automation platform", "vendor": "redhat", "type": "app", "affected": ["2.6", "2.7"], "fixed": null, "safe": "before 2.6", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ansible-automation-platform || rpm -q ansible-automation-platform || ansible-automation-platform --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2.6 (Debian / Ubuntu)", "cmd": "apt-cache madison ansible-automation-platform\nsudo apt install ansible-automation-platform=<VERSION_BEFORE_2.6>\nsudo apt-mark hold ansible-automation-platform"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list ansible-automation-platform\nsudo dnf downgrade ansible-automation-platform-<VERSION_BEFORE_2.6>\nsudo dnf versionlock add ansible-automation-platform"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "migration toolkit for applications", "vendor": "redhat", "type": "app", "affected": ["< 8.2.0"], "fixed": "8.2.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy migration-toolkit-for-applications || rpm -q migration-toolkit-for-applications || migration-toolkit-for-applications --version"}, {"label": "2. UPGRADE to 8.2.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade migration-toolkit-for-applications"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade migration-toolkit-for-applications"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "openshift ai", "vendor": "redhat", "type": "app", "affected": [">= 3.3 and < 3.3.5", ">= 3.4 and < 3.4.2"], "fixed": "3.3.5, 3.4.2", "safe": "before 3.3", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openshift-ai || rpm -q openshift-ai || openshift-ai --version"}, {"label": "2. UPGRADE to 3.3.5 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade openshift-ai"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade openshift-ai"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 3.3 (Debian / Ubuntu)", "cmd": "apt-cache madison openshift-ai\nsudo apt install openshift-ai=<VERSION_BEFORE_3.3>\nsudo apt-mark hold openshift-ai"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list openshift-ai\nsudo dnf downgrade openshift-ai-<VERSION_BEFORE_3.3>\nsudo dnf versionlock add openshift-ai"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "openshift lightspeed", "vendor": "redhat", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy openshift-lightspeed || rpm -q openshift-lightspeed || openshift-lightspeed --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710"}, {"t": "Mitigation, Third Party Advisory", "u": "https://badhost.org"}, {"t": "Patch", "u": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"}, {"t": "Vendor Advisory", "u": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"}, {"t": "Mitigation, Third Party Advisory", "u": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"}, {"t": "Exploit, Mitigation", "u": "https://www.secwest.net/starlette"}, {"t": "Exploit, Mitigation", "u": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"}], "cwe": ["CWE-444", "CWE-1289"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-16", "kev_added": "2026-09-02", "ransom": false, "priority": 86, "tier": "P0", "why": ["EPSS top 6%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.94194, "pocs": [{"kind": "poc", "name": "eris-ths/supply-chain-guard (3 stars)", "url": "https://github.com/eris-ths/supply-chain-guard", "stars": 3}, {"kind": "poc", "name": "xtremebeing/starlette-host-header-lab (1 stars)", "url": "https://github.com/xtremebeing/starlette-host-header-lab", "stars": 1}, {"kind": "poc", "name": "Bhanunamikaze/BadHost-CVE-2026-48710-Exploit (1 stars)", "url": "https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit", "stars": 1}, {"kind": "writeup", "name": "ostif.org/disclosing-the-badhost-vulnerability-in-starlette", "url": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"}, {"kind": "writeup", "name": "www.secwest.net/starlette", "url": "https://www.secwest.net/starlette"}, {"kind": "writeup", "name": "www.wiz.io/blog/ai-infrastructure-honeypot", "url": "https://www.wiz.io/blog/ai-infrastructure-honeypot"}, {"kind": "nuclei", "name": "Starlette - Improper Validation of Unsafe Equivalence in Input", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48710.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "starlette", "status": "fixed", "fixed": "1.0.1", "cmd": "pip install --upgrade \"starlette>=1.0.1\"\npip show starlette", "url": "https://github.com/advisories/GHSA-86qp-5c8j-p5mr", "note": "vulnerable: <= 1.0.0"}, {"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "starlette", "status": "fixed", "fixed": "0.26.1-1+deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade starlette\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' starlette)\" ge \"0.26.1-1+deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "starlette", "status": "fixed", "fixed": "0.46.1-3+deb13u2", "cmd": "sudo apt update && sudo apt install --only-upgrade starlette\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' starlette)\" ge \"0.46.1-3+deb13u2\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-azure-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-gaudi-rhel9", "status": "deferred", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL AI (RHEL AI) 3", "pkg": "rhelai3/bootc-rocm-rhel9", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Alpine 3.24", "pkg": "py3-starlette", "status": "fixed", "fixed": "py3-starlette-1.1.0-r0", "cmd": "apk add --upgrade py3-starlette\napk info -v py3-starlette", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-88771", "publisher": "NetScaler", "title": "Citrix NetScaler Improper Input Validation Vulnerability", "summary": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to\u00a0an unauthenticated attacker to execute arbitrary commands.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.04722, "kev": true, "added": "2026-09-27", "pub": "2026-09-27T17:16:56.260", "modified": "2026-09-29T04:18:01.603", "products": [{"name": "netscaler application delivery controller", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-64.23", ">= 13.1 and < 13.1.37.279", ">= 14.1 and < 14.1-73.37", ">= 14.1-66.68 and <= 14.1-73.37"], "fixed": "13.1.37.279, 13.1-64.23, 14.1-73.37", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-application-delivery-controller || rpm -q netscaler-application-delivery-controller || netscaler-application-delivery-controller --version"}, {"label": "2. UPGRADE to 13.1.37.279 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-application-delivery-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-application-delivery-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-application-delivery-controller\nsudo apt install netscaler-application-delivery-controller=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-application-delivery-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-application-delivery-controller\nsudo dnf downgrade netscaler-application-delivery-controller-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-application-delivery-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "netscaler gateway", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-64.23", ">= 14.1 and < 14.1-73.37"], "fixed": "13.1-64.23, 14.1-73.37", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-gateway || rpm -q netscaler-gateway || netscaler-gateway --version"}, {"label": "2. UPGRADE to 13.1-64.23 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-gateway\nsudo apt install netscaler-gateway=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-gateway\nsudo dnf downgrade netscaler-gateway-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-88771"}, {"t": "Vendor Advisory", "u": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-30", "kev_added": "2026-09-27", "ransom": false, "priority": 98, "tier": "P0", "why": ["Critical severity", "EPSS top 8%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Covered by 5 security sources", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.91805, "pocs": [{"kind": "poc", "name": "watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 (22 stars)", "url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", "stars": 22}, {"kind": "poc", "name": "ThomasPoppelgaard/netscaler-ctx697096-checker (19 stars)", "url": "https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker", "stars": 19}, {"kind": "poc", "name": "technion/netscaler_scanner (1 stars)", "url": "https://github.com/technion/netscaler_scanner", "stars": 1}, {"kind": "msf", "name": "Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Rapid7 Blog", "group": "research", "title": "Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779", "url": "https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779", "date": "2026-10-19"}, {"src": "Cloudflare Security Blog", "group": "news", "title": "Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities", "url": "https://blog.cloudflare.com/protect-your-netscaler-gateway/", "date": "2026-10-19"}, {"src": "Unit 42 (Palo Alto)", "group": "research", "title": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)", "url": "https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/", "date": "2026-09-30"}, {"src": "Mandiant / Google Cloud Threat Intel", "group": "research", "title": "Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances", "url": "https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/", "date": "2026-09-29"}, {"src": "watchTowr Labs", "group": "research", "title": "Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)", "url": "https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/", "date": "2026-09-28"}], "buzz": 5}, {"id": "CVE-2026-88772", "publisher": "NetScaler", "title": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "summary": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0leading to Remote Code Execution or Denial of Service", "cvss": 8.1, "sev": "HIGH", "epss": 0.05305, "kev": true, "added": "2026-09-27", "pub": "2026-09-27T17:16:56.390", "modified": "2026-09-28T12:26:47.670", "products": [{"name": "netscaler application delivery controller", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-64.23", ">= 13.1 and < 13.1.37.279", ">= 14.1 and < 14.1-73.37", ">= 14.1-66.68 and <= 14.1-73.37"], "fixed": "13.1.37.279, 13.1-64.23, 14.1-73.37", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-application-delivery-controller || rpm -q netscaler-application-delivery-controller || netscaler-application-delivery-controller --version"}, {"label": "2. UPGRADE to 13.1.37.279 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-application-delivery-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-application-delivery-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-application-delivery-controller\nsudo apt install netscaler-application-delivery-controller=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-application-delivery-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-application-delivery-controller\nsudo dnf downgrade netscaler-application-delivery-controller-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-application-delivery-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "netscaler gateway", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-64.23", ">= 14.1 and < 14.1-73.37"], "fixed": "13.1-64.23, 14.1-73.37", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-gateway || rpm -q netscaler-gateway || netscaler-gateway --version"}, {"label": "2. UPGRADE to 13.1-64.23 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-gateway\nsudo apt install netscaler-gateway=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-gateway\nsudo dnf downgrade netscaler-gateway-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-88772"}, {"t": "Vendor Advisory", "u": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-30", "kev_added": "2026-09-27", "ransom": false, "priority": 89, "tier": "P0", "why": ["High severity", "EPSS top 7%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Covered by 4 security sources", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.92568, "pocs": [{"kind": "poc", "name": "murrez/CVE-2026-88772 (12 stars)", "url": "https://github.com/murrez/CVE-2026-88772", "stars": 12}, {"kind": "poc", "name": "watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 (11 stars)", "url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772", "stars": 11}, {"kind": "poc", "name": "FollowerSeize/CVE-2026-88772-POC (0 stars)", "url": "https://github.com/FollowerSeize/CVE-2026-88772-POC", "stars": 0}, {"kind": "msf", "name": "Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Rapid7 Blog", "group": "research", "title": "Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779", "url": "https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779", "date": "2026-10-19"}, {"src": "Unit 42 (Palo Alto)", "group": "research", "title": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)", "url": "https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/", "date": "2026-09-30"}, {"src": "Mandiant / Google Cloud Threat Intel", "group": "research", "title": "Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances", "url": "https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/", "date": "2026-09-29"}, {"src": "watchTowr Labs", "group": "research", "title": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)", "url": "https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/", "date": "2026-09-29"}], "buzz": 4}, {"id": "CVE-2026-87902", "publisher": "HackerOne", "title": "WordPress Core Remote File Inclusion Vulnerability", "summary": "An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.", "cvss": 8.1, "sev": "HIGH", "epss": 0.39979, "kev": true, "added": "2026-09-22", "pub": "2026-09-22T17:17:28.310", "modified": "2026-09-28T12:20:54.040", "products": [{"name": "wordpress", "vendor": "wordpress", "type": "app", "affected": ["< 4.7.37", ">= 4.8 and < 4.8.32", ">= 4.9 and < 4.9.33", ">= 5.0 and < 5.0.29", ">= 5.1 and < 5.1.26", ">= 5.2 and < 5.2.28", ">= 5.3 and < 5.3.25", ">= 5.4 and < 5.4.23"], "fixed": "4.7.37, 4.8.32, 4.9.33, 5.0.29, 5.1.26, 5.2.28, 5.3.25, 5.4.23, 5.5.22, 5.6.21, 5.7.19, 5.8.17, 5.9.18, 6.0.16, 6.1.14, 6.2.13, 6.3.12, 6.4.12, 6.5.12, 6.6.9, 6.7.9, 6.8.10, 6.9.9, 7.0.6, 7.1.2", "safe": "before 4.8", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy wordpress || rpm -q wordpress || wordpress --version"}, {"label": "2. UPGRADE to 4.7.37 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade wordpress"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade wordpress"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.8 (Debian / Ubuntu)", "cmd": "apt-cache madison wordpress\nsudo apt install wordpress=<VERSION_BEFORE_4.8>\nsudo apt-mark hold wordpress"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list wordpress\nsudo dnf downgrade wordpress-<VERSION_BEFORE_4.8>\nsudo dnf versionlock add wordpress"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87902"}, {"t": "Vendor Advisory", "u": "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp"}], "cwe": ["CWE-98"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-28", "kev_added": "2026-09-25", "ransom": false, "priority": 88, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98629, "pocs": [{"kind": "poc", "name": "ressl/cve-2026-87902-poc (43 stars)", "url": "https://github.com/ressl/cve-2026-87902-poc", "stars": 43}, {"kind": "poc", "name": "abraxas/CVE-2026-87902 (35 stars)", "url": "https://github.com/abraxas/CVE-2026-87902", "stars": 35}, {"kind": "poc", "name": "tc4dy/CVE-2026-87902-Toolkit (14 stars)", "url": "https://github.com/tc4dy/CVE-2026-87902-Toolkit", "stars": 14}, {"kind": "writeup", "name": "patchstack.com/articles/cve-2026-87902-attackers-started-probing-wordpress-sites-hours-aft", "url": "https://patchstack.com/articles/cve-2026-87902-attackers-started-probing-wordpress-sites-hours-after-the-patch/"}, {"kind": "edb", "name": "WordPress 7.0.2 - Path Travesal", "url": "https://www.exploit-db.com/exploits/52690"}, {"kind": "nuclei", "name": "WordPress Core - PHP Template Path Traversal", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-87902.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Debian 12", "pkg": "wordpress", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 13", "pkg": "wordpress", "status": "fixed", "fixed": "6.8.10+dfsg1-0+deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade wordpress\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' wordpress)\" ge \"6.8.10+dfsg1-0+deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-67279", "publisher": "CERT.PL", "title": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability", "summary": "RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of files in the RouterOS managed file namespace, including support files containing configuration and diagnostic dat", "cvss": 6.5, "sev": "MEDIUM", "epss": 0.01046, "kev": true, "added": "2026-09-05", "pub": "2026-09-05T20:17:18.390", "modified": "2026-09-26T04:17:47.273", "products": [{"name": "routeros", "vendor": "mikrotik", "type": "os", "affected": [">= 6.0 and < 6.49.21", ">= 7.0 and < 7.23.4", ">= 7.24 and < 7.24.2"], "fixed": "6.49.21, 7.23.4, 7.24.2", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67279"}, {"t": "Mitigation, Third Party Advisory", "u": "https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"}, {"t": "Vendor Advisory", "u": "https://mikrotik.com/supportsec/september-2026-vulnerability/"}], "cwe": ["CWE-841"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-28", "kev_added": "2026-09-25", "ransom": false, "priority": 74, "tier": "P0", "why": ["Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.63892, "pinned": false, "pocs": [{"kind": "poc", "name": "tc4dy/CVE-2026-67279-86060-Toolkit (5 stars)", "url": "https://github.com/tc4dy/CVE-2026-67279-86060-Toolkit", "stars": 5}, {"kind": "poc", "name": "HackSpeak/CVE-2026-67279 (4 stars)", "url": "https://github.com/HackSpeak/CVE-2026-67279", "stars": 4}, {"kind": "poc", "name": "shmaki4/CVE-2026-67279-Mikrotik-6.42-POC (0 stars)", "url": "https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC", "stars": 0}, {"kind": "writeup", "name": "bishopfox.com/blog/mikrotrick-inside-the-routeros-takeover-chain", "url": "https://bishopfox.com/blog/mikrotrick-inside-the-routeros-takeover-chain"}, {"kind": "writeup", "name": "forum.mikrotik.com/t/7-24-2-stable-is-released/272800", "url": "https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "MikroTrick: technical analysis, disclosure process, and the use of LLM agents", "url": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/", "date": "2026-09-22"}, {"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in Mikrotik RouterOS software", "url": "https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve/", "date": "2026-09-05"}], "buzz": 1}, {"id": "CVE-2026-65660", "publisher": "Microsoft Corporation", "title": "Microsoft SharePoint Code Injection Vulnerability", "summary": "Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "cvss": 8.8, "sev": "HIGH", "epss": 0.02101, "kev": true, "added": "2026-08-11", "pub": "2026-08-11T17:18:54.080", "modified": "2026-09-26T04:17:45.630", "products": [{"name": "sharepoint server", "vendor": "microsoft", "type": "app", "affected": ["< 16.0.19725.20522", "2016", "2019"], "fixed": "16.0.19725.20522", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sharepoint-server || rpm -q sharepoint-server || sharepoint-server --version"}, {"label": "2. UPGRADE to 16.0.19725.20522 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sharepoint-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sharepoint-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-65660"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-28", "kev_added": "2026-09-25", "ransom": false, "priority": 81, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.81581, "pinned": false, "pocs": [{"kind": "poc", "name": "ShadowForge-Cyber/CVE-2026-65660-Poc (1 stars)", "url": "https://github.com/ShadowForge-Cyber/CVE-2026-65660-Poc", "stars": 1}, {"kind": "poc", "name": "HORKimhab/CVE-2026-65660 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-65660", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Microsoft SharePoint Enterprise Server 2016", "pkg": "KB5002905", "status": "fixed", "fixed": "16.0.5565.1001", "cmd": "Install KB5002905 via Windows Update, then verify:\nGet-HotFix -Id KB5002905", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108758", "note": "KB5002905"}, {"os": "Microsoft SharePoint Enterprise Server 2016", "pkg": "KB5002906", "status": "fixed", "fixed": "16.0.5565.1001", "cmd": "Install KB5002906 via Windows Update, then verify:\nGet-HotFix -Id KB5002906", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108776", "note": "KB5002906"}, {"os": "Microsoft SharePoint Server 2019", "pkg": "KB5002894", "status": "fixed", "fixed": "16.0.10417.20198", "cmd": "Install KB5002894 via Windows Update, then verify:\nGet-HotFix -Id KB5002894", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108774", "note": "KB5002894"}, {"os": "Microsoft SharePoint Server 2019", "pkg": "KB5002896", "status": "fixed", "fixed": "16.0.10417.20198", "cmd": "Install KB5002896 via Windows Update, then verify:\nGet-HotFix -Id KB5002896", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108773", "note": "KB5002896"}, {"os": "Microsoft SharePoint Server Subscription Edition", "pkg": "KB5002893", "status": "fixed", "fixed": "16.0.19725.20522", "cmd": "Install KB5002893 via Windows Update, then verify:\nGet-HotFix -Id KB5002893", "url": "https://www.microsoft.com/en-us/download/details.aspx?id=108767", "note": "KB5002893"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-71362", "publisher": "Adobe Systems Incorporated", "title": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ", "summary": "Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.87507, "kev": true, "added": "2026-08-11", "pub": "2026-08-11T18:18:21.610", "modified": "2026-09-25T12:53:15.757", "products": [{"name": "commerce", "vendor": "adobe", "type": "app", "affected": ["< 2.4.4", "2.4.4", "2.4.4 p1", "2.4.4 p10", "2.4.4 p11", "2.4.4 p12", "2.4.4 p13", "2.4.4 p14"], "fixed": "2.4.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce || rpm -q commerce || commerce --version"}, {"label": "2. UPGRADE to 2.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commerce"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commerce"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "commerce b2b", "vendor": "adobe", "type": "app", "affected": ["< 1.3.3", "1.3.3", "1.3.3 p1", "1.3.3 p10", "1.3.3 p11", "1.3.3 p12", "1.3.3 p13", "1.3.3 p14"], "fixed": "1.3.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-b2b || rpm -q commerce-b2b || commerce-b2b --version"}, {"label": "2. UPGRADE to 1.3.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commerce-b2b"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commerce-b2b"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "magento", "vendor": "adobe", "type": "app", "affected": ["<= 2.4.6", "2.4.7", "2.4.7 b1", "2.4.7 b2", "2.4.7 beta3", "2.4.7 p1", "2.4.7 p10", "2.4.7 p2"], "fixed": "newer than 2.4.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy magento || rpm -q magento || magento --version"}, {"label": "2. UPGRADE to newer than 2.4.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade magento"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade magento"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-71362"}, {"t": "Vendor Advisory", "u": "https://helpx.adobe.com/security/products/magento/apsb26-92.html"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-27", "kev_added": "2026-09-24", "ransom": false, "priority": 95, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.9976, "pocs": [{"kind": "poc", "name": "dinosn/cve-2026-71362-magento-lab (5 stars)", "url": "https://github.com/dinosn/cve-2026-71362-magento-lab", "stars": 5}, {"kind": "poc", "name": "mahumadad/cve-2026-71362-magento-ato (0 stars)", "url": "https://github.com/mahumadad/cve-2026-71362-magento-ato", "stars": 0}, {"kind": "nuclei", "name": "Adobe Commerce/Magento - Customer Session Identity Switch", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71362.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-5430", "publisher": "WSO2 LLC", "title": "WSO2 Multiple Products Path Traversal Vulnerability ", "summary": "The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access.\n\nSuccessful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of administrative accounts and full account takeover. Th", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.00588, "kev": true, "added": "2026-08-06", "pub": "2026-08-06T08:16:33.240", "modified": "2026-09-25T12:53:05.517", "products": [{"name": "api control plane", "vendor": "wso2", "type": "app", "affected": [">= 4.5.0 and < 4.5.0.58", ">= 4.6.0 and < 4.6.0.22"], "fixed": "4.5.0.58, 4.6.0.22", "safe": "before 4.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy api-control-plane || rpm -q api-control-plane || api-control-plane --version"}, {"label": "2. UPGRADE to 4.5.0.58 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade api-control-plane"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade api-control-plane"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison api-control-plane\nsudo apt install api-control-plane=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold api-control-plane"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list api-control-plane\nsudo dnf downgrade api-control-plane-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add api-control-plane"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "api manager", "vendor": "wso2", "type": "app", "affected": [">= 4.1.0 and < 4.1.0.257", ">= 4.2.0 and < 4.2.0.197", ">= 4.3.0 and < 4.3.0.108", ">= 4.4.0 and < 4.4.0.72", ">= 4.5.0 and < 4.5.0.57", ">= 4.6.0 and < 4.6.0.21"], "fixed": "4.1.0.257, 4.2.0.197, 4.3.0.108, 4.4.0.72, 4.5.0.57, 4.6.0.21", "safe": "before 4.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy api-manager || rpm -q api-manager || api-manager --version"}, {"label": "2. UPGRADE to 4.1.0.257 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade api-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade api-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison api-manager\nsudo apt install api-manager=<VERSION_BEFORE_4.1.0>\nsudo apt-mark hold api-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list api-manager\nsudo dnf downgrade api-manager-<VERSION_BEFORE_4.1.0>\nsudo dnf versionlock add api-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "traffic manager", "vendor": "wso2", "type": "app", "affected": [">= 4.5.0 and < 4.5.0.56", ">= 4.6.0 and < 4.6.0.21"], "fixed": "4.5.0.56, 4.6.0.21", "safe": "before 4.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy traffic-manager || rpm -q traffic-manager || traffic-manager --version"}, {"label": "2. UPGRADE to 4.5.0.56 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade traffic-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade traffic-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison traffic-manager\nsudo apt install traffic-manager=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold traffic-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list traffic-manager\nsudo dnf downgrade traffic-manager-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add traffic-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "universal gateway", "vendor": "wso2", "type": "app", "affected": [">= 4.5.0 and < 4.5.0.57", ">= 4.6.0 and < 4.6.0.21"], "fixed": "4.5.0.57, 4.6.0.21", "safe": "before 4.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy universal-gateway || rpm -q universal-gateway || universal-gateway --version"}, {"label": "2. UPGRADE to 4.5.0.57 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade universal-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade universal-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 4.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison universal-gateway\nsudo apt install universal-gateway=<VERSION_BEFORE_4.5.0>\nsudo apt-mark hold universal-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list universal-gateway\nsudo dnf downgrade universal-gateway-<VERSION_BEFORE_4.5.0>\nsudo dnf versionlock add universal-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-5430"}, {"t": "Vendor Advisory", "u": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/"}], "cwe": ["CWE-347"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-27", "kev_added": "2026-09-24", "ransom": false, "priority": 80, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.47448, "pinned": false, "pocs": [{"kind": "poc", "name": "abraxas/CVE-2026-5430 (2 stars)", "url": "https://github.com/abraxas/CVE-2026-5430", "stars": 2}, {"kind": "poc", "name": "davidvrns/CVE-2026-5430-WSO2 (1 stars)", "url": "https://github.com/davidvrns/CVE-2026-5430-WSO2", "stars": 1}, {"kind": "poc", "name": "HORKimhab/CVE-2026-5430 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-5430", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85880", "publisher": "Microsoft Corporation", "title": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "summary": "Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.03616, "kev": true, "added": "2026-09-08", "pub": "2026-09-08T18:21:14.087", "modified": "2026-09-24T23:19:20.773", "products": [{"name": "windows 10 1607", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9512"], "fixed": "10.0.14393.9512", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 1809", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.17763.9245"], "fixed": "10.0.17763.9245", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 21h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19044.7725"], "fixed": "10.0.19044.7725", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 10 22h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.19045.7725"], "fixed": "10.0.19045.7725", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2012", "vendor": "microsoft", "type": "os", "affected": ["all versions", "r2"], "fixed": null, "safe": "before r2", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2016", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.14393.9512"], "fixed": "10.0.14393.9512", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85880"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"}], "cwe": ["CWE-122", "CWE-908"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-22", "kev_added": "2026-09-08", "ransom": false, "priority": 80, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.89459, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows 10 Version 1809 for 32-bit Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows 10 Version 1809 for x64-based Systems", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2019 (Server Core installation)", "pkg": "KB5122876", "status": "fixed", "fixed": "10.0.17763.9245", "cmd": "Install KB5122876 via Windows Update, then verify:\nGet-HotFix -Id KB5122876", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876", "note": "KB5122876"}, {"os": "Windows Server 2022", "pkg": "KB5122882", "status": "fixed", "fixed": "10.0.20348.5622", "cmd": "Install KB5122882 via Windows Update, then verify:\nGet-HotFix -Id KB5122882", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882", "note": "KB5122882"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85706", "publisher": "GitLab Inc.", "title": "GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.91951, "kev": true, "added": "2026-09-12", "pub": "2026-09-12T03:16:30.473", "modified": "2026-09-24T12:52:28.143", "products": [{"name": "gitlab", "vendor": "gitlab", "type": "app", "affected": [">= 18.7.0 and < 18.11.12", ">= 19.0.0 and < 19.0.9", ">= 19.1.0 and < 19.1.8", ">= 19.2.0 and < 19.2.6", ">= 19.3.0 and < 19.3.2"], "fixed": "18.11.12, 19.0.9, 19.1.8, 19.2.6, 19.3.2", "safe": "before 18.7.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gitlab || rpm -q gitlab || gitlab --version"}, {"label": "2. UPGRADE to 18.11.12 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gitlab"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gitlab"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 18.7.0 (Debian / Ubuntu)", "cmd": "apt-cache madison gitlab\nsudo apt install gitlab=<VERSION_BEFORE_18.7.0>\nsudo apt-mark hold gitlab"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list gitlab\nsudo dnf downgrade gitlab-<VERSION_BEFORE_18.7.0>\nsudo dnf versionlock add gitlab"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85706"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-14", "kev_added": "2026-09-11", "ransom": false, "priority": 98, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99821, "pocs": [{"kind": "poc", "name": "guneykabel/cve-2026-85706 (44 stars)", "url": "https://github.com/guneykabel/cve-2026-85706", "stars": 44}, {"kind": "poc", "name": "EQSTLab/CVE-2026-85706 (29 stars)", "url": "https://github.com/EQSTLab/CVE-2026-85706", "stars": 29}, {"kind": "poc", "name": "ynsmroztas/GitLabSniper (9 stars)", "url": "https://github.com/ynsmroztas/GitLabSniper", "stars": 9}, {"kind": "msf", "name": "GitLab Unauthenticated Arbitrary File Read", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlab_file_read_cve_2026_85706.rb"}, {"kind": "nuclei", "name": "GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-85706.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "GitLab Security Releases", "group": "vendor", "title": "GitLab Critical Patch Release: 19.0.9, 18.11.12", "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-0-9-released/", "date": "2026-09-23"}], "buzz": 1}, {"id": "CVE-2026-85102", "publisher": "Check Point Software Technologies Ltd.", "title": "Check Point Multiple Products Improper Certificate Validation Vulnerability", "summary": "Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.5423, "kev": true, "added": "2026-09-09", "pub": "2026-09-09T13:20:43.793", "modified": "2026-09-23T18:22:07.453", "products": [{"name": "gaia embedded", "vendor": "checkpoint", "type": "os", "affected": [">= r81.10.00 and < r81.10.17", ">= r82.00.00 and < r82.00.10", "r81.10.17", "r81.10.17 build_996004508", "r81.10.17 build_996004620", "r81.10.17 build_996004653", "r81.10.17 build_996004721", "r81.10.17 build_996004892"], "fixed": "r81.10.17, r82.00.10", "safe": "before r81.10.00", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gaia os", "vendor": "checkpoint", "type": "os", "affected": [">= r80 and < r81.10", "r81.10", "r81.10 take_106", "r81.10 take_107", "r81.10 take_109", "r81.10 take_110", "r81.10 take_113", "r81.10 take_128"], "fixed": "r81.10", "safe": "before r80", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85102"}, {"t": "Mitigation, Patch", "u": "https://support.checkpoint.com/results/sk/sk1000117"}, {"t": "Vendor Advisory", "u": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"}], "cwe": ["CWE-295"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-25", "kev_added": "2026-09-22", "ransom": false, "priority": 92, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.9901, "pinned": false, "pocs": [{"kind": "poc", "name": "aduli198/CVE-2026-85102 (1 stars)", "url": "https://github.com/aduli198/CVE-2026-85102", "stars": 1}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93616", "publisher": "Check Point Software Technologies Ltd.", "title": "Check Point Multiple Products Path Traversal Vulnerability", "summary": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.75872, "kev": true, "added": "2026-09-22", "pub": "2026-09-22T13:17:11.963", "modified": "2026-09-23T16:38:38.987", "products": [{"name": "multi-domain security management", "vendor": "checkpoint", "type": "app", "affected": [">= r80 and < r81.10", "r81.10", "r81.10 take_106", "r81.10 take_107", "r81.10 take_109", "r81.10 take_110", "r81.10 take_113", "r81.10 take_128"], "fixed": "r81.10", "safe": "before r80", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy multi-domain-security-management || rpm -q multi-domain-security-management || multi-domain-security-management --version"}, {"label": "2. UPGRADE to r81.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade multi-domain-security-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade multi-domain-security-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before r80 (Debian / Ubuntu)", "cmd": "apt-cache madison multi-domain-security-management\nsudo apt install multi-domain-security-management=<VERSION_BEFORE_r80>\nsudo apt-mark hold multi-domain-security-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list multi-domain-security-management\nsudo dnf downgrade multi-domain-security-management-<VERSION_BEFORE_r80>\nsudo dnf versionlock add multi-domain-security-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "quantum security management", "vendor": "checkpoint", "type": "app", "affected": [">= r80 and < r81.10", "r81.10", "r81.10 take_106", "r81.10 take_107", "r81.10 take_109", "r81.10 take_110", "r81.10 take_113", "r81.10 take_128"], "fixed": "r81.10", "safe": "before r80", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy quantum-security-management || rpm -q quantum-security-management || quantum-security-management --version"}, {"label": "2. UPGRADE to r81.10 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade quantum-security-management"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade quantum-security-management"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before r80 (Debian / Ubuntu)", "cmd": "apt-cache madison quantum-security-management\nsudo apt install quantum-security-management=<VERSION_BEFORE_r80>\nsudo apt-mark hold quantum-security-management"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list quantum-security-management\nsudo dnf downgrade quantum-security-management-<VERSION_BEFORE_r80>\nsudo dnf versionlock add quantum-security-management"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93616"}, {"t": "Mitigation, Patch", "u": "https://support.checkpoint.com/results/sk/sk1000171"}, {"t": "Vendor Advisory", "u": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"}], "cwe": ["CWE-22"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-25", "kev_added": "2026-09-22", "ransom": false, "priority": 92, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99529, "pocs": [{"kind": "poc", "name": "WadesWeaponShed/CVE-2026-93616_Checks (0 stars)", "url": "https://github.com/WadesWeaponShed/CVE-2026-93616_Checks", "stars": 0}, {"kind": "poc", "name": "BishopFox/CVE-2026-93616-check (0 stars)", "url": "https://github.com/BishopFox/CVE-2026-93616-check", "stars": 0}, {"kind": "nuclei", "name": "Check Point Security Management - Unauthenticated Directory Traversal to RCE", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-93616.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-93952", "publisher": "Arista Networks, Inc.", "title": "Arista VeloCloud Orchestrator Improper Input Validation Vulnerability", "summary": "VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.\n\nHosted, including Dedicated, versions of VCO were impacted and have already been patched.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.01062, "kev": true, "added": "2026-09-22", "pub": "2026-09-22T08:16:43.047", "modified": "2026-09-23T14:32:12.417", "products": [{"name": "velocloud orchestrator", "vendor": "arista", "type": "app", "affected": [">= 5.2.0 and < 5.2.3.16", ">= 6.1.0 and <= 6.1.3.7", ">= 6.4.0 and < 6.4.2.8", ">= 7.0.0 and <= 7.0.0.2"], "fixed": "5.2.3.16, 6.4.2.8", "safe": "before 5.2.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy velocloud-orchestrator || rpm -q velocloud-orchestrator || velocloud-orchestrator --version"}, {"label": "2. UPGRADE to 5.2.3.16 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade velocloud-orchestrator"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade velocloud-orchestrator"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 5.2.0 (Debian / Ubuntu)", "cmd": "apt-cache madison velocloud-orchestrator\nsudo apt install velocloud-orchestrator=<VERSION_BEFORE_5.2.0>\nsudo apt-mark hold velocloud-orchestrator"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list velocloud-orchestrator\nsudo dnf downgrade velocloud-orchestrator-<VERSION_BEFORE_5.2.0>\nsudo dnf versionlock add velocloud-orchestrator"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-93952"}, {"t": "Mitigation, Vendor Advisory", "u": "https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-25", "kev_added": "2026-09-22", "ransom": false, "priority": 84, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.64332, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-94127", "publisher": "F5 Networks", "title": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability", "summary": "When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability.\n\nImpact:\nThis vulnerability a", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.02226, "kev": true, "added": "2026-09-22", "pub": "2026-09-22T15:17:24.313", "modified": "2026-09-23T14:32:07.910", "products": [{"name": "big-ip access policy manager", "vendor": "f5", "type": "app", "affected": [">= 17.0.0 and <= 17.1.3", ">= 17.5.0 and <= 17.5.1", "21.1.0"], "fixed": "newer than 17.5.1", "safe": "before 17.0.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy big-ip-access-policy-manager || rpm -q big-ip-access-policy-manager || big-ip-access-policy-manager --version"}, {"label": "2. UPGRADE to newer than 17.5.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade big-ip-access-policy-manager"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade big-ip-access-policy-manager"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 17.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison big-ip-access-policy-manager\nsudo apt install big-ip-access-policy-manager=<VERSION_BEFORE_17.0.0>\nsudo apt-mark hold big-ip-access-policy-manager"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list big-ip-access-policy-manager\nsudo dnf downgrade big-ip-access-policy-manager-<VERSION_BEFORE_17.0.0>\nsudo dnf versionlock add big-ip-access-policy-manager"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-94127"}, {"t": "Vendor Advisory", "u": "https://my.f5.com/manage/s/article/K000162605"}], "cwe": ["CWE-122"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-25", "kev_added": "2026-09-22", "ransom": false, "priority": 93, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.82601, "pinned": false, "pocs": [{"kind": "poc", "name": "watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127 (15 stars)", "url": "https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127", "stars": 15}, {"kind": "poc", "name": "FurkanKAYAPINAR/CVE-2026-94127 (0 stars)", "url": "https://github.com/FurkanKAYAPINAR/CVE-2026-94127", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "watchTowr Labs", "group": "research", "title": "Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)", "url": "https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/", "date": "2026-09-23"}], "buzz": 1}, {"id": "CVE-2026-7273", "publisher": "Zyxel Corporation", "title": "Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability", "summary": "A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through\u00a02.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.", "cvss": 8.8, "sev": "HIGH", "epss": 0.02501, "kev": true, "added": "2026-06-16", "pub": "2026-06-16T03:16:13.557", "modified": "2026-09-22T12:10:51.067", "products": [{"name": "gs1900-8 firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aahh.2\\)c0"], "fixed": "2.90\\(aahh.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gs1900-8hp firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aahi.2\\)c0"], "fixed": "2.90\\(aahi.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gs1900-10hp firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aazi.2\\)c0"], "fixed": "2.90\\(aazi.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gs1900-16 firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aahj.2\\)c0"], "fixed": "2.90\\(aahj.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gs1900-24 firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aahl.2\\)c0"], "fixed": "2.90\\(aahl.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "gs1900-24e firmware", "vendor": "zyxel", "type": "os", "affected": ["< 2.90\\(aahk.2\\)c0"], "fixed": "2.90\\(aahk.2\\)c0", "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-7273"}, {"t": "Vendor Advisory", "u": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026"}], "cwe": ["CWE-121"], "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "A", "ac": "L", "pr": "N", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-09-24", "kev_added": "2026-09-21", "ransom": false, "priority": 82, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.84595, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-83549", "publisher": "SonicWALL, Inc.", "title": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "summary": "Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.", "cvss": 7.8, "sev": "HIGH", "epss": 0.09889, "kev": true, "added": "2026-09-01", "pub": "2026-09-01T22:17:13.290", "modified": "2026-09-21T14:17:21.703", "products": [{"name": "sma8200v", "vendor": "sonicwall", "type": "app", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sma8200v || rpm -q sma8200v || sma8200v --version"}, {"label": "2. UPGRADE to 12.4.3-03526 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sma8200v"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sma8200v"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison sma8200v\nsudo apt install sma8200v=<VERSION_BEFORE_12.5.0>\nsudo apt-mark hold sma8200v"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sma8200v\nsudo dnf downgrade sma8200v-<VERSION_BEFORE_12.5.0>\nsudo dnf versionlock add sma8200v"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "sma6210 firmware", "vendor": "sonicwall", "type": "os", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sma7210 firmware", "vendor": "sonicwall", "type": "os", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83549"}, {"t": "Vendor Advisory", "u": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016"}], "cwe": ["CWE-78"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-09-05", "kev_added": "2026-09-02", "ransom": false, "priority": 81, "tier": "P0", "why": ["High severity", "EPSS top 4%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.95573, "pocs": [{"kind": "msf", "name": "SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87491", "publisher": "Chrome", "title": "Google Chromium V8 Out of Bounds Write Vulnerability", "summary": "Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "cvss": 8.8, "sev": "HIGH", "epss": 0.03142, "kev": true, "added": "2026-09-09", "pub": "2026-09-09T01:17:05.887", "modified": "2026-09-21T13:17:11.283", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 153.0.8010.36"], "fixed": "153.0.8010.36", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 153.0.8010.36 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87491"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": "2026-09-23", "kev_added": "2026-09-09", "ransom": false, "priority": 83, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.87834, "pinned": false, "pocs": [{"kind": "poc", "name": "SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter (5 stars)", "url": "https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter", "stars": 5}, {"kind": "writeup", "name": "issues.chromium.org/issues/543557673", "url": "https://issues.chromium.org/issues/543557673"}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "153.0.8010.52-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"153.0.8010.52-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "153.0.8010.47-2~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"153.0.8010.47-2~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-85046", "publisher": "Chrome", "title": "Google Chromium V8 Type Confusion Vulnerability", "summary": "Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "cvss": 8.8, "sev": "HIGH", "epss": 0.48881, "kev": true, "added": "2026-09-03", "pub": "2026-09-03T20:17:24.210", "modified": "2026-09-21T13:17:10.970", "products": [{"name": "chrome", "vendor": "google", "type": "app", "affected": ["< 152.0.7977.82"], "fixed": "152.0.7977.82", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy chrome || rpm -q chrome || chrome --version"}, {"label": "2. UPGRADE to 152.0.7977.82 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade chrome"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade chrome"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "v8", "vendor": "google", "type": "app", "affected": ["< 15.3.48"], "fixed": "15.3.48", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy v8 || rpm -q v8 || v8 --version"}, {"label": "2. UPGRADE to 15.3.48 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade v8"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade v8"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046"}, {"t": "Release Notes, Vendor Advisory", "u": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"}, {"t": "Patch", "u": "https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67"}], "cwe": ["CWE-843"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "R"}, "remote": false, "exploit": true, "kev_due": "2026-09-18", "kev_added": "2026-09-04", "ransom": false, "priority": 86, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.98877, "pinned": false, "pocs": [{"kind": "poc", "name": "atiilla/CVE-2026-85046 (8 stars)", "url": "https://github.com/atiilla/CVE-2026-85046", "stars": 8}, {"kind": "poc", "name": "adriyansyah-mf/cve-2026-85046-poc (6 stars)", "url": "https://github.com/adriyansyah-mf/cve-2026-85046-poc", "stars": 6}, {"kind": "poc", "name": "HORKimhab/CVE-2026-85046 (1 stars)", "url": "https://github.com/HORKimhab/CVE-2026-85046", "stars": 1}, {"kind": "writeup", "name": "issues.chromium.org/issues/542403045", "url": "https://issues.chromium.org/issues/542403045"}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Ubuntu 22.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "chromium-browser", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "chromium", "status": "fixed", "fixed": "152.0.7977.82-1~deb12u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"152.0.7977.82-1~deb12u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "chromium", "status": "fixed", "fixed": "152.0.7977.82-1~deb13u1", "cmd": "sudo apt update && sudo apt install --only-upgrade chromium\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' chromium)\" ge \"152.0.7977.82-1~deb13u1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-53266", "publisher": "kernel.org", "title": "Linux Kernel Out-of-Bounds Write Vulnerability", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: make ebt_snat ARP rewrite writable\n\nThe ebtables SNAT target keeps the Ethernet source address rewrite\nbehind skb_ensure_writable(skb, 0).  This is intentional: at the bridge\nebtables hooks the Ethernet header is addressed through\nskb_mac_header()/eth_hdr(), while skb->data points at the Ethernet\npayload.  Asking skb_ensure_writable() for ETH_HLEN bytes would ", "cvss": 8.8, "sev": "HIGH", "epss": 0.00827, "kev": true, "added": "2026-06-25", "pub": "2026-06-25T09:16:44.643", "modified": "2026-09-19T04:17:53.580", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.4.73 and < 5.5", ">= 5.8.17 and < 5.9", ">= 5.9.2 and < 5.10.259", ">= 5.11 and < 5.15.210", ">= 5.16 and < 6.1.176", ">= 6.2 and < 6.6.143", ">= 6.7 and < 6.12.94", ">= 6.13 and < 6.18.36"], "fixed": "5.5, 5.9, 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-53266"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d"}, {"t": "Patch", "u": "https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-21", "kev_added": "2026-09-18", "ransom": false, "priority": 75, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.57056, "pinned": false, "pocs": [{"kind": "poc", "name": "suominen/CVE-2026-53266 (0 stars)", "url": "https://github.com/suominen/CVE-2026-53266", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-198.208", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-198.208\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "fixed", "fixed": "6.8.0-146.146", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.8.0-146.146\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 20.04", "pkg": "linux-hwe-5.15", "status": "fixed", "fixed": "5.15.0-198.208~20.04.1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux-hwe-5.15)\" ge \"5.15.0-198.208~20.04.1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux-hwe-6.8", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "6.1.176-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.1.176-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "6.12.94-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"6.12.94-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 10", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-211.59.1.el10_2", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71233\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 10.0 Extended Update Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-6.12.0-55.106.1.el10_0", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71326\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 6 Extended Lifecycle Support  - EXTENSION", "pkg": "kernel", "status": "fixed", "fixed": "kernel-2.6.32-754.64.1.el6", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:73732\nrpm -q kernel", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "kernel-rt", "status": "fixed", "fixed": "kernel-rt-3.10.0-1160.164.1.rt56.1316.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71657\nrpm -q kernel-rt", "url": null, "note": null}, {"os": "RHEL 7 Extended Lifecycle Support", "pkg": "kernel", "status": "fixed", "fixed": "kernel-3.10.0-1160.164.1.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2026:71687\nrpm -q kernel", "url": null, "note": null}, {"os": "Amazon Linux 2023", "pkg": "see advisory", "status": "fixed", "fixed": null, "cmd": "sudo dnf update --advisory=ALAS2023-2026-1968", "url": "https://alas.aws.amazon.com/cve/html/CVE-2026-53266.html", "note": "ALAS2023-2026-1968"}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2026-87886", "publisher": "Acronis International GmbH", "title": "Acronis Backup Incorrect Default Permissions Vulnerability", "summary": "Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00233, "kev": true, "added": "2026-09-17", "pub": "2026-09-17T23:18:53.763", "modified": "2026-09-18T19:29:35.067", "products": [{"name": "acronis backup", "vendor": "acronis", "type": "app", "affected": ["< 1.2.3"], "fixed": "1.2.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version"}, {"label": "2. UPGRADE to 1.2.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade acronis-backup"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade acronis-backup"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "acronis backup", "vendor": "acronis", "type": "app", "affected": ["< 1.8.11"], "fixed": "1.8.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version"}, {"label": "2. UPGRADE to 1.8.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade acronis-backup"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade acronis-backup"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "acronis backup", "vendor": "acronis", "type": "app", "affected": ["< 1.9.3", "1.9.3", "1.9.3 hotfix1", "1.9.3 hotfix2"], "fixed": "1.9.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version"}, {"label": "2. UPGRADE to 1.9.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade acronis-backup"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade acronis-backup"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-87886"}, {"t": "Vendor Advisory", "u": "https://security-advisory.acronis.com/advisories/SEC-10986"}], "cwe": ["CWE-276"], "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-19", "kev_added": "2026-09-16", "ransom": false, "priority": 56, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.134, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-20079", "publisher": "Cisco Systems, Inc.", "title": "Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability", "summary": "A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.&nbsp;\r\n\r\nThis vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to a", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.88472, "kev": true, "added": "2026-03-04", "pub": "2026-03-04T18:16:24.230", "modified": "2026-09-16T17:17:16.340", "products": [{"name": "secure firewall management center", "vendor": "cisco", "type": "app", "affected": ["7.0.0", "7.0.0.1", "7.0.1", "7.0.1.1", "7.0.2", "7.0.2.1", "7.0.3", "7.0.4"], "fixed": null, "safe": "before 7.0.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy secure-firewall-management-center || rpm -q secure-firewall-management-center || secure-firewall-management-center --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 7.0.0 (Debian / Ubuntu)", "cmd": "apt-cache madison secure-firewall-management-center\nsudo apt install secure-firewall-management-center=<VERSION_BEFORE_7.0.0>\nsudo apt-mark hold secure-firewall-management-center"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list secure-firewall-management-center\nsudo dnf downgrade secure-firewall-management-center-<VERSION_BEFORE_7.0.0>\nsudo dnf versionlock add secure-firewall-management-center"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-20079"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"}], "cwe": ["CWE-288"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-12", "kev_added": "2026-09-09", "ransom": false, "priority": 98, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99774, "pocs": [{"kind": "poc", "name": "CyberAuth/CVE-2026-20079 (6 stars)", "url": "https://github.com/CyberAuth/CVE-2026-20079", "stars": 6}, {"kind": "poc", "name": "0xBlackash/CVE-2026-20079 (0 stars)", "url": "https://github.com/0xBlackash/CVE-2026-20079", "stars": 0}, {"kind": "poc", "name": "DiegoArias008/CVE-2026-20079-checker (0 stars)", "url": "https://github.com/DiegoArias008/CVE-2026-20079-checker", "stars": 0}, {"kind": "msf", "name": "Cisco Secure Firewall Management Center Authentication Bypass RCE", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_fmc_auth_bypass_rce.rb"}, {"kind": "nuclei", "name": "Cisco Secure Firewall Management Center - Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20079.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-76461", "publisher": "Cisco Systems, Inc.", "title": "Cisco Secure Email Gateway SQL Injection Vulnerability", "summary": "A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.\r\n\r\nThis vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affecte", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.29543, "kev": true, "added": "2026-09-14", "pub": "2026-09-14T17:17:51.113", "modified": "2026-09-15T12:47:32.497", "products": [{"name": "asyncos", "vendor": "cisco", "type": "os", "affected": ["< 15.5.5-014", ">= 16.0 and < 16.0.4-302", ">= 16.5 and < 16.5.0-780"], "fixed": "15.5.5-014, 16.0.4-302, 16.5.0-780", "safe": "before 16.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-76461"}, {"t": "Vendor Advisory", "u": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-17", "kev_added": "2026-09-14", "ransom": false, "priority": 92, "tier": "P0", "why": ["Critical severity", "EPSS top 2%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98191, "pinned": false, "pocs": [{"kind": "poc", "name": "0xBlackash/CVE-2026-76461 (2 stars)", "url": "https://github.com/0xBlackash/CVE-2026-76461", "stars": 2}, {"kind": "poc", "name": "S3v3n-JG/CVE-2026-76461 (1 stars)", "url": "https://github.com/S3v3n-JG/CVE-2026-76461", "stars": 1}, {"kind": "poc", "name": "HORKimhab/CVE-2026-76461 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-76461", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Cisco Security Advisories", "group": "vendor", "title": "Cisco Secure Email Gateway SQL Injection Vulnerability", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Email%20Gateway%20SQL%20Injection%20Vulnerability%26vs_k=1", "date": "2026-09-17"}], "buzz": 1}, {"id": "CVE-2026-82078", "publisher": "PaperCut", "title": "PaperCut NG/MF Unsafe Reflection Vulnerability", "summary": "An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security conte", "cvss": 9.1, "sev": "CRITICAL", "epss": 0.63532, "kev": true, "added": "2026-08-28", "pub": "2026-08-28T16:18:31.240", "modified": "2026-09-14T00:16:56.777", "products": [{"name": "papercut mf", "vendor": "papercut", "type": "app", "affected": ["< 24.1.9", ">= 25.0.2 and < 25.0.12", ">= 26.0.2 and < 26.0.4"], "fixed": "24.1.9, 25.0.12, 26.0.4", "safe": "before 25.0.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy papercut-mf || rpm -q papercut-mf || papercut-mf --version"}, {"label": "2. UPGRADE to 24.1.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade papercut-mf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade papercut-mf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.0.2 (Debian / Ubuntu)", "cmd": "apt-cache madison papercut-mf\nsudo apt install papercut-mf=<VERSION_BEFORE_25.0.2>\nsudo apt-mark hold papercut-mf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list papercut-mf\nsudo dnf downgrade papercut-mf-<VERSION_BEFORE_25.0.2>\nsudo dnf versionlock add papercut-mf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "papercut ng", "vendor": "papercut", "type": "app", "affected": ["< 24.1.9", ">= 25.0.2 and < 25.0.12", ">= 26.0.2 and < 26.0.4"], "fixed": "24.1.9, 25.0.12, 26.0.4", "safe": "before 25.0.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy papercut-ng || rpm -q papercut-ng || papercut-ng --version"}, {"label": "2. UPGRADE to 24.1.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade papercut-ng"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade papercut-ng"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.0.2 (Debian / Ubuntu)", "cmd": "apt-cache madison papercut-ng\nsudo apt install papercut-ng=<VERSION_BEFORE_25.0.2>\nsudo apt-mark hold papercut-ng"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list papercut-ng\nsudo dnf downgrade papercut-ng-<VERSION_BEFORE_25.0.2>\nsudo dnf versionlock add papercut-ng"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82078"}, {"t": "Patch, Vendor Advisory", "u": "https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/rapid7/metasploit-framework/pull/21842"}, {"t": "Patch, Third Party Advisory", "u": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82078"}], "cwe": ["CWE-470"], "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "H", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-09-14", "kev_added": "2026-08-31", "ransom": false, "priority": 87, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference"], "fix": true, "watched": false, "epss_pct": 0.99214, "pocs": [{"kind": "msf", "name": "PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "watchTowr Labs", "group": "research", "title": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578", "url": "https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/", "date": "2026-10-09"}], "buzz": 1}, {"id": "CVE-2026-81578", "publisher": "PaperCut", "title": "PaperCut NG/MF Missing Authentication for Critical Function Vulnerability", "summary": "An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific\u00a0conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the  completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.85581, "kev": true, "added": "2026-08-28", "pub": "2026-08-28T16:18:29.600", "modified": "2026-09-14T00:16:56.207", "products": [{"name": "papercut mf", "vendor": "papercut", "type": "app", "affected": ["< 24.1.9", ">= 25.0.2 and < 25.0.12", ">= 26.0.2 and < 26.0.4"], "fixed": "24.1.9, 25.0.12, 26.0.4", "safe": "before 25.0.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy papercut-mf || rpm -q papercut-mf || papercut-mf --version"}, {"label": "2. UPGRADE to 24.1.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade papercut-mf"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade papercut-mf"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.0.2 (Debian / Ubuntu)", "cmd": "apt-cache madison papercut-mf\nsudo apt install papercut-mf=<VERSION_BEFORE_25.0.2>\nsudo apt-mark hold papercut-mf"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list papercut-mf\nsudo dnf downgrade papercut-mf-<VERSION_BEFORE_25.0.2>\nsudo dnf versionlock add papercut-mf"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "papercut ng", "vendor": "papercut", "type": "app", "affected": ["< 24.1.9", ">= 25.0.2 and < 25.0.12", ">= 26.0.2 and < 26.0.4"], "fixed": "24.1.9, 25.0.12, 26.0.4", "safe": "before 25.0.2", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy papercut-ng || rpm -q papercut-ng || papercut-ng --version"}, {"label": "2. UPGRADE to 24.1.9 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade papercut-ng"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade papercut-ng"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 25.0.2 (Debian / Ubuntu)", "cmd": "apt-cache madison papercut-ng\nsudo apt install papercut-ng=<VERSION_BEFORE_25.0.2>\nsudo apt-mark hold papercut-ng"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list papercut-ng\nsudo dnf downgrade papercut-ng-<VERSION_BEFORE_25.0.2>\nsudo dnf versionlock add papercut-ng"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-81578"}, {"t": "Patch, Vendor Advisory", "u": "https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/rapid7/metasploit-framework/pull/21842"}, {"t": "Patch, Third Party Advisory", "u": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81578"}], "cwe": ["CWE-305"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-14", "kev_added": "2026-08-31", "ransom": false, "priority": 94, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99726, "pocs": [{"kind": "poc", "name": "yora1928/PaperCut-CVE-2026-81578-82078 (4 stars)", "url": "https://github.com/yora1928/PaperCut-CVE-2026-81578-82078", "stars": 4}, {"kind": "poc", "name": "virologi-info/papercut-toolkit (2 stars)", "url": "https://github.com/virologi-info/papercut-toolkit", "stars": 2}, {"kind": "msf", "name": "PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb"}, {"kind": "nuclei", "name": "PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-Direct", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-81578.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "watchTowr Labs", "group": "research", "title": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578", "url": "https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/", "date": "2026-10-09"}], "buzz": 1}, {"id": "CVE-2026-84869", "publisher": "ConnectWise", "title": "ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability", "summary": "A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.", "cvss": 9.9, "sev": "CRITICAL", "epss": 0.00924, "kev": true, "added": "2026-09-08", "pub": "2026-09-08T20:18:51.147", "modified": "2026-09-12T04:16:42.757", "products": [{"name": "screenconnect", "vendor": "connectwise", "type": "app", "affected": ["< 26.6.5.9742"], "fixed": "26.6.5.9742", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy screenconnect || rpm -q screenconnect || screenconnect --version"}, {"label": "2. UPGRADE to 26.6.5.9742 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade screenconnect"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade screenconnect"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-84869"}, {"t": "Vendor Advisory", "u": "https://www.connectwise.com/company/trust/advisories"}, {"t": "Vendor Advisory", "u": "https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin"}], "cwe": ["CWE-269", "CWE-862"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-14", "kev_added": "2026-09-11", "ransom": false, "priority": 75, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.6008, "pinned": false, "pocs": [], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-42016", "publisher": "JFrog", "title": "JFrog Artifactory Incorrect Authorization Vulnerability", "summary": "JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token\u2019s scope.", "cvss": 8.1, "sev": "HIGH", "epss": 0.08643, "kev": true, "added": "2026-07-27", "pub": "2026-07-27T20:16:39.613", "modified": "2026-09-12T04:16:32.483", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": ["< 7.133.11"], "fixed": "7.133.11", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.133.11 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-42016"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-863"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-25", "kev_added": "2026-09-11", "ransom": false, "priority": 77, "tier": "P0", "why": ["High severity", "EPSS top 5%: very likely to be exploited", "Exploited in the wild (CISA KEV)"], "fix": true, "watched": false, "epss_pct": 0.9511, "pinned": false, "pocs": [{"kind": "writeup", "name": "www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-20", "url": "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201"}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "Wiz Research", "group": "research", "title": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329", "url": "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201", "date": "2026-09-10"}], "buzz": 1}, {"id": "CVE-2026-67277", "publisher": "CERT.PL", "title": "MikroTik RouterOS Missing Authentication for Critical Function Vulnerability", "summary": "RouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With \"random-data=false\", the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.\n\n\n", "cvss": 8.2, "sev": "HIGH", "epss": 0.0156, "kev": true, "added": "2026-09-05", "pub": "2026-09-05T20:17:18.120", "modified": "2026-09-11T12:52:29.533", "products": [{"name": "routeros", "vendor": "mikrotik", "type": "os", "affected": [">= 6.0 and < 6.49.21", ">= 7.0 and < 7.23.4", ">= 7.24 and < 7.24.2"], "fixed": "6.49.21, 7.23.4, 7.24.2", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-67277"}, {"t": "Mitigation, Third Party Advisory", "u": "https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"}, {"t": "Vendor Advisory", "u": "https://mikrotik.com/supportsec/september-2026-vulnerability/"}], "cwe": ["CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-13", "kev_added": "2026-09-10", "ransom": false, "priority": 82, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.75058, "pinned": false, "pocs": [{"kind": "writeup", "name": "forum.mikrotik.com/t/7-24-2-stable-is-released/272800", "url": "https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-86060", "publisher": "CERT.PL", "title": "MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "summary": "RouterOS contains an argument-handling flaw in the SSH login\npath involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask\u00a0to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions:\u00a06.49.21 (Long-term),\u00a07.23.4 (Long-term)\u00a0and\u00a07.24.2 (Stable)", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.06392, "kev": true, "added": "2026-09-05", "pub": "2026-09-05T20:17:18.703", "modified": "2026-09-11T12:52:16.507", "products": [{"name": "routeros", "vendor": "mikrotik", "type": "os", "affected": [">= 6.0 and < 6.49.21", ">= 7.0 and < 7.23.4", ">= 7.24 and < 7.24.2"], "fixed": "6.49.21, 7.23.4, 7.24.2", "safe": "before 6.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86060"}, {"t": "Mitigation, Third Party Advisory", "u": "https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"}, {"t": "Vendor Advisory", "u": "https://mikrotik.com/supportsec/september-2026-vulnerability/"}], "cwe": ["CWE-88"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-13", "kev_added": "2026-09-10", "ransom": false, "priority": 96, "tier": "P0", "why": ["Critical severity", "EPSS top 6%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.93656, "pocs": [{"kind": "poc", "name": "digiprosec/MicroTrick (55 stars)", "url": "https://github.com/digiprosec/MicroTrick", "stars": 55}, {"kind": "poc", "name": "gagaltotal/CVE-2026-mikrotik-poc (4 stars)", "url": "https://github.com/gagaltotal/CVE-2026-mikrotik-poc", "stars": 4}, {"kind": "poc", "name": "bahirul/cve-2026-86060 (1 stars)", "url": "https://github.com/bahirul/cve-2026-86060", "stars": 1}, {"kind": "writeup", "name": "forum.mikrotik.com/t/7-24-2-stable-is-released/272800", "url": "https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"}, {"kind": "edb", "name": "MikroTrick_ 7.24_ 7.24.2_ 7.0.0_ 7.23.4_ 6.0.0_ 6.49.21 - RCE", "url": "https://www.exploit-db.com/exploits/52683"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "CERT Polska", "group": "gov", "title": "MikroTrick: technical analysis, disclosure process, and the use of LLM agents", "url": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/", "date": "2026-09-22"}, {"src": "CERT Polska", "group": "gov", "title": "Vulnerabilities in Mikrotik RouterOS software", "url": "https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve/", "date": "2026-09-05"}], "buzz": 1}, {"id": "CVE-2026-86218", "publisher": "N-able", "title": "N-able N-central Static Code Injection Vulnerability", "summary": "N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.13349, "kev": true, "added": "2026-09-06", "pub": "2026-09-06T03:17:17.373", "modified": "2026-09-09T05:18:19.490", "products": [{"name": "n-central", "vendor": "n-able", "type": "app", "affected": ["< 2026.3", "2026.3", "2026.3 hotfix1", "2026.3 hotfix2", "2026.3 hotfix3"], "fixed": "2026.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy n-central || rpm -q n-central || n-central --version"}, {"label": "2. UPGRADE to 2026.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade n-central"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade n-central"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-86218"}, {"t": "Vendor Advisory", "u": "https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution"}], "cwe": ["CWE-96"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-11", "kev_added": "2026-09-08", "ransom": false, "priority": 96, "tier": "P0", "why": ["Critical severity", "EPSS top 4%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96409, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-86218 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-86218", "stars": 0}, {"kind": "poc", "name": "Udyz/CVE-2026-86218 (0 stars)", "url": "https://github.com/Udyz/CVE-2026-86218", "stars": 0}, {"kind": "poc", "name": "super-meuw/CVE-2026-86218 (0 stars)", "url": "https://github.com/super-meuw/CVE-2026-86218", "stars": 0}, {"kind": "msf", "name": "N-able N-central Struts BeanUtils Unauthenticated RCE", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nable_ncentral_unauth_rce_cve_2026_86218.rb"}, {"kind": "nuclei", "name": "N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-86218.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-81963", "publisher": "Microsoft Corporation", "title": "Microsoft Windows Link Following Vulnerability", "summary": "Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.", "cvss": 7.8, "sev": "HIGH", "epss": 0.00393, "kev": true, "added": "2026-09-08", "pub": "2026-09-08T18:21:00.090", "modified": "2026-09-09T05:18:17.173", "products": [{"name": "windows 11 23h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.22631.7582"], "fixed": "10.0.22631.7582", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 24h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.9445"], "fixed": "10.0.26100.9445", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 25h2", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26200.9445"], "fixed": "10.0.26200.9445", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows 11 26h1", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.28000.2954"], "fixed": "10.0.28000.2954", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "windows server 2025", "vendor": "microsoft", "type": "os", "affected": ["< 10.0.26100.33438"], "fixed": "10.0.26100.33438", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-81963"}, {"t": "Patch, Vendor Advisory", "u": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"}], "cwe": ["CWE-59", "CWE-284"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-09-22", "kev_added": "2026-09-08", "ransom": false, "priority": 65, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.32362, "pinned": false, "pocs": [{"kind": "poc", "name": "rsah35404-star/stunning-octo-doodle (0 stars)", "url": "https://github.com/rsah35404-star/stunning-octo-doodle", "stars": 0}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "Windows Server 2025 (Server Core installation)", "pkg": "KB5122871", "status": "fixed", "fixed": "10.0.26100.33438", "cmd": "Install KB5122871 via Windows Update, then verify:\nGet-HotFix -Id KB5122871", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871", "note": "KB5122871"}, {"os": "Windows Server 2025", "pkg": "KB5122871", "status": "fixed", "fixed": "10.0.26100.33438", "cmd": "Install KB5122871 via Windows Update, then verify:\nGet-HotFix -Id KB5122871", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871", "note": "KB5122871"}, {"os": "Windows 11 Version 25H2 for ARM64-based Systems", "pkg": "KB5124008", "status": "fixed", "fixed": "10.0.26200.9445", "cmd": "Install KB5124008 via Windows Update, then verify:\nGet-HotFix -Id KB5124008", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008", "note": "KB5124008"}, {"os": "Windows 11 Version 25H2 for x64-based Systems", "pkg": "KB5124008", "status": "fixed", "fixed": "10.0.26200.9445", "cmd": "Install KB5124008 via Windows Update, then verify:\nGet-HotFix -Id KB5124008", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008", "note": "KB5124008"}, {"os": "Windows 11 Version 23H2 for ARM64-based Systems", "pkg": "KB5122880", "status": "fixed", "fixed": "10.0.22631.7582", "cmd": "Install KB5122880 via Windows Update, then verify:\nGet-HotFix -Id KB5122880", "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880", "note": "KB5122880"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-75650", "publisher": "Adobe Systems Incorporated", "title": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "summary": "Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.03949, "kev": true, "added": "2026-09-07", "pub": "2026-09-07T21:17:30.863", "modified": "2026-09-09T05:18:07.237", "products": [{"name": "commerce", "vendor": "adobe", "type": "app", "affected": ["< 2.4.4", "2.4.4", "2.4.4 p1", "2.4.4 p10", "2.4.4 p11", "2.4.4 p12", "2.4.4 p13", "2.4.4 p14"], "fixed": "2.4.4", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce || rpm -q commerce || commerce --version"}, {"label": "2. UPGRADE to 2.4.4 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commerce"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commerce"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "commerce b2b", "vendor": "adobe", "type": "app", "affected": ["< 1.3.3", "1.3.3", "1.3.3 p1", "1.3.3 p10", "1.3.3 p11", "1.3.3 p12", "1.3.3 p13", "1.3.3 p14"], "fixed": "1.3.3", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy commerce-b2b || rpm -q commerce-b2b || commerce-b2b --version"}, {"label": "2. UPGRADE to 1.3.3 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade commerce-b2b"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade commerce-b2b"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "magento", "vendor": "adobe", "type": "app", "affected": ["< 2.4.6", "2.4.6", "2.4.6 p1", "2.4.6 p10", "2.4.6 p11", "2.4.6 p12", "2.4.6 p13", "2.4.6 p14"], "fixed": "2.4.6", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy magento || rpm -q magento || magento --version"}, {"label": "2. UPGRADE to 2.4.6 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade magento"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade magento"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-75650"}, {"t": "Patch, Vendor Advisory", "u": "https://helpx.adobe.com/security/products/magento/apsb26-146.html"}], "cwe": ["CWE-1336"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-11", "kev_added": "2026-09-08", "ransom": false, "priority": 96, "tier": "P0", "why": ["Critical severity", "EPSS top 10%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.90376, "pinned": false, "pocs": [{"kind": "poc", "name": "fortbridge/stylesmuggler (7 stars)", "url": "https://github.com/fortbridge/stylesmuggler", "stars": 7}, {"kind": "poc", "name": "dinosn/cve-2026-75650-magento-validation-lab (6 stars)", "url": "https://github.com/dinosn/cve-2026-75650-magento-validation-lab", "stars": 6}, {"kind": "poc", "name": "disrex-group/stylesmuggler-adobe-patches (5 stars)", "url": "https://github.com/disrex-group/stylesmuggler-adobe-patches", "stars": 5}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-9586", "publisher": "Security Risk Advisors", "title": "Sangoma Switchvox SQL Injection Vulnerability", "summary": "An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997).\u00a0The /pa endpoint processes XML\u00a0content beginning with <PolycomIPPhone> and\u00a0directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization.\u00a0An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, includin", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.18979, "kev": true, "added": "2026-07-17", "pub": "2026-07-17T17:17:18.150", "modified": "2026-09-03T13:06:25.427", "products": [{"name": "switchvox", "vendor": "sangoma", "type": "app", "affected": [">= 8.2.2.1 and < 8.4.0.2"], "fixed": "8.4.0.2", "safe": "before 8.2.2.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy switchvox || rpm -q switchvox || switchvox --version"}, {"label": "2. UPGRADE to 8.4.0.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade switchvox"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade switchvox"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 8.2.2.1 (Debian / Ubuntu)", "cmd": "apt-cache madison switchvox\nsudo apt install switchvox=<VERSION_BEFORE_8.2.2.1>\nsudo apt-mark hold switchvox"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list switchvox\nsudo dnf downgrade switchvox-<VERSION_BEFORE_8.2.2.1>\nsudo dnf versionlock add switchvox"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-9586"}], "cwe": ["CWE-89"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-05", "kev_added": "2026-09-02", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 3%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.973, "pocs": [{"kind": "poc", "name": "fromABUV/CVE-2026-9586_POC_EXPLOIT (1 stars)", "url": "https://github.com/fromABUV/CVE-2026-9586_POC_EXPLOIT", "stars": 1}, {"kind": "poc", "name": "HORKimhab/CVE-2026-9586 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-9586", "stars": 0}, {"kind": "writeup", "name": "sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+V", "url": "https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026"}, {"kind": "nuclei", "name": "Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9586.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-83548", "publisher": "SonicWALL, Inc.", "title": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "summary": "A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.08043, "kev": true, "added": "2026-09-01", "pub": "2026-09-01T22:17:13.170", "modified": "2026-09-03T13:06:16.053", "products": [{"name": "sma8200v", "vendor": "sonicwall", "type": "app", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sma8200v || rpm -q sma8200v || sma8200v --version"}, {"label": "2. UPGRADE to 12.4.3-03526 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sma8200v"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sma8200v"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 12.5.0 (Debian / Ubuntu)", "cmd": "apt-cache madison sma8200v\nsudo apt install sma8200v=<VERSION_BEFORE_12.5.0>\nsudo apt-mark hold sma8200v"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sma8200v\nsudo dnf downgrade sma8200v-<VERSION_BEFORE_12.5.0>\nsudo dnf versionlock add sma8200v"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "sma6210 firmware", "vendor": "sonicwall", "type": "os", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "sma7210 firmware", "vendor": "sonicwall", "type": "os", "affected": ["< 12.4.3-03526", ">= 12.5.0 and < 12.5.0-02952"], "fixed": "12.4.3-03526, 12.5.0-02952", "safe": "before 12.5.0", "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-83548"}, {"t": "Vendor Advisory", "u": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016"}], "cwe": ["CWE-441", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-05", "kev_added": "2026-09-02", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 5%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.94784, "pocs": [{"kind": "poc", "name": "xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis (0 stars)", "url": "https://github.com/xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis", "stars": 0}, {"kind": "poc", "name": "xcoy0te/CVE-2026-83548-checker (0 stars)", "url": "https://github.com/xcoy0te/CVE-2026-83548-checker", "stars": 0}, {"kind": "poc", "name": "HORKimhab/CVE-2026-83548-CVE-2026-83549 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-83548-CVE-2026-83549", "stars": 0}, {"kind": "msf", "name": "SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb"}, {"kind": "nuclei", "name": "SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDB", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-83548.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "CERT-FR Alerts", "group": "gov", "title": "Multiples vuln\u00e9rabilit\u00e9s dans SonicWall Secure Mobile Access (02 septembre 2026)", "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-009/", "date": "2026-09-02"}], "buzz": 1}, {"id": "CVE-2026-82329", "publisher": "JFrog", "title": "JFrog Artifactory Improper Authentication Vulnerability", "summary": "JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.14372, "kev": true, "added": "2026-08-28", "pub": "2026-08-28T20:20:21.293", "modified": "2026-09-03T13:06:15.630", "products": [{"name": "artifactory", "vendor": "jfrog", "type": "app", "affected": [">= 7.111.4 and < 7.111.21", ">= 7.117.0 and < 7.117.28", ">= 7.125.0 and < 7.125.20", ">= 7.133.0 and < 7.133.29", ">= 7.146.0 and < 7.146.38", ">= 7.161.0 and < 7.161.20"], "fixed": "7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20", "safe": "before 7.111.4", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy artifactory || rpm -q artifactory || artifactory --version"}, {"label": "2. UPGRADE to 7.111.21 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade artifactory"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade artifactory"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 7.111.4 (Debian / Ubuntu)", "cmd": "apt-cache madison artifactory\nsudo apt install artifactory=<VERSION_BEFORE_7.111.4>\nsudo apt-mark hold artifactory"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list artifactory\nsudo dnf downgrade artifactory-<VERSION_BEFORE_7.111.4>\nsudo dnf versionlock add artifactory"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-82329"}, {"t": "Vendor Advisory", "u": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-05", "kev_added": "2026-09-02", "ransom": false, "priority": 96, "tier": "P0", "why": ["Critical severity", "EPSS top 3%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.96617, "pocs": [{"kind": "poc", "name": "dinosn/cve-2026-82329-jfrog-artifactory (12 stars)", "url": "https://github.com/dinosn/cve-2026-82329-jfrog-artifactory", "stars": 12}, {"kind": "poc", "name": "ynsmroztas/CVE-2026-82329-JFrog-Artifactory-Auth-Bypass (6 stars)", "url": "https://github.com/ynsmroztas/CVE-2026-82329-JFrog-Artifactory-Auth-Bypass", "stars": 6}, {"kind": "poc", "name": "tc4dy/CVE-2026-82329-PoC-Exploit (4 stars)", "url": "https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit", "stars": 4}, {"kind": "nuclei", "name": "JFrog Artifactory Access Blank Join Key Authentication Bypass", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-82329.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Wiz Research", "group": "research", "title": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329", "url": "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201", "date": "2026-09-10"}], "buzz": 1}, {"id": "CVE-2026-59822", "publisher": "GitHub, Inc.", "title": "BerriAI LiteLLM Improper Authentication Vulnerability", "summary": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.", "cvss": 8.2, "sev": "HIGH", "epss": 0.00836, "kev": true, "added": "2026-07-08", "pub": "2026-07-08T20:16:57.683", "modified": "2026-09-03T13:05:59.573", "products": [{"name": "litellm", "vendor": "litellm", "type": "app", "affected": ["< 1.84.0"], "fixed": "1.84.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy litellm || rpm -q litellm || litellm --version"}, {"label": "2. UPGRADE to 1.84.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade litellm"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade litellm"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-59822"}, {"t": "Patch", "u": "https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c"}, {"t": "Issue Tracking, Patch", "u": "https://github.com/BerriAI/litellm/pull/26463"}, {"t": "Mitigation, Patch", "u": "https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q"}], "cwe": ["CWE-287", "CWE-306"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": false, "kev_due": "2026-09-16", "kev_added": "2026-09-02", "ransom": false, "priority": 73, "tier": "P0", "why": ["High severity", "Exploited in the wild (CISA KEV)", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.57323, "pinned": false, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2026-59822 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2026-59822", "stars": 0}, {"kind": "writeup", "name": "www.wiz.io/blog/ai-infrastructure-honeypot", "url": "https://www.wiz.io/blog/ai-infrastructure-honeypot"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Python (pip)", "pkg": "litellm", "status": "fixed", "fixed": "1.84.0", "cmd": "pip install --upgrade \"litellm>=1.84.0\"\npip show litellm", "url": "https://github.com/advisories/GHSA-7488-6r32-c95q", "note": "vulnerable: < 1.84.0"}, {"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true}, {"id": "CVE-2026-49869", "publisher": "GitHub, Inc.", "title": "Kestra OSS OS Command Injection Vulnerability", "summary": "Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith(\"/configs\") to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match, any API path whose last segment is configs bypasses authentication entirely. An unauthenticated remote attacker can exploit this to create and exec", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.02095, "kev": true, "added": "2026-06-26", "pub": "2026-06-26T22:16:32.113", "modified": "2026-09-03T13:05:55.387", "products": [{"name": "kestra", "vendor": "kestra", "type": "app", "affected": ["< 1.0.45", ">= 1.1.0 and < 1.3.21"], "fixed": "1.0.45, 1.3.21", "safe": "before 1.1.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy kestra || rpm -q kestra || kestra --version"}, {"label": "2. UPGRADE to 1.0.45 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade kestra"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade kestra"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.1.0 (Debian / Ubuntu)", "cmd": "apt-cache madison kestra\nsudo apt install kestra=<VERSION_BEFORE_1.1.0>\nsudo apt-mark hold kestra"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list kestra\nsudo dnf downgrade kestra-<VERSION_BEFORE_1.1.0>\nsudo dnf versionlock add kestra"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-49869"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx"}], "cwe": ["CWE-78", "CWE-184", "CWE-287", "CWE-918"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-05", "kev_added": "2026-09-02", "ransom": false, "priority": 93, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.81526, "pinned": false, "pocs": [{"kind": "poc", "name": "EQSTLab/CVE-2026-49869 (4 stars)", "url": "https://github.com/EQSTLab/CVE-2026-49869", "stars": 4}, {"kind": "poc", "name": "Ap0dexMe0/CVE-2026-49869 (3 stars)", "url": "https://github.com/Ap0dexMe0/CVE-2026-49869", "stars": 3}, {"kind": "writeup", "name": "github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx", "url": "https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2023-49105", "publisher": "MITRE", "title": "ownCloud Improper Authentication Vulnerability", "summary": "An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.4319, "kev": true, "added": "2023-11-21", "pub": "2023-11-21T22:15:08.613", "modified": "2026-08-28T12:21:09.753", "products": [{"name": "owncloud server", "vendor": "owncloud", "type": "app", "affected": [">= 10.6.0 and < 10.13.1"], "fixed": "10.13.1", "safe": "before 10.6.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy owncloud-server || rpm -q owncloud-server || owncloud-server --version"}, {"label": "2. UPGRADE to 10.13.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade owncloud-server"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade owncloud-server"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 10.6.0 (Debian / Ubuntu)", "cmd": "apt-cache madison owncloud-server\nsudo apt install owncloud-server=<VERSION_BEFORE_10.6.0>\nsudo apt-mark hold owncloud-server"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list owncloud-server\nsudo dnf downgrade owncloud-server-<VERSION_BEFORE_10.6.0>\nsudo dnf versionlock add owncloud-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2023-49105"}, {"t": "Vendor Advisory", "u": "https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/"}, {"t": "Vendor Advisory", "u": "https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/"}], "cwe": ["CWE-287"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-08-30", "kev_added": "2026-08-27", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.98725, "pinned": false, "pocs": [{"kind": "poc", "name": "ambionics/owncloud-exploits (41 stars)", "url": "https://github.com/ambionics/owncloud-exploits", "stars": 41}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-60004", "publisher": "MITRE", "title": "Gitea Code Injection Vulnerability", "summary": "Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.23988, "kev": true, "added": "2026-08-26", "pub": "2026-08-26T20:17:56.010", "modified": "2026-08-27T11:41:19.230", "products": [{"name": "gitea", "vendor": "gitea", "type": "app", "affected": [">= 1.17.0 and < 1.27.1"], "fixed": "1.27.1", "safe": "before 1.17.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy gitea || rpm -q gitea || gitea --version"}, {"label": "2. UPGRADE to 1.27.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade gitea"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade gitea"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 1.17.0 (Debian / Ubuntu)", "cmd": "apt-cache madison gitea\nsudo apt install gitea=<VERSION_BEFORE_1.17.0>\nsudo apt-mark hold gitea"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list gitea\nsudo dnf downgrade gitea-<VERSION_BEFORE_1.17.0>\nsudo dnf versionlock add gitea"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-60004"}, {"t": "Exploit, Mitigation", "u": "https://github.com/0xBlackash/CVE-2026-60004"}, {"t": "Exploit, Vendor Advisory", "u": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m"}], "cwe": ["CWE-94"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-08-28", "kev_added": "2026-08-25", "ransom": false, "priority": 97, "tier": "P0", "why": ["Critical severity", "EPSS top 2%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.97841, "pocs": [{"kind": "poc", "name": "imbas007/CVE-2026-60004-POC (17 stars)", "url": "https://github.com/imbas007/CVE-2026-60004-POC", "stars": 17}, {"kind": "poc", "name": "0xBlackash/CVE-2026-60004 (6 stars)", "url": "https://github.com/0xBlackash/CVE-2026-60004", "stars": 6}, {"kind": "poc", "name": "HORKimhab/CVE-2026-60004 (5 stars)", "url": "https://github.com/HORKimhab/CVE-2026-60004", "stars": 5}, {"kind": "nuclei", "name": "Gitea <= 1.27.0 - Pre-Auth Remote Code Execution", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-60004.yaml"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Go", "pkg": "gitea.dev", "status": "fixed", "fixed": "1.27.1", "cmd": "go get gitea.dev@v1.27.1\ngo list -m gitea.dev", "url": "https://github.com/advisories/GHSA-rcr6-4jqh-j84m", "note": "vulnerable: >= 1.17.0, < 1.27.1"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}, {"os": "Alpine 3.24", "pkg": "forgejo", "status": "fixed", "fixed": "forgejo-15.0.6-r0", "cmd": "apk add --upgrade forgejo\napk info -v forgejo", "url": null, "note": null}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true, "mentions": [{"src": "Canadian Cyber Centre", "group": "gov", "title": "Gitea security advisory (AV26-845) - Update 1", "url": "https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845", "date": "2026-10-20"}], "buzz": 1}, {"id": "CVE-2026-8452", "publisher": "NetScaler", "title": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "summary": "Memory overflow vulnerability\u00a0NetScaler ADC and NetScaler Gateway\u00a0leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a\u00a0Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server", "cvss": 9.8, "sev": "CRITICAL", "epss": 0.01011, "kev": true, "added": "2026-06-30", "pub": "2026-06-30T13:19:33.450", "modified": "2026-08-27T04:18:00.787", "products": [{"name": "netscaler application delivery controller", "vendor": "citrix", "type": "app", "affected": ["< 13.1-37.272", ">= 13.1 and < 13.1-63.18", ">= 14.1 and < 14.1-72.61", "14.1-66.68"], "fixed": "13.1-37.272, 13.1-63.18, 14.1-72.61", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-application-delivery-controller || rpm -q netscaler-application-delivery-controller || netscaler-application-delivery-controller --version"}, {"label": "2. UPGRADE to 13.1-37.272 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-application-delivery-controller"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-application-delivery-controller"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-application-delivery-controller\nsudo apt install netscaler-application-delivery-controller=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-application-delivery-controller"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-application-delivery-controller\nsudo dnf downgrade netscaler-application-delivery-controller-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-application-delivery-controller"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "netscaler gateway", "vendor": "citrix", "type": "app", "affected": [">= 13.1 and < 13.1-63.18", ">= 14.1 and < 14.1-72.61"], "fixed": "13.1-63.18, 14.1-72.61", "safe": "before 13.1", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy netscaler-gateway || rpm -q netscaler-gateway || netscaler-gateway --version"}, {"label": "2. UPGRADE to 13.1-63.18 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade netscaler-gateway"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade netscaler-gateway"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.1 (Debian / Ubuntu)", "cmd": "apt-cache madison netscaler-gateway\nsudo apt install netscaler-gateway=<VERSION_BEFORE_13.1>\nsudo apt-mark hold netscaler-gateway"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list netscaler-gateway\nsudo dnf downgrade netscaler-gateway-<VERSION_BEFORE_13.1>\nsudo dnf versionlock add netscaler-gateway"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452"}, {"t": "Vendor Advisory", "u": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604"}], "cwe": ["CWE-119"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-08-29", "kev_added": "2026-08-26", "ransom": false, "priority": 85, "tier": "P0", "why": ["Critical severity", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.6287, "pinned": false, "pocs": [{"kind": "poc", "name": "securekomodo/citrixInspector (96 stars)", "url": "https://github.com/securekomodo/citrixInspector", "stars": 96}, {"kind": "poc", "name": "watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 (65 stars)", "url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452", "stars": 65}, {"kind": "poc", "name": "BishopFox/CVE-2026-8452-check (1 stars)", "url": "https://github.com/BishopFox/CVE-2026-8452-check", "stars": 1}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "partial"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:12:18.499908+00:00", "vendor_fixed": true, "mentions": [{"src": "watchTowr Labs", "group": "research", "title": "You\u2019re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))", "url": "https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/", "date": "2026-08-14"}], "buzz": 1}, {"id": "CVE-2022-0995", "publisher": "Red Hat, Inc.", "title": "Linux Kernel Out-of-Bounds Write Vulnerability", "summary": "An out-of-bounds (OOB) memory write flaw was found in the Linux kernel\u2019s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.", "cvss": 7.8, "sev": "HIGH", "epss": 0.08859, "kev": true, "added": "2022-03-25", "pub": "2022-03-25T19:15:10.520", "modified": "2026-08-27T04:16:39.223", "products": [{"name": "linux kernel", "vendor": "linux", "type": "os", "affected": [">= 5.8 and < 5.10.106", ">= 5.11 and < 5.15.29", ">= 5.16 and < 5.16.5", "5.17 rc1", "5.17 rc2", "5.17 rc3", "5.17 rc4", "5.17 rc5"], "fixed": "5.10.106, 5.15.29, 5.16.5", "safe": null, "action": "upgrade", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "fedora", "vendor": "fedoraproject", "type": "os", "affected": ["35"], "fixed": null, "safe": "before 35", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h300e firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h300s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h410c firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "h410s firmware", "vendor": "netapp", "type": "os", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995"}, {"t": "Issue Tracking, Patch", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2063786"}, {"t": "Patch, Vendor Advisory", "u": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb"}, {"t": "Issue Tracking, Patch", "u": "https://bugzilla.redhat.com/show_bug.cgi?id=2063786"}, {"t": "Patch, Vendor Advisory", "u": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb"}], "cwe": ["CWE-787"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-08-29", "kev_added": "2026-08-26", "ransom": false, "priority": 86, "tier": "P0", "why": ["High severity", "EPSS top 5%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.95208, "pocs": [{"kind": "poc", "name": "Bonfee/CVE-2022-0995 (498 stars)", "url": "https://github.com/Bonfee/CVE-2022-0995", "stars": 498}, {"kind": "poc", "name": "1nzag/CVE-2022-0995 (2 stars)", "url": "https://github.com/1nzag/CVE-2022-0995", "stars": 2}, {"kind": "poc", "name": "AndreevSemen/CVE-2022-0995 (1 stars)", "url": "https://github.com/AndreevSemen/CVE-2022-0995", "stars": 1}, {"kind": "writeup", "name": "git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb"}, {"kind": "poc", "name": "A1b2rt/cve-2022-0995", "url": "https://github.com/A1b2rt/cve-2022-0995", "stars": 0}, {"kind": "msf", "name": "Watch Queue Out of Bounds Write", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "python-streamlink", "status": "fixed", "fixed": "8.6.2-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-a56fcfdc08", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a56fcfdc08", "note": "FEDORA-2026-a56fcfdc08"}, {"os": "Fedora ELN", "pkg": "valgrind", "status": "fixed", "fixed": "3.28.0-1.eln159", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c593ef1d15", "note": "FEDORA-2026-c593ef1d15"}, {"os": "Ubuntu 20.04", "pkg": "linux", "status": "vulnerable", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 22.04", "pkg": "linux", "status": "fixed", "fixed": "5.15.0-138.148", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.15.0-138.148\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Ubuntu 24.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 24.10", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Ubuntu 25.04", "pkg": "linux", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "Debian 12", "pkg": "linux", "status": "fixed", "fixed": "5.16.18-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.16.18-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "Debian 13", "pkg": "linux", "status": "fixed", "fixed": "5.16.18-1", "cmd": "sudo apt update && sudo apt install --only-upgrade linux\ndpkg --compare-versions \"$(dpkg-query -W -f='${Version}' linux)\" ge \"5.16.18-1\" && echo PATCHED || echo STILL-VULNERABLE", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 7", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}, {"os": "RHEL 8", "pkg": "kernel-rt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-24T06:05:19.655601+00:00", "vendor_fixed": true}, {"id": "CVE-2021-23758", "publisher": "Snyk", "title": "Ajax.NET Professional Deserialization of Untrusted Data Vulnerability", "summary": "All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.", "cvss": 8.1, "sev": "HIGH", "epss": 0.82578, "kev": true, "added": "2021-12-03", "pub": "2021-12-03T20:15:07.557", "modified": "2026-08-27T04:16:38.863", "products": [{"name": "ajaxpro.2", "vendor": "ajaxpro.2 project", "type": "app", "affected": ["all versions"], "fixed": null, "safe": null, "action": "mitigate", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ajaxpro.2 || rpm -q ajaxpro.2 || ajaxpro.2 --version"}, {"label": "No fixed or unaffected release known", "cmd": "Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access."}]}, {"name": "ajax.net professional", "vendor": "michaelschwarz", "type": "app", "affected": ["< 21.10.30.1"], "fixed": "21.10.30.1", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy ajax.net-professional || rpm -q ajax.net-professional || ajax.net-professional --version"}, {"label": "2. UPGRADE to 21.10.30.1 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade ajax.net-professional"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade ajax.net-professional"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57"}, {"t": "Patch, Third Party Advisory", "u": "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57"}], "cwe": ["CWE-502"], "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "H", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-09-09", "kev_added": "2026-08-26", "ransom": false, "priority": 88, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.99666, "pocs": [{"kind": "poc", "name": "numanturle/CVE-2021-23758-POC (18 stars)", "url": "https://github.com/numanturle/CVE-2021-23758-POC", "stars": 18}, {"kind": "writeup", "name": "blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into", "url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"}, {"kind": "writeup", "name": "snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "url": "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971"}, {"kind": "msf", "name": "AjaxPro Deserialization Remote Code Execution", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ajaxpro_deserialization_rce.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "NuGet (.NET)", "pkg": "AjaxNetProfessional", "status": "fixed", "fixed": "21.11.29.1", "cmd": "dotnet add package AjaxNetProfessional --version 21.11.29.1", "url": "https://github.com/advisories/GHSA-6r7c-6w96-8pvw", "note": "vulnerable: <= 21.11.29"}, {"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2019-1068", "publisher": "Microsoft Corporation", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "summary": "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.", "cvss": 8.8, "sev": "HIGH", "epss": 0.57273, "kev": true, "added": "2019-07-15", "pub": "2019-07-15T19:15:16.983", "modified": "2026-08-27T04:16:38.583", "products": [{"name": "sql server", "vendor": "microsoft", "type": "app", "affected": ["2014 sp2", "2014 sp3"], "fixed": null, "safe": "before 2014", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sql-server || rpm -q sql-server || sql-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 2014 (Debian / Ubuntu)", "cmd": "apt-cache madison sql-server\nsudo apt install sql-server=<VERSION_BEFORE_2014>\nsudo apt-mark hold sql-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sql-server\nsudo dnf downgrade sql-server-<VERSION_BEFORE_2014>\nsudo dnf versionlock add sql-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "sql server 2016", "vendor": "microsoft", "type": "app", "affected": [">= 13.0.4001.0 and < 13.0.4259.0", ">= 13.0.4411.0 and < 13.0.4604.0", ">= 13.0.5026.0 and < 13.0.5101.9", ">= 13.0.5149.0 and < 13.0.5366.0"], "fixed": "13.0.4259.0, 13.0.4604.0, 13.0.5101.9, 13.0.5366.0", "safe": "before 13.0.4001.0", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sql-server-2016 || rpm -q sql-server-2016 || sql-server-2016 --version"}, {"label": "2. UPGRADE to 13.0.4259.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sql-server-2016"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sql-server-2016"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 13.0.4001.0 (Debian / Ubuntu)", "cmd": "apt-cache madison sql-server-2016\nsudo apt install sql-server-2016=<VERSION_BEFORE_13.0.4001.0>\nsudo apt-mark hold sql-server-2016"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sql-server-2016\nsudo dnf downgrade sql-server-2016-<VERSION_BEFORE_13.0.4001.0>\nsudo dnf versionlock add sql-server-2016"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "sql server 2017", "vendor": "microsoft", "type": "app", "affected": [">= 14.0.1000.169 and < 14.0.2027.2", ">= 14.0.3006.16 and < 14.0.3192.2"], "fixed": "14.0.2027.2, 14.0.3192.2", "safe": "before 14.0.1000.169", "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy sql-server-2017 || rpm -q sql-server-2017 || sql-server-2017 --version"}, {"label": "2. UPGRADE to 14.0.2027.2 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade sql-server-2017"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade sql-server-2017"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}, {"label": "3. If no update is available yet, DOWNGRADE to a release before 14.0.1000.169 (Debian / Ubuntu)", "cmd": "apt-cache madison sql-server-2017\nsudo apt install sql-server-2017=<VERSION_BEFORE_14.0.1000.169>\nsudo apt-mark hold sql-server-2017"}, {"label": "3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list sql-server-2017\nsudo dnf downgrade sql-server-2017-<VERSION_BEFORE_14.0.1000.169>\nsudo dnf versionlock add sql-server-2017"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2019-1068"}, {"t": "Patch, Vendor Advisory", "u": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068"}, {"t": "Patch, Vendor Advisory", "u": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068"}], "cwe": ["CWE-20"], "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "N", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": false, "kev_due": "2026-08-29", "kev_added": "2026-08-26", "ransom": false, "priority": 86, "tier": "P0", "why": ["High severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.99076, "pinned": false, "pocs": [{"kind": "poc", "name": "Vulnerability-Playground/CVE-2019-1068 (1 stars)", "url": "https://github.com/Vulnerability-Playground/CVE-2019-1068", "stars": 1}], "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2015-5287", "publisher": "Red Hat, Inc.", "title": "Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability", "summary": "The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.", "cvss": 7.8, "sev": "HIGH", "epss": 0.05003, "kev": true, "added": "2015-12-07", "pub": "2015-12-07T18:59:02.230", "modified": "2026-08-27T04:16:38.280", "products": [{"name": "automatic bug reporting tool", "vendor": "redhat", "type": "app", "affected": ["<= 2.7.0"], "fixed": "newer than 2.7.0", "safe": null, "action": "upgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy automatic-bug-reporting-tool || rpm -q automatic-bug-reporting-tool || automatic-bug-reporting-tool --version"}, {"label": "2. UPGRADE to newer than 2.7.0 (Debian / Ubuntu)", "cmd": "sudo apt update && sudo apt install --only-upgrade automatic-bug-reporting-tool"}, {"label": "2. UPGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "sudo dnf upgrade automatic-bug-reporting-tool"}, {"label": "Note", "cmd": "Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog."}]}, {"name": "linux", "vendor": "oracle", "type": "os", "affected": ["7"], "fixed": null, "safe": "before 7", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux", "vendor": "redhat", "type": "os", "affected": ["6.0", "7.0"], "fixed": null, "safe": "before 6.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux desktop", "vendor": "redhat", "type": "os", "affected": ["7.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux hpc node", "vendor": "redhat", "type": "os", "affected": ["7.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}, {"name": "enterprise linux server", "vendor": "redhat", "type": "os", "affected": ["7.0"], "fixed": null, "safe": "before 7.0", "action": "mitigate", "steps": [{"label": "Check your OS release", "cmd": "cat /etc/os-release; uname -r"}, {"label": "Debian / Ubuntu", "cmd": "sudo apt update && sudo apt full-upgrade"}, {"label": "RHEL / Amazon Linux / Fedora", "cmd": "sudo dnf upgrade --refresh"}, {"label": "Windows", "cmd": "Install the latest cumulative update from Windows Update"}, {"label": "If no patch exists yet", "cmd": "OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2015-5287"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-2505.html"}, {"t": "Patch", "u": "https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e"}, {"t": "Vendor Advisory", "u": "http://rhn.redhat.com/errata/RHSA-2015-2505.html"}, {"t": "Patch", "u": "https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e"}], "cwe": ["CWE-59"], "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attack": {"av": "L", "ac": "L", "pr": "L", "ui": "N"}, "remote": false, "exploit": true, "kev_due": "2026-09-09", "kev_added": "2026-08-26", "ransom": false, "priority": 85, "tier": "P0", "why": ["High severity", "EPSS top 8%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "On your watchlist"], "fix": true, "watched": true, "epss_pct": 0.92212, "pocs": [{"kind": "poc", "name": "HORKimhab/CVE-2015-5287 (0 stars)", "url": "https://github.com/HORKimhab/CVE-2015-5287", "stars": 0}, {"kind": "writeup", "name": "blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into", "url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"}, {"kind": "writeup", "name": "www.exploit-db.com/exploits/38832/", "url": "https://www.exploit-db.com/exploits/38832/"}, {"kind": "edb", "name": "ABRT - sosreport Privilege Escalation (Metasploit)", "url": "https://www.exploit-db.com/exploits/47421"}, {"kind": "edb", "name": "RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege Escalation", "url": "https://www.exploit-db.com/exploits/38832"}, {"kind": "edb", "name": "abrt (Centos 7.1 / Fedora 22) - Local Privilege Escalation", "url": "https://www.exploit-db.com/exploits/38835"}, {"kind": "msf", "name": "ABRT sosreport Privilege Escalation", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/abrt_sosreport_priv_esc.rb"}], "pinned": false, "ssvc": {"exploitation": "active", "automatable": "no", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "retext", "status": "fixed", "fixed": "8.1.0-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-0602a84203", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0602a84203", "note": "FEDORA-2026-0602a84203"}, {"os": "RHEL 7", "pkg": "abrt", "status": "fixed", "fixed": "abrt-2.1.11-35.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:2505\nrpm -q abrt", "url": null, "note": null}, {"os": "RHEL 7", "pkg": "libreport", "status": "fixed", "fixed": "libreport-2.1.11-31.el7", "cmd": "sudo dnf upgrade --advisory=RHSA-2015:2505\nrpm -q libreport", "url": null, "note": null}, {"os": "RHEL 6", "pkg": "abrt", "status": "not-affected", "fixed": null, "cmd": null, "url": null, "note": null}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}, {"id": "CVE-2026-21962", "publisher": "Oracle", "title": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "summary": "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Serv", "cvss": 10.0, "sev": "CRITICAL", "epss": 0.73192, "kev": true, "added": "2026-01-20", "pub": "2026-01-20T22:15:59.110", "modified": "2026-08-25T04:18:11.067", "products": [{"name": "http server", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy http-server || rpm -q http-server || http-server --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison http-server\nsudo apt install http-server=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold http-server"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list http-server\nsudo dnf downgrade http-server-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add http-server"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}, {"name": "weblogic server proxy plug-in", "vendor": "oracle", "type": "app", "affected": ["12.2.1.4.0", "14.1.1.0.0", "14.1.2.0.0"], "fixed": null, "safe": "before 12.2.1.4.0", "action": "downgrade", "steps": [{"label": "1. Check installed version", "cmd": "apt-cache policy weblogic-server-proxy-plug-in || rpm -q weblogic-server-proxy-plug-in || weblogic-server-proxy-plug-in --version"}, {"label": "2. No fixed release: DOWNGRADE to a release before 12.2.1.4.0 (Debian / Ubuntu)", "cmd": "apt-cache madison weblogic-server-proxy-plug-in\nsudo apt install weblogic-server-proxy-plug-in=<VERSION_BEFORE_12.2.1.4.0>\nsudo apt-mark hold weblogic-server-proxy-plug-in"}, {"label": "2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)", "cmd": "dnf --showduplicates list weblogic-server-proxy-plug-in\nsudo dnf downgrade weblogic-server-proxy-plug-in-<VERSION_BEFORE_12.2.1.4.0>\nsudo dnf versionlock add weblogic-server-proxy-plug-in"}, {"label": "Downgrade risk", "cmd": "Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host."}, {"label": "After downgrade", "cmd": "Restart the service, and keep the package held until a fixed release ships."}]}], "refs": [{"t": "NVD", "u": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962"}, {"t": "Patch, Vendor Advisory", "u": "https://www.oracle.com/security-alerts/cpujan2026.html"}], "cwe": ["CWE-284"], "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attack": {"av": "N", "ac": "L", "pr": "N", "ui": "N"}, "remote": true, "exploit": true, "kev_due": "2026-08-27", "kev_added": "2026-08-24", "ransom": false, "priority": 98, "tier": "P0", "why": ["Critical severity", "EPSS top 1%: very likely to be exploited", "Exploited in the wild (CISA KEV)", "Public exploit reference", "CISA SSVC: automatable with total technical impact", "Remotely exploitable, no login, no user action"], "fix": true, "watched": false, "epss_pct": 0.9946, "pinned": false, "pocs": [{"kind": "poc", "name": "samael0x4/CVE-2026-21962 (6 stars)", "url": "https://github.com/samael0x4/CVE-2026-21962", "stars": 6}, {"kind": "poc", "name": "boroeurnprach/Ashwesker-CVE-2026-21962 (6 stars)", "url": "https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962", "stars": 6}, {"kind": "poc", "name": "gregk4sec/cve-2026-21962 (4 stars)", "url": "https://github.com/gregk4sec/cve-2026-21962", "stars": 4}, {"kind": "writeup", "name": "x.com/0xacb/status/2015473216844620280", "url": "https://x.com/0xacb/status/2015473216844620280"}], "ssvc": {"exploitation": "active", "automatable": "yes", "impact": "total"}, "vendors": [{"os": "Fedora 46", "pkg": "uv", "status": "fixed", "fixed": "0.13.5-1.fc46", "cmd": "sudo dnf upgrade --advisory=FEDORA-2026-61ea5a28c6", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-61ea5a28c6", "note": "FEDORA-2026-61ea5a28c6"}], "vendors_checked": "2026-10-23T17:05:33.140855+00:00", "vendor_fixed": true}]}